[ 45.164133][ T26] audit: type=1800 audit(1555809947.083:30): pid=7707 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 Starting mcstransd: [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 49.905892][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 49.905907][ T26] audit: type=1400 audit(1555809951.843:35): avc: denied { map } for pid=7882 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.10.36' (ECDSA) to the list of known hosts. 2019/04/21 01:25:58 fuzzer started [ 56.653683][ T26] audit: type=1400 audit(1555809958.593:36): avc: denied { map } for pid=7891 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=15900 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 2019/04/21 01:26:01 dialing manager at 10.128.0.26:40809 2019/04/21 01:26:01 syscalls: 2463 2019/04/21 01:26:01 code coverage: enabled 2019/04/21 01:26:01 comparison tracing: enabled 2019/04/21 01:26:01 extra coverage: extra coverage is not supported by the kernel 2019/04/21 01:26:01 setuid sandbox: enabled 2019/04/21 01:26:01 namespace sandbox: enabled 2019/04/21 01:26:01 Android sandbox: /sys/fs/selinux/policy does not exist 2019/04/21 01:26:01 fault injection: enabled 2019/04/21 01:26:01 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/04/21 01:26:01 net packet injection: enabled 2019/04/21 01:26:01 net device setup: enabled 01:29:00 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) bind$inet6(r0, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r1 = dup2(r0, r0) write$P9_RLERROR(0xffffffffffffffff, 0x0, 0x13a) sendto$inet6(r0, &(0x7f0000ad6fad)='\x00', 0x1, 0x3, 0x0, 0x0) poll(&(0x7f0000000040)=[{r1}], 0x1, 0xe0) [ 238.581911][ T26] audit: type=1400 audit(1555810140.523:37): avc: denied { map } for pid=7906 comm="syz-executor.0" path="/sys/kernel/debug/kcov" dev="debugfs" ino=69 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 [ 238.682101][ T7907] IPVS: ftp: loaded support on port[0] = 21 [ 238.788258][ T7907] chnl_net:caif_netlink_parms(): no params data found 01:29:00 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000000)=""/43, 0x2b}], 0x1) ioctl$int_in(r0, 0x80002040045010, &(0x7f0000000080)) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000140)) [ 238.836416][ T7907] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.844275][ T7907] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.856367][ T7907] device bridge_slave_0 entered promiscuous mode [ 238.865547][ T7907] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.872886][ T7907] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.880966][ T7907] device bridge_slave_1 entered promiscuous mode [ 238.902958][ T7907] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 238.916945][ T7907] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 238.961844][ T7907] team0: Port device team_slave_0 added [ 238.969159][ T7907] team0: Port device team_slave_1 added [ 238.994328][ T7910] IPVS: ftp: loaded support on port[0] = 21 01:29:01 executing program 2: openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/commit_pending_bools\x00', 0x1, 0x0) [ 239.113338][ T7907] device hsr_slave_0 entered promiscuous mode [ 239.150806][ T7907] device hsr_slave_1 entered promiscuous mode [ 239.211817][ T7907] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.219042][ T7907] bridge0: port 2(bridge_slave_1) entered forwarding state [ 239.226751][ T7907] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.233860][ T7907] bridge0: port 1(bridge_slave_0) entered forwarding state [ 239.265984][ T7912] IPVS: ftp: loaded support on port[0] = 21 01:29:01 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)) ioctl$KVM_SET_PIT2(r1, 0xae71, &(0x7f0000000000)) [ 239.398426][ T7907] 8021q: adding VLAN 0 to HW filter on device bond0 [ 239.480231][ T7907] 8021q: adding VLAN 0 to HW filter on device team0 [ 239.498948][ T7915] IPVS: ftp: loaded support on port[0] = 21 [ 239.510853][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 239.525028][ T22] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.544209][ T22] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.553619][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 239.628872][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 239.638787][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.645963][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 239.656237][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 239.665098][ T22] bridge0: port 2(bridge_slave_1) entered blocking state 01:29:01 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) [ 239.672619][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 239.737358][ T7910] chnl_net:caif_netlink_parms(): no params data found [ 239.774584][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 239.784146][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 239.801916][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 239.838338][ T7907] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 239.861398][ T7907] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 239.939710][ T7913] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 239.966656][ T7913] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 240.003399][ T7913] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 240.018764][ T7912] chnl_net:caif_netlink_parms(): no params data found 01:29:02 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='team_slave_0\x00', 0x10) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1b) listen(r0, 0x0) syz_emit_ethernet(0x74, &(0x7f0000000100)={@local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 240.143299][ T7907] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 240.226148][ T7920] IPVS: ftp: loaded support on port[0] = 21 [ 240.238252][ T26] audit: type=1400 audit(1555810142.173:38): avc: denied { associate } for pid=7907 comm="syz-executor.0" name="syz0" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 240.322078][ T7910] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.329174][ T7910] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.341274][ T7910] device bridge_slave_0 entered promiscuous mode [ 240.357178][ T7912] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.365389][ T7912] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.373866][ T7912] device bridge_slave_0 entered promiscuous mode [ 240.392817][ T7910] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.399878][ T7910] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.409476][ T7910] device bridge_slave_1 entered promiscuous mode [ 240.450562][ T7912] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.457697][ T7912] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.469024][ T7922] IPVS: ftp: loaded support on port[0] = 21 [ 240.476024][ T7912] device bridge_slave_1 entered promiscuous mode [ 240.533349][ T7910] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 240.555224][ T7915] chnl_net:caif_netlink_parms(): no params data found [ 240.574433][ T7910] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 240.592922][ T7912] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 240.658308][ T7910] team0: Port device team_slave_0 added [ 240.666750][ T7912] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 240.693429][ T7915] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.701422][ T7915] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.709448][ T7915] device bridge_slave_0 entered promiscuous mode [ 240.719082][ T7910] team0: Port device team_slave_1 added [ 240.736904][ T7915] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.745809][ T7915] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.754412][ T7915] device bridge_slave_1 entered promiscuous mode 01:29:02 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='map_files\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") getdents(r0, &(0x7f0000000040)=""/141, 0x8d) getdents(r0, &(0x7f0000000280)=""/191, 0x20000298) [ 240.785690][ T7912] team0: Port device team_slave_0 added [ 240.798209][ T7912] team0: Port device team_slave_1 added [ 240.884359][ T7910] device hsr_slave_0 entered promiscuous mode [ 240.930651][ T7910] device hsr_slave_1 entered promiscuous mode [ 240.994408][ T7915] bond0: Enslaving bond_slave_0 as an active interface with an up link 01:29:03 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{}], 0x1}, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) [ 241.035848][ T7915] bond0: Enslaving bond_slave_1 as an active interface with an up link 01:29:03 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{}], 0x1}, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) [ 241.093121][ T7912] device hsr_slave_0 entered promiscuous mode [ 241.131771][ C0] hrtimer: interrupt took 57594 ns [ 241.137243][ T7912] device hsr_slave_1 entered promiscuous mode 01:29:03 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{}], 0x1}, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 01:29:03 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{}], 0x1}, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) [ 241.279735][ T7915] team0: Port device team_slave_0 added [ 241.293642][ T7920] chnl_net:caif_netlink_parms(): no params data found 01:29:03 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) [ 241.323151][ T7915] team0: Port device team_slave_1 added 01:29:03 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) [ 241.513655][ T7915] device hsr_slave_0 entered promiscuous mode [ 241.561012][ T7915] device hsr_slave_1 entered promiscuous mode [ 241.640551][ T7910] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.647595][ T7922] chnl_net:caif_netlink_parms(): no params data found [ 241.667476][ T7920] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.676769][ T7920] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.685664][ T7920] device bridge_slave_0 entered promiscuous mode [ 241.694204][ T7920] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.701589][ T7920] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.709530][ T7920] device bridge_slave_1 entered promiscuous mode [ 241.733730][ T7910] 8021q: adding VLAN 0 to HW filter on device team0 [ 241.764092][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 241.771778][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 241.787427][ T7920] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 241.798003][ T7920] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 241.814706][ T3327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 241.823350][ T3327] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 241.831913][ T3327] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.838989][ T3327] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.847018][ T3327] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 241.891065][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 241.899640][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 241.908245][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.915418][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.923252][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 241.931802][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 241.948378][ T7920] team0: Port device team_slave_0 added [ 241.962137][ T7922] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.969195][ T7922] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.976989][ T7922] device bridge_slave_0 entered promiscuous mode [ 241.985734][ T7922] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.993211][ T7922] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.001398][ T7922] device bridge_slave_1 entered promiscuous mode [ 242.012613][ T7954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 242.021454][ T7954] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 242.029772][ T7954] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 242.038559][ T7954] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 242.047266][ T7954] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 242.058008][ T7920] team0: Port device team_slave_1 added [ 242.085356][ T7922] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 242.172309][ T7920] device hsr_slave_0 entered promiscuous mode [ 242.210677][ T7920] device hsr_slave_1 entered promiscuous mode [ 242.262278][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 242.271115][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 242.281444][ T7922] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 242.293011][ T7912] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.343769][ T7913] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 242.352487][ T7913] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 242.360795][ T7913] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 242.368597][ T7913] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 242.378500][ T7912] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.389380][ T7922] team0: Port device team_slave_0 added [ 242.399032][ T7910] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 242.422478][ T7922] team0: Port device team_slave_1 added [ 242.433413][ T7915] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.454503][ T7954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 242.464135][ T7954] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 242.472772][ T7954] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.479799][ T7954] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.487402][ T7954] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 242.496304][ T7954] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 242.504739][ T7954] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.511800][ T7954] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.519381][ T7954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 242.527961][ T7954] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 242.536747][ T7954] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 242.604264][ T7922] device hsr_slave_0 entered promiscuous mode [ 242.660655][ T7922] device hsr_slave_1 entered promiscuous mode [ 242.706284][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 242.715233][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 242.723692][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 242.732877][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 242.743545][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 242.751450][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 242.759601][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 242.772316][ T7913] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 242.780050][ T7913] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 242.793857][ T7910] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 242.812995][ T7915] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.856005][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 242.877951][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 242.887395][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 242.896444][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 242.905784][ T2988] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.912911][ T2988] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.921107][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 242.935215][ T7912] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 242.964609][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 242.973496][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 242.982460][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.989561][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.025498][ T7912] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 243.034804][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 243.043539][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 243.053125][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 243.062345][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 243.071697][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 243.080173][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 243.088809][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 243.097206][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 243.105364][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 243.113754][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 243.125579][ T7915] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 243.140939][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 243.199323][ T7922] 8021q: adding VLAN 0 to HW filter on device bond0 [ 243.224069][ T7920] 8021q: adding VLAN 0 to HW filter on device bond0 [ 243.237699][ T7915] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 243.262514][ T7922] 8021q: adding VLAN 0 to HW filter on device team0 [ 243.272764][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 243.281516][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 243.299117][ T7920] 8021q: adding VLAN 0 to HW filter on device team0 [ 243.326555][ T7954] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 243.335677][ T7954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 243.344961][ T7954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 243.364797][ T7954] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 243.375112][ T7966] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. [ 243.391077][ T7954] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.398225][ T7954] bridge0: port 1(bridge_slave_0) entered forwarding state [ 243.408303][ T7954] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 243.416302][ T7954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 243.427798][ T7954] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 243.440992][ T7954] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.448038][ T7954] bridge0: port 1(bridge_slave_0) entered forwarding state [ 243.456102][ T7953] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 01:29:05 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet(0x2, 0x3, 0x6) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1}}, {{@in6}, 0x0, @in=@dev}}, 0xe8) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") setsockopt$inet_mreq(r1, 0x0, 0x4, &(0x7f0000000340)={@initdev, @local}, 0x8) 01:29:05 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) [ 243.511594][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 243.520232][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 243.535585][ T2988] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.542749][ T2988] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.557544][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 243.569636][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 243.582601][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 243.591165][ T2988] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.598225][ T2988] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.605919][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 243.614678][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 243.623491][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 243.632608][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 243.643768][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready 01:29:05 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)) ioctl$KVM_SET_PIT2(r1, 0xae71, &(0x7f0000000000)) [ 243.692380][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 243.708847][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 243.731092][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 243.744309][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 243.762483][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 243.778207][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 243.787177][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 243.795726][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 243.804347][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 243.814175][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 243.826073][ T7922] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 243.838513][ T7922] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 243.859757][ T7920] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 243.871812][ T7920] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 243.889655][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 243.899204][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 243.908016][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 243.916358][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 243.925468][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 243.933837][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 243.971151][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 243.985765][ T7922] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 244.014755][ T7920] 8021q: adding VLAN 0 to HW filter on device batadv0 01:29:06 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x201, 0x0) dup2(r0, r1) [ 244.092557][ T7989] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 01:29:06 executing program 5: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockopt$inet6_mtu(r0, 0x29, 0x17, 0x0, 0x0) 01:29:06 executing program 2: socket$inet(0x2, 0x3, 0x1) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x8}}}}}, 0x0) 01:29:06 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{}], 0x1}, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 01:29:06 executing program 1: r0 = eventfd(0x0) splice(r0, 0x0, 0xffffffffffffffff, &(0x7f0000000080), 0x2, 0xe) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl(r1, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 01:29:06 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)) ioctl$KVM_SET_PIT2(r1, 0xae71, &(0x7f0000000000)) 01:29:06 executing program 2: 01:29:06 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{}], 0x1}, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 01:29:06 executing program 4: 01:29:06 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)) ioctl$KVM_SET_PIT2(r1, 0xae71, &(0x7f0000000000)) 01:29:06 executing program 1: r0 = eventfd(0x0) splice(r0, 0x0, 0xffffffffffffffff, &(0x7f0000000080), 0x2, 0xe) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl(r1, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 01:29:06 executing program 2: 01:29:06 executing program 4: 01:29:06 executing program 5: 01:29:06 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{}], 0x1}, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 01:29:06 executing program 4: 01:29:06 executing program 2: 01:29:06 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$KVM_SET_PIT2(r1, 0xae71, &(0x7f0000000000)) 01:29:06 executing program 5: 01:29:06 executing program 1: 01:29:06 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{}], 0x1}, 0x0) ioctl(0xffffffffffffffff, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 01:29:06 executing program 5: 01:29:06 executing program 2: 01:29:06 executing program 4: 01:29:06 executing program 1: 01:29:06 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$KVM_SET_PIT2(r1, 0xae71, &(0x7f0000000000)) 01:29:06 executing program 2: 01:29:06 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{}], 0x1}, 0x0) ioctl(0xffffffffffffffff, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 01:29:07 executing program 4: 01:29:07 executing program 5: 01:29:07 executing program 2: 01:29:07 executing program 1: 01:29:07 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$KVM_SET_PIT2(r1, 0xae71, &(0x7f0000000000)) 01:29:07 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{}], 0x1}, 0x0) ioctl(0xffffffffffffffff, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 01:29:07 executing program 2: 01:29:07 executing program 5: 01:29:07 executing program 4: 01:29:07 executing program 1: 01:29:07 executing program 5: 01:29:07 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{}], 0x1}, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 01:29:07 executing program 4: 01:29:07 executing program 1: 01:29:07 executing program 2: 01:29:07 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)) ioctl$KVM_SET_PIT2(r1, 0xae71, &(0x7f0000000000)) 01:29:07 executing program 2: 01:29:07 executing program 5: 01:29:07 executing program 4: 01:29:07 executing program 1: 01:29:07 executing program 0: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{}], 0x1}, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 01:29:07 executing program 5: 01:29:07 executing program 2: 01:29:07 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") creat(&(0x7f0000000180)='./file0\x00', 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) 01:29:07 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") clone(0x4000003102441ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xffffffffbfffbfff) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) wait4(0x0, 0x0, 0x0, 0x0) 01:29:07 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)) ioctl$KVM_SET_PIT2(r1, 0xae71, &(0x7f0000000000)) 01:29:07 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = io_uring_setup(0x64, &(0x7f0000000040)) io_uring_enter(r1, 0x3, 0x0, 0x1, 0x0, 0x0) 01:29:07 executing program 2: r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x4b4fa7d1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x2100001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) lseek(r0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[], 0x0) 01:29:07 executing program 0: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{}], 0x1}, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) [ 246.024230][ T8133] futex_wake_op: syz-executor.4 tries to shift op by -5; fix this program 01:29:08 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x200000000000000, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000040)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) dup2(r1, r0) 01:29:08 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{}], 0x1}, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 01:29:08 executing program 1: mkdir(&(0x7f000000e000)='./control\x00', 0x0) r0 = open(&(0x7f0000021000)='./control\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000000)='security.selinux\x00', &(0x7f0000000040)='system_u:object_r:gpg_exec_t:s0\x00', 0x20, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000080)) 01:29:08 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)) ioctl$KVM_SET_PIT2(r1, 0xae71, &(0x7f0000000000)) 01:29:08 executing program 0: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{}], 0x1}, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 01:29:08 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r1, &(0x7f0000000040)={0x18, 0x2, {0x3, @empty}}, 0x1e) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = socket(0x20000000000000a, 0x2, 0x0) r3 = dup2(r2, r2) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r1) getsockopt$sock_buf(r2, 0x1, 0x2f, &(0x7f0000b56f40)=""/192, &(0x7f0000004ffc)=0xc0) 01:29:08 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{}], 0x1}, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 01:29:08 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)) ioctl$KVM_SET_PIT2(r1, 0xae71, &(0x7f0000000000)) 01:29:08 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) modify_ldt$write2(0x11, &(0x7f0000000300)={0x132b}, 0x10) modify_ldt$write(0x1, &(0x7f0000000080), 0x10) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="dfc9ceed47eea12d6d816615a823b3c405a8ed64c0610700000018c2136c12ef9d5f6c64982ea199c1a138ba2a2cc26ddd644be9263a3e7013d53adeb24d92dfefa8e3881dc2d4f90d5d3c249039e23e012f99d34a67313fc4093d223c83c875d2012e67a45b00b1f94056de"], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec7) finit_module(0xffffffffffffffff, 0x0, 0x3) ioctl$KVM_NMI(r2, 0xae9a) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffff9c, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f00000000c0)={r3, 0xff, 0x20, 0x0, 0x3}, &(0x7f0000000100)=0x18) 01:29:08 executing program 4: connect$caif(0xffffffffffffffff, &(0x7f0000000000)=@dbg={0x25, 0x10001}, 0x18) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc}, 0x10) getsockname$inet(r0, &(0x7f0000000000), &(0x7f0000000140)=0x1) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0xfef9) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x6000000000) sendmmsg(r1, &(0x7f0000000000), 0x400000000000183, 0x0) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000), 0x1e6}], 0x1) writev(r0, &(0x7f0000000200)=[{&(0x7f00000001c0)="b4", 0x1}], 0x1) close(r0) 01:29:08 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x800002, 0x4002011, r2, 0x0) ioctl$KVM_KVMCLOCK_CTRL(r2, 0xaead) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000070c0)={0x0, 0x0, &(0x7f0000006f00)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="640000003a00010029bd7000000000005408000042911ed11c658c30ac2844e7077e10d4f9e680baa4503911014f7ec43bc54c90872f124b4520257b28ddab3d3e6f924257f8257ae8be678d2f0c62821a3528a92dbb0c5724774b5c299bf6dc806933a6f2618dece1033c3e48879976b9b6c4d569d25763a66bcfb0de521d88fdf98b23eaea41aa5ba7f50fbc14aa2f796bea6853b3c98b5f795551d749a93f45fc1db890e98596224a460147ef14bb529806286c5adbf2f0d5792120d20ee416604b4bd0dad02f46"], 0x1}], 0x1}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:29:08 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{}], 0x1}, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 01:29:08 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)) ioctl$KVM_SET_PIT2(r1, 0xae71, &(0x7f0000000000)) 01:29:08 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='cgroup.events\x00', 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x9, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cgroup.controllers\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x9, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000140)='syzkaller\x00', 0x1, 0xfb, &(0x7f00000003c0)=""/251, 0x0, 0x0, [], 0x0, 0xd}, 0x48) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r1, 0x0, 0x0}, 0x10) openat$cgroup_ro(r2, &(0x7f0000000100)='cpuset.effective_mems\x00', 0x0, 0x0) getpid() openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40) 01:29:08 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = add_key(&(0x7f0000000080)='cifs.spnego\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f00000002c0)="f73837e2d0698eb6eff6239b79ab2fb6ce4ef6e57a0d5722e5d75124764ae3a8eb08254909da780c83c607ba6d9b5ef1830d2df79cb6fd49a6a9d9e9bb4263b57c945b776523f20a79841251fc8da6f8ac79cea422c52584a65bd16e649d1b96f2bb88fbf61e3881292e8c53fbea0ac4974e28a99959e074f779af5c0e4a223f77a635", 0x83, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000200)='keyring\x00', &(0x7f0000000240)=@secondary='builtin_and_secondary_trusted\x00') request_key(&(0x7f0000000880)='cifs.idmap\x00', &(0x7f00000008c0)={'syz', 0x2}, &(0x7f0000000900)='\x00', 0xfffffffffffffffd) bind$ax25(r1, &(0x7f0000000100)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @null, @null]}, 0x48) request_key(0x0, &(0x7f0000000780)={'syz', 0x2}, 0x0, 0xfffffffffffffffb) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000003c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) prctl$PR_GET_PDEATHSIG(0x2, 0x0) r4 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r4, 0x40046205, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000380)={'teql0\x00', {0x2, 0x4e23, @remote}}) dup2(r2, r0) 01:29:08 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc0505510, &(0x7f0000001000)) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x800, 0x0) write$UHID_CREATE(r1, &(0x7f0000000200)={0x0, 'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000100)=""/195, 0xc3, 0x2, 0x4, 0xffffffff, 0xfff, 0x2}, 0x120) [ 247.013440][ T26] audit: type=1400 audit(1555810148.923:39): avc: denied { prog_load } for pid=8194 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 01:29:09 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000440)='/dev/swradio#\x00', 0x1, 0x2) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, 0x0) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r1, 0xc0305615, &(0x7f0000000100)={0x0, {0x9, 0xe}}) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$void(r2, 0xc0045878) perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r3, &(0x7f00000000c0), 0x12) syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$KVM_S390_UCAS_UNMAP(0xffffffffffffffff, 0x4018ae51, &(0x7f0000000040)={0x7, 0x0, 0x7e}) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) 01:29:09 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{}], 0x1}, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 01:29:09 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = add_key(&(0x7f0000000080)='cifs.spnego\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f00000002c0)="f73837e2d0698eb6eff6239b79ab2fb6ce4ef6e57a0d5722e5d75124764ae3a8eb08254909da780c83c607ba6d9b5ef1830d2df79cb6fd49a6a9d9e9bb4263b57c945b776523f20a79841251fc8da6f8ac79cea422c52584a65bd16e649d1b96f2bb88fbf61e3881292e8c53fbea0ac4974e28a99959e074f779af5c0e4a223f77a635", 0x83, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000200)='keyring\x00', &(0x7f0000000240)=@secondary='builtin_and_secondary_trusted\x00') request_key(&(0x7f0000000880)='cifs.idmap\x00', &(0x7f00000008c0)={'syz', 0x2}, &(0x7f0000000900)='\x00', 0xfffffffffffffffd) bind$ax25(r1, &(0x7f0000000100)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @null, @null]}, 0x48) request_key(0x0, &(0x7f0000000780)={'syz', 0x2}, 0x0, 0xfffffffffffffffb) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000003c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) prctl$PR_GET_PDEATHSIG(0x2, 0x0) r4 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r4, 0x40046205, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000380)={'teql0\x00', {0x2, 0x4e23, @remote}}) dup2(r2, r0) 01:29:09 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{}], 0x1}, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 01:29:09 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)) ioctl$KVM_SET_PIT2(r1, 0xae71, &(0x7f0000000000)) [ 247.270685][ T26] audit: type=1400 audit(1555810149.203:40): avc: denied { prog_run } for pid=8194 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 01:29:09 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = add_key(&(0x7f0000000080)='cifs.spnego\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f00000002c0)="f73837e2d0698eb6eff6239b79ab2fb6ce4ef6e57a0d5722e5d75124764ae3a8eb08254909da780c83c607ba6d9b5ef1830d2df79cb6fd49a6a9d9e9bb4263b57c945b776523f20a79841251fc8da6f8ac79cea422c52584a65bd16e649d1b96f2bb88fbf61e3881292e8c53fbea0ac4974e28a99959e074f779af5c0e4a223f77a635", 0x83, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000200)='keyring\x00', &(0x7f0000000240)=@secondary='builtin_and_secondary_trusted\x00') request_key(&(0x7f0000000880)='cifs.idmap\x00', &(0x7f00000008c0)={'syz', 0x2}, &(0x7f0000000900)='\x00', 0xfffffffffffffffd) bind$ax25(r1, &(0x7f0000000100)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @null, @null]}, 0x48) request_key(0x0, &(0x7f0000000780)={'syz', 0x2}, 0x0, 0xfffffffffffffffb) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000003c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) prctl$PR_GET_PDEATHSIG(0x2, 0x0) r4 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r4, 0x40046205, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000380)={'teql0\x00', {0x2, 0x4e23, @remote}}) dup2(r2, r0) 01:29:09 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{}], 0x1}, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 01:29:09 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='cgroup.events\x00', 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x9, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cgroup.controllers\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x9, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000140)='syzkaller\x00', 0x1, 0xfb, &(0x7f00000003c0)=""/251, 0x0, 0x0, [], 0x0, 0xd}, 0x48) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r1, 0x0, 0x0}, 0x10) openat$cgroup_ro(r2, &(0x7f0000000100)='cpuset.effective_mems\x00', 0x0, 0x0) getpid() openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40) [ 247.449052][ T8232] binder: 8232:8232 ioctl 40046205 0 returned -22 01:29:09 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'\x00', 0x400}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x03\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = semget$private(0x0, 0x4, 0x400) semctl$GETPID(r3, 0x3, 0xb, &(0x7f0000001700)=""/4096) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000140)={'bridge0\x00', 0x600}) signalfd(r2, &(0x7f0000000100)={0x5}, 0x8) 01:29:09 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x4e) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000a80)="ad56b6cc0400fb8b65d8b4ac2ca35c6e", 0x10) accept(r1, 0x0, &(0x7f00000001c0)) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYPTR, @ANYRES64, @ANYPTR], 0x3}}, 0x8003) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000a00)={'veth1_to_team\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000a40)={'team0\x00', 0x0}) r7 = fcntl$dupfd(r0, 0x0, r2) r8 = syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0x10000, 0x40840) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000340)=[@text32={0x20, &(0x7f0000000240)="66baf80cb8d43c1689ef66bafc0c66edb9800000c00f3235008000000f300f35b93a0000000f323e67362e670fc7a80d002e0f7922f390c4c3990d80020000004e0fc76ec366baf80cb85283388aef66bafc0c66b8020066ef", 0x59}], 0x1, 0x20, &(0x7f0000000380)=[@cstype0={0x4, 0x9}, @dstype3={0x7, 0x6}], 0x2) sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000000d00)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000ac0)={0x1d4, r3, 0x400, 0x70bd25, 0x25dfdbfd, {}, [{{0x8}, {0x44, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r4}}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0x128, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x7fff}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0xfff}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0xc7}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x101}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r6}, {0x3c, 0x2, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x80}}}]}}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x14}, 0x20000004) ioctl$KDDELIO(r1, 0x4b35, 0x2504) sendto$netrom(r2, &(0x7f00000000c0)="95cfe7c554a0c58219aed52cc3eb7c7411b30a1261b331c8833f3adb106f126dfb56bcac5f3e53b57be5f10ee6033bbbf050b4a51f6fb51b88724807c2b6327476dc47d8ec23f1232b8be35f8714136848f2738940fcaaabb0fd720c43df1d4b0b5bc7a4c07cc45a963b9010c100c320c7eb0c2f2328446f8851b6714dc18ae3b09a8a74ed55c2e4ae010a30a5096ef588c3eba49eca0611a8054e92f8bf4f650531c308172abf57594c8e7b65bfeecf", 0xb0, 0x8002, 0x0, 0x0) recvmmsg(r2, &(0x7f0000006080)=[{{0x0, 0x189, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) 01:29:09 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000180)) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0xae71, &(0x7f0000000000)) 01:29:09 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{}], 0x1}, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 01:29:09 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{}], 0x1}, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) [ 247.737907][ T26] audit: type=1400 audit(1555810149.673:41): avc: denied { create } for pid=8249 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 01:29:09 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={r0, &(0x7f0000000240)="c6b150f4606646bbe1305ca0007c6f5304ad25cd1aaf4ad5074521b9705d491909249cd4bd95cd57920ed8ceb7678838d9de52a50eeeca33b067c80306338dabc90087c2beda7381eece1eecc6165ebba301327472697dce410a8c21fb1bcd410e434efa69bda8b160415a8d7e87cb97e7f7d82a2b242950c93bed0bf93fd481469a461345", &(0x7f0000000040)=""/12}, 0x18) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000340)='/dev/mISDNtimer\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) [ 247.798621][ T26] audit: type=1400 audit(1555810149.703:42): avc: denied { write } for pid=8249 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 01:29:09 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000139ff0)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)="f2", 0x1}], 0x1}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000200)={0x41cb3ed4}, 0x20) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000), &(0x7f0000000140)=0x4) 01:29:09 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{}], 0x1}, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) [ 247.856393][ T26] audit: type=1400 audit(1555810149.713:43): avc: denied { read } for pid=8249 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 01:29:09 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000001c0)=0xc) stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_ENTRY(r0, &(0x7f00000002c0)={0x90, 0xfffffffffffffff5, 0x7, {0x1, 0x0, 0x7, 0xf8d, 0x1, 0x7, {0x6, 0x1ff, 0x8, 0x1, 0x1000, 0x5, 0xfffffffffffffff8, 0x2, 0x8000, 0x81, 0xf34, r1, r2, 0xef7f, 0x1ff}}}, 0x90) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vhost-vsock\x00', 0x2, 0x0) r4 = semget(0x2, 0x1, 0x80) semctl$GETVAL(r4, 0x3, 0xc, &(0x7f00000000c0)=""/254) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r5 = eventfd(0x0) ioctl$VHOST_SET_VRING_CALL(r3, 0x4008af21, &(0x7f0000000080)={0x0, r5}) dup3(r5, r3, 0x0) 01:29:09 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000180)) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0xae71, &(0x7f0000000000)) 01:29:09 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{}], 0x1}, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 01:29:10 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$unix(0x1, 0x5, 0x0) close(r1) close(r0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x10) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/conn_reu\x03\x00\x00\x00\x00\x00\x00\x00=\xae\x9e\x87\xea\xadGr\xebq\xfc2\xbdR.:P\x0er\xe6\x81\xb8\xf7)\xd6_\xbc\xcds\x8dV\xe9\x0e\xb0Cs\xe6\xea\"\xd3\xf8\xa5\xa3\xdcT\x12\x1cd\xb05\xc1\xfe\xed\x04\xf2[\x13\xbf\x12\v\x14\xe8\xb8\x80h?\xe2T\xeb\xe9,?\xf2\x9b\xae\xb7F\xe4z\x87=\x99R\xac\x1d%w\xfaV k\x0fBh\x95>EU\xa2\xae/\xb5\xe4?\xba\x86\x04\xe8\\\x9a\xe0\xe0\x9a\xa1\x1c\f(F\x00', 0x2, 0x0) ioctl$UI_SET_SWBIT(r2, 0x4004556d, 0x7) pipe(&(0x7f00000000c0)) vmsplice(r1, &(0x7f0000000040), 0x3a8, 0x0) 01:29:10 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000380)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f0000000080)) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000340)='/proc/capi/capi20ncci\x00', 0x200, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f00000003c0)=0x1, 0x4) truncate(&(0x7f00000001c0)='./file0/bus\x00', 0x800) mkdir(&(0x7f0000000100)='./file0\x00', 0xfffffffffffffffe) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000000)='./file0/bus\x00', 0x102) r3 = socket(0x10, 0x3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') statx(r4, &(0x7f0000000200)='./file0\x00', 0x6000, 0xc, &(0x7f0000000240)) ioctl$sock_inet_SIOCSIFBRDADDR(r4, 0x891a, &(0x7f0000000080)={'veth1\x00', {0x2, 0x4e23, @remote}}) sendfile(r3, r4, 0x0, 0x1000000000e6) getpeername(r4, &(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f0000000040)=0x80) 01:29:10 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'\x00', 0x400}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x03\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = semget$private(0x0, 0x4, 0x400) semctl$GETPID(r3, 0x3, 0xb, &(0x7f0000001700)=""/4096) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000140)={'bridge0\x00', 0x600}) signalfd(r2, &(0x7f0000000100)={0x5}, 0x8) 01:29:10 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={r0, &(0x7f0000000240)="c6b150f4606646bbe1305ca0007c6f5304ad25cd1aaf4ad5074521b9705d491909249cd4bd95cd57920ed8ceb7678838d9de52a50eeeca33b067c80306338dabc90087c2beda7381eece1eecc6165ebba301327472697dce410a8c21fb1bcd410e434efa69bda8b160415a8d7e87cb97e7f7d82a2b242950c93bed0bf93fd481469a461345", &(0x7f0000000040)=""/12}, 0x18) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000340)='/dev/mISDNtimer\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 01:29:10 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000180)) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0xae71, &(0x7f0000000000)) 01:29:10 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{}], 0x1}, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 01:29:10 executing program 5: timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r0 = gettid() mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r2 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0xffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) tkill(r0, 0x13) write$FUSE_NOTIFY_INVAL_ENTRY(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="51cef63c9c7d3a5e8a14be6990f594e79454fe0399889e2b9b9dac7b1e93f7dddd469cc422a20a37"], 0x1) [ 248.331555][ T8298] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12297 sclass=netlink_route_socket pig=8298 comm=syz-executor.2 01:29:10 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000180)) ioctl$KVM_SET_PIT2(r0, 0xae71, &(0x7f0000000000)) 01:29:10 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x80100, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2a, 0xffffffbf}}, &(0x7f0000000180)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2'}, 0x48) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000280)=0x8, 0x4) ioctl$TCSETSF(r3, 0x5404, &(0x7f00000000c0)={0x3ff, 0x0, 0xfffffffffffffff9, 0x2, 0x5, 0x7, 0x19d, 0x5, 0x4, 0x10000, 0x80, 0x9}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0xc0105303, &(0x7f0000000240)={0x4, 0x2, 0x1}) 01:29:10 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{}], 0x1}, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) [ 248.369334][ T8298] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12297 sclass=netlink_route_socket pig=8298 comm=syz-executor.2 01:29:10 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/validatetrans\x00', 0x1, 0x0) r1 = semget$private(0x0, 0x3, 0x282) semctl$IPC_STAT(r1, 0x0, 0x2, &(0x7f0000000040)=""/147) setsockopt(r0, 0x65, 0x110000000003, &(0x7f00000005c0)='\x00\x00\x00\x00', 0x4) 01:29:10 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/raw\x00') ioctl$CAPI_GET_PROFILE(r0, 0xc0404309, &(0x7f00000000c0)=0x100000000) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x400, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000100)='tls\x00', 0x4) accept4$packet(0xffffffffffffff9c, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14, 0x80000) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x12}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c00000025000800000000000000ff0000000000", @ANYRES32=r2, @ANYBLOB="0e000900f6ffc8ba0b00ffff08000e0000080000"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x80) socket$caif_seqpacket(0x25, 0x5, 0x0) 01:29:10 executing program 4: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x80000, 0x0) setsockopt$inet_int(r0, 0x0, 0x31, &(0x7f0000000080)=0x8e5, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'veth1_to_hsr\x00', &(0x7f0000000200)=@ethtool_regs={0x25}}) 01:29:10 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_S_FBUF(r0, 0x4030560b, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240), {0x40, 0xdce00, 0x32315258}}) r1 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$KVM_NMI(r1, 0xae9a) connect$tipc(r1, &(0x7f0000000040)=@id={0x1e, 0x3, 0x2, {0x4e21}}, 0x10) 01:29:10 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000180)) ioctl$KVM_SET_PIT2(r0, 0xae71, &(0x7f0000000000)) 01:29:10 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{}], 0x1}, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 01:29:10 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x05\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback, 0x1, 0x2, [@multicast1, @empty]}, 0x18) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'lo\x00'}) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x42200, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffff9c, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0xffffffff}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000180)={r3, 0x28, "9f6244c38b74e45034fc4eb4d1326bb18c853a484d293332ebe30660adc608b6e60362110dc582ff"}, &(0x7f00000001c0)=0x30) 01:29:10 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet(0x2, 0x8080b, 0x3ffffffffd) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f0000000000)=0x4, 0xfffffffffffffe4b) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffff9c, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x8000}, &(0x7f0000000080)=0x8) r3 = syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x6, 0x40000) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r3, 0x2) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000000c0)={0x1, 0xffffffffffffff7f, 0x8, 0x0, 0x1ff, 0x8, 0x4, 0x16, r2}, &(0x7f0000000100)=0x20) getsockopt$inet_tcp_int(r1, 0x6, 0x8, &(0x7f0000dc6ffe), &(0x7f0000904000)=0x4) 01:29:10 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x40000, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000140)={0x0, 0x54, 0x0, 0x5, 0xfffffffffffffffb}, &(0x7f0000000180)=0x18) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000001c0)=@assoc_value={r1, 0x1}, 0x8) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cachefiles\x00', 0x800, 0x0) ioctl$RTC_WKALM_SET(r3, 0x4028700f, &(0x7f0000000080)={0x0, 0x1, {0xc, 0x1f, 0x10, 0x8, 0x7, 0xdf27, 0x5, 0xcb, 0xffffffffffffffff}}) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bc070") r4 = socket$netlink(0xa, 0x6, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r4, 0x10d, 0xd, &(0x7f0000001ffc)=0x2, 0x1) ioctl$KDGKBTYPE(r3, 0x4b33, &(0x7f00000000c0)) listen(r4, 0x0) 01:29:10 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 01:29:10 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) setitimer(0x2, &(0x7f0000000100)={{r2, r3/1000+30000}, {r4, r5/1000+10000}}, 0x0) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1000002, 0x40800000000031, 0xffffffffffffffff, 0x0) ioctl$TCGETS(r1, 0x5401, &(0x7f0000000080)) 01:29:10 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x800, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r1, &(0x7f0000000200)={0x9, 0x108, 0xfa00, {r2, 0xb8, "d6f06e", "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"}}, 0x110) getsockopt$inet6_mtu(r0, 0x29, 0x17, 0x0, &(0x7f00000001c0)) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={0x0, 0x8}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000080)={r3, 0x101}, 0x8) 01:29:10 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 01:29:10 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000200)='/dev/video36\x00', 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) sendto$rose(r2, &(0x7f0000000080)="000a2b315724c26e6f2d3af98e8579b482da7df34be618d6d0a76a521db86b0c29aeb78a403e4731b7b35d4f2d2b6cea0de0af2942e7cab0abccc95a4befb2a03577b9e2e46dcbf7e1bf3245d5b8dd7b3f218c809cd961a6c12d2bce12e6b518ecc862d594daa56d144eb0e77c3a141e78757079666fa08037106a22133abd76d583f984c3c3d1e589d7186c979f92fd022d07bf0e04ff77a7a2f2d6c2e7e3ecf2378b0f0d3344e1205296499326d4462cbd3e8ea8a02b720f036612dd9eb0e2a9ddecca80e1101cd16dc2999e463d1bc2efe8a7c10e734dc440da8523b05725bc6aef3bf0c4a13c448ed711c379e941", 0xf0, 0x40, &(0x7f0000000180)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, 0x5, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffd8) 01:29:10 executing program 5: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000180)='ns/ipc\x00') ioctl$FS_IOC_GETFLAGS(r0, 0xb701, 0x0) 01:29:11 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000180)) ioctl$KVM_SET_PIT2(r0, 0xae71, &(0x7f0000000000)) 01:29:11 executing program 1: bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280\x00'}, 0x4f) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="40793c4b03862f92e6d27090f1857fa2e4074d00d3f96e6123f29bbe87f33627d7c6c202e08da023da18aea74e3c8de586cf793656ec81afcc9096e5566e80dea99fc8e246c9085f6e87ceb6dc4c006cc893c7138fad33a2906c60199d28cb1bb598df71815829c59b2b81e7e8fc1800897c744d567377b3f22ddce4944153582d6883075ed65a71f73753d2cfc948ac40323d15459e1c9e170a7b7be3d79cf3c21585b91eb58f0b1d23a3d1a85512226e43b91f06d0a3df9b9f859a26f231f9d4b50b7ee948adde6f6fc8ee", 0xcc) r1 = syz_open_procfs(0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000480)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$PPPOEIOCDFWD(0xffffffffffffffff, 0xb101, 0x0) mmap$binder(&(0x7f00008d8000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$ASHMEM_GET_NAME(r1, 0x81007702, &(0x7f00000004c0)=""/4096) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f00001da000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 01:29:11 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 01:29:11 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000180)='ceph\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000340)='\x00', 0xfffffffffffffff9) r1 = add_key$keyring(&(0x7f0000000500)='keyring\x00', &(0x7f0000000540)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000600)='.req\x00\x00st_key_aut`\x00', &(0x7f0000000780)={'syz', 0x1}, &(0x7f0000000840)='nodev,!)##vmnet0[em0\xaeuserwlan1proc\x00', r1) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000003c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(0xffffffffffffffff, 0xc0405519, 0x0) getresgid(0x0, &(0x7f0000000640), 0x0) fstat(r0, &(0x7f00000007c0)) getresuid(&(0x7f0000000740), 0x0, &(0x7f00000008c0)) mount$fuseblk(&(0x7f00000002c0)='/dev/loop0\x00', &(0x7f00000005c0)='./file0\x00', &(0x7f0000000680)='fuseblk\x00', 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB]) socket$bt_cmtp(0x1f, 0x3, 0x5) sendmsg(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="24000000030307031dfffd944ef20c0020200a0009000100021d85680c1baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc0000000000000000000", 0x4b}], 0x1}, 0x0) request_key(&(0x7f0000000380)='user\x00', &(0x7f00000004c0)={'syz'}, 0x0, 0xfffffffffffffffa) 01:29:11 executing program 5: syz_open_procfs(0x0, &(0x7f0000000000)='net/sockstat\x00') r0 = gettid() sched_getaffinity(r0, 0x8, &(0x7f0000000040)) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r1, 0x80045530, &(0x7f00000001c0)) socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4004700c, 0x345) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, &(0x7f00000000c0)=ANY=[@ANYRES16, @ANYRES32], 0x2) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) mmap(&(0x7f00004e3000/0x10000)=nil, 0x10000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000b78000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0) mbind(&(0x7f0000126000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x4) 01:29:11 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)) ioctl$KVM_SET_PIT2(r1, 0xae71, &(0x7f0000000000)) 01:29:11 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000011fc8)={0x0, 0x0, 0x0}, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) [ 249.272662][ T26] audit: type=1400 audit(1555810151.203:44): avc: denied { map } for pid=8372 comm="syz-executor.1" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=30672 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:hugetlbfs_t:s0 tclass=file permissive=1 01:29:11 executing program 4: r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e20, 0x1fe000000, @empty, 0x9}}, 0x24) r1 = open(&(0x7f0000000040)='./file0\x00', 0x4000, 0x40) ioctl$RTC_ALM_SET(r1, 0x40247007, &(0x7f0000000080)={0x23, 0x3b, 0x6, 0xc, 0x5, 0x752e, 0x0, 0x57, 0x1}) bind$rxrpc(r0, &(0x7f0000000100)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) 01:29:11 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000011fc8)={0x0, 0x0, 0x0}, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) [ 249.465381][ T8390] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=771 sclass=netlink_route_socket pig=8390 comm=syz-executor.2 [ 249.486001][ T26] audit: type=1400 audit(1555810151.313:45): avc: denied { create } for pid=8382 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 01:29:11 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)) ioctl$KVM_SET_PIT2(r1, 0xae71, &(0x7f0000000000)) 01:29:11 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f00000000c0), &(0x7f00000002c0)=0x4) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xa, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, {0x0, @in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x0, 0x10000000000000}}, &(0x7f0000000100)=0xb0) r2 = dup3(r0, r0, 0x80000) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000300)=0x10000, 0x4) getsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0xb) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000200)={r1, @in6={{0xa, 0x4e24, 0x3, @remote, 0x5}}, 0x5, 0x6d6c}, &(0x7f0000000080)=0x90) 01:29:11 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)) ioctl$KVM_SET_PIT2(r1, 0xae71, &(0x7f0000000000)) 01:29:11 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000011fc8)={0x0, 0x0, 0x0}, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) [ 249.646977][ T26] audit: type=1400 audit(1555810151.353:46): avc: denied { bind } for pid=8382 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 249.671903][ T8405] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=771 sclass=netlink_route_socket pig=8405 comm=syz-executor.2 01:29:11 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000001000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x2, 0x7e000000000000, 0x80000001}]}) ioctl$TUNSETIFF(r1, 0x894c, 0x0) 01:29:11 executing program 4: syz_execute_func(&(0x7f0000000100)="91cd80400f776969ef69dc00d98a200fd1b02db5d91b1e0070e4c653fb0fa95ff965be3c3bf2437a020bff8f69289bd19d470f421967450f483bc4c105f5e57c63460f5776c161617878babac401fe5ff6a9c1460000f3b52245e22c892a0f00000028") clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) utimes(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={{0x77359400}, {r0, r1/1000+30000}}) 01:29:11 executing program 2: utimes(0x0, &(0x7f0000000300)={{0x9, 0x2000002}, {0x9, 0x80}}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000000040)=0x20080) 01:29:11 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)}, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 01:29:11 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000180)) ioctl$KVM_SET_PIT2(r0, 0xae71, &(0x7f0000000000)) 01:29:11 executing program 5: syz_open_procfs(0x0, &(0x7f0000000000)='net/sockstat\x00') r0 = gettid() sched_getaffinity(r0, 0x8, &(0x7f0000000040)) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r1, 0x80045530, &(0x7f00000001c0)) socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4004700c, 0x345) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, &(0x7f00000000c0)=ANY=[@ANYRES16, @ANYRES32], 0x2) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) mmap(&(0x7f00004e3000/0x10000)=nil, 0x10000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000b78000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0) mbind(&(0x7f0000126000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x4) 01:29:11 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)}, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 01:29:12 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x7fffffff, 0x30100) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) keyctl$join(0x1, &(0x7f00000000c0)={'syz', 0x1}) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x400000, 0x0) 01:29:12 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000180)) ioctl$KVM_SET_PIT2(r0, 0xae71, &(0x7f0000000000)) 01:29:12 executing program 4: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000300)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000140)='./file0\x00', 0x9, 0x1, &(0x7f0000000180)=[{&(0x7f0000000200)="3f7449b44605846717cb17b5f539c9071aba23d73cb83bb5d01fe6e5944d22690a4ed1e443436ae41ae0d923086e107cff4b78bbddbd011099edc419fcfdb770608ada3df7ab6546e4d353439d795e3f2455d2a85a80f6d60a7e437caeb039ae17354a75068adb11a3175bf461ddfe0c6e22cfd06e724d9fbb14e32a5ba4392e4f8299e4b60eb9a0f7fe99a0251b1df247e372371989cc30ec58bbfe3d96f9d4", 0xa0, 0x33c9}], 0x20, &(0x7f0000000380)={[{@grpid='grpid'}, {@gquota='gquota'}, {@wsync='wsync'}, {@attr2='attr2'}, {@barrier='barrier'}, {@uqnoenforce='uqnoenforce'}, {@nolazytime='nolazytime'}, {@uquota='uquota'}], [{@fscontext={'fscontext', 0x3d, 'root'}}]}) sendmmsg$inet_sctp(r0, &(0x7f00000003c0), 0x3a301e0909ff38c, 0xfc00) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x80200, 0x0) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f0000000100)={0x8, 0x100, 0x7, {0x1, 0x4, 0xff, 0x1000}}) r2 = fcntl$dupfd(r1, 0x406, 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000080)=0x5, 0x4) 01:29:12 executing program 1: r0 = request_key(&(0x7f0000000000)='syzkaller\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000000c0)='\x00', 0xfffffffffffffffd) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000240)) keyctl$read(0xb, r0, &(0x7f0000000040)=""/4, 0x4) r2 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_JPEGCOMP(r2, 0x808c563d, &(0x7f0000000140)) 01:29:12 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xfffffffffffffffe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfada, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="28010000170001000000000000000000e0000001000000000000000000000000000000000000000000000000000000000000ffffac1414007f000001000000000000000000000000fe8000000000000000000000000000aa00"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000e000000100000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\b\x00'/128], 0x128}}, 0x0) r1 = syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x0, 0x202) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, &(0x7f0000000100)={0x3, 0x8000, 0xfffffffffffffffb, 0x1000, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180)={0x0, 0x7}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000280)={r2, 0x1, 0x2, 0x5, 0x9, 0x2, 0xffff, 0x7, {r3, @in6={{0xa, 0x4e20, 0x100000000, @mcast1}}, 0x4, 0x4, 0x6, 0x7, 0x7}}, &(0x7f0000000200)=0xb0) 01:29:12 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000180)) ioctl$KVM_SET_PIT2(r0, 0xae71, &(0x7f0000000000)) 01:29:12 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x48000, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffff9c, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x1, 0x30}, &(0x7f0000000080)=0xc) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f00000000c0)={r2, 0x400}, 0x8) r3 = socket$inet6(0xa, 0x2, 0x0) mincore(&(0x7f0000ff3000/0x2000)=nil, 0x2000, &(0x7f0000000300)=""/208) dup2(r3, r0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 01:29:12 executing program 1: r0 = io_uring_setup(0x64, &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffddc, 0xfa00, {0xffffffffffffffff, &(0x7f00000000c0)={0xffffffffffffffff}, 0x106, 0x2}}, 0xb) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dsp\x00', 0x40, 0x0) ioctl$KDSIGACCEPT(r2, 0x4b4e, 0x8) syz_genetlink_get_family_id$nbd(&(0x7f0000000100)='nbd\x00') mkdirat(r2, &(0x7f00000001c0)='./file0\x00', 0x100) write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f0000000140)={0xf, 0xfffffffffffffc66, 0xfa00, {r1, 0xf}}, 0x12c) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x3, 0x0, 0x0) 01:29:12 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)}, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 01:29:12 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 01:29:12 executing program 4: mkdir(0x0, 0x150) r0 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f00000001c0), 0x80800) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f0000000200)={0x0, 0x0, 0x3226, 0x1f, 0x8, 0x0, 0x9, 0x7ff, {0x0, @in6={{0xa, 0x4e23, 0x8, @mcast2, 0xfff}}, 0x400, 0x7, 0x6b0, 0x32, 0x2}}, &(0x7f00000002c0)=0xb0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000300)={r1, 0x6}, &(0x7f0000000340)=0x8) fstat(0xffffffffffffff9c, 0x0) lstat(0x0, &(0x7f0000000b40)) r2 = socket$pppoe(0x18, 0x1, 0x0) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, 0x0) lsetxattr$trusted_overlay_nlink(&(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000100)={'L-', 0x8001}, 0x28, 0x0) r3 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x3, 0x2) r4 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) connect$inet6(r4, 0x0, 0xfffffffffffffeff) clone(0x13102001fee, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) renameat(r3, &(0x7f0000000140)='./file0\x00', r4, &(0x7f0000000180)='./file0\x00') getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x3) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x80, 0x0) ioctl$sock_ifreq(r2, 0x8997, 0x0) 01:29:12 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)) ioctl$KVM_SET_PIT2(r1, 0xae71, &(0x7f0000000000)) 01:29:12 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070") r1 = socket$inet6(0xa, 0xf, 0x4) setsockopt$inet6_int(r1, 0x29, 0x1000000000000019, &(0x7f0000548000)=0x4001, 0x4) recvmsg(r1, &(0x7f0000000400)={&(0x7f00000002c0)=@nl=@proc, 0x80, 0x0}, 0x2000) fcntl$getownex(r1, 0x10, &(0x7f0000000000)={0x0, 0x0}) syz_open_procfs$namespace(r2, &(0x7f0000000080)='ns/pid_for_children\x00') 01:29:12 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 01:29:12 executing program 1: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000040)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000080)={0x0, r2}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000100)='NET_DM\x00') setsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f0000000200)={0x77359400}, 0x10) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r4, 0x4, 0x70bd28, 0x25dfdbfe, {}, ["", "", ""]}, 0x14}}, 0x407fd) sendmsg$FOU_CMD_GET(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x0, 0xa03, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x8}]}, 0x1c}}, 0x0) 01:29:12 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = open(&(0x7f0000000740)='./file0\x00', 0x400280, 0x0) ioctl$sock_rose_SIOCDELRT(r1, 0x890c, &(0x7f0000000780)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, @bcast, @rose={'rose', 0x0}, 0x5, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f122e123f319bd070") setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x41, 0x1, 0x3}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="542e3075aa66622bb0ff00000000000000", @ANYRES16=r3, @ANYBLOB="3105000000000000000009000000300003001400020073797a6b616c6c6572310000000000000800010000000000080003000000000008000500e0000002"], 0x44}}, 0x0) msgget$private(0x0, 0x402) 01:29:12 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt(r0, 0x80000001, 0x3a2, &(0x7f0000000180)="0d2a94d8e5b126d8ee73494fb9c92819c23844eed4d3c6e2b6d5ac3080", 0x1d) r1 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x2, 0x2) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x4, 0x320, 0x108, 0x108, 0x108, 0x1c8, 0x0, 0x288, 0x288, 0x288, 0x288, 0x288, 0x4, &(0x7f00000000c0), {[{{@ip={@multicast1, @multicast1, 0xff0000ff, 0xff000000, 'hwsim0\x00', 'lo\x00', {0xff}, {}, 0x33, 0x3}, 0x0, 0xc8, 0x108, 0x0, {}, [@common=@inet=@tcp={0x30, 'tcp\x00', 0x0, {0x4e23, 0x4e22, 0x4e20, 0x4e22, 0x0, 0x1, 0x10, 0x9}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x2, 0xffff, 0x2, 0x200, 0x7, 0x5, 0xffffffff]}}}, {{@uncond, 0x0, 0x98, 0xc0}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0xff0000ff, 'nr0\x00', 'rose0\x00', {0xff}, {0xff}, 0x6, 0x0, 0x5}, 0x0, 0x98, 0xc0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x13, 0x3, 0x1}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x380) bind$bt_l2cap(r1, &(0x7f0000000740)={0x1f, 0x80000001, {0x0, 0x1, 0x9, 0x5, 0x20, 0x9}, 0x2, 0x7ff}, 0xe) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={&(0x7f0000000240)='./file0\x00', 0x0, 0x8}, 0x10) ioctl$sock_ifreq(r2, 0x89f0, &(0x7f0000000040)={'sit0\x00\x00\x04\x00', @ifru_addrs=@in={0x2, 0x4e20}}) r3 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x7, 0x400) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f00000002c0)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000300)=0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000340)={0x7, 0x6, 0x200, 0x5f5, 0x0, 0x1, 0x1, 0x0, r4}, 0x20) ioctl$EVIOCSABS20(r3, 0x401845e0, &(0x7f00000001c0)={0x0, 0x3, 0xffffffffffffffff, 0x1f, 0xffffffff, 0x6}) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x111001, 0x0) ioctl$PPPIOCSFLAGS(r5, 0x40047459, &(0x7f0000000200)=0x8000000) ioctl$HDIO_GETGEO(r3, 0x301, &(0x7f0000000380)) ioctl$BLKROGET(r5, 0x125e, &(0x7f0000000800)) 01:29:12 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f0000000080)={@local={0xfe, 0x80, [0x0, 0x3ef, 0x1000000000000, 0x3f00000000004000, 0x0, 0xfffffffe, 0x1107, 0x2000000, 0x0, 0x1000000000000, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000100)={@mcast1, @empty, @loopback, 0x0, 0x0, 0x5}) 01:29:12 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)) ioctl$KVM_SET_PIT2(r1, 0xae71, &(0x7f0000000000)) 01:29:13 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000001c0)={0x6, 0x1001, 0x4, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f00000000c0)=0x1) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000080)=0x1) 01:29:13 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc\x00', 0x0, 0x0) flock(r0, 0xd) r1 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x3ff, 0x90880) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000200)) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x80) prctl$PR_GET_DUMPABLE(0x3) getsockopt$inet_mreq(r2, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000080)=0x8) getegid() ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, {0x0, 0x0, 0x0, 0x1e, 0x0, 0x64}}) 01:29:13 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 01:29:13 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)) ioctl$KVM_SET_PIT2(r1, 0xae71, &(0x7f0000000000)) 01:29:13 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_elf32(r0, &(0x7f0000000180)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0xfffffffffffffffe, 0x9, 0x81, 0x4, 0x3, 0x3e, 0x4, 0x3a8, 0x38, 0x376, 0x7, 0xa9, 0x20, 0x2, 0x5, 0xff3, 0x40}, [{0x7, 0x8, 0x8, 0x6, 0x7ff, 0x9, 0x8000, 0x2}, {0x7, 0x5, 0x8, 0x80, 0x40, 0x0, 0x3001, 0x7}], "6b645b2edfe8c2f6d5348e6d16c29957ecbc7ff98cbb80b9079d83f28ab755794c4cd06492131216633a4380eb6967de58dc472faf4082e8d4fd902f722524b308", [[], [], [], [], [], []]}, 0x6b9) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f00000000c0)={0x3, 0x70, 0x9, 0x20, 0x5, 0x1, 0x0, 0x4, 0x4, 0x2, 0x69b, 0x1, 0x20, 0xfffffffffffffff7, 0x74, 0x1, 0x5fc, 0x81, 0x0, 0x6, 0x80000000, 0x7fffffff, 0x80000000, 0x14e, 0x54bc347, 0x63, 0xd4, 0xfffffffffffffffd, 0xca08, 0x2, 0x3, 0x3, 0x1, 0x7, 0xf9ab, 0x4, 0x3, 0xff, 0x0, 0x200, 0x4, @perf_config_ext={0x2, 0x8}, 0x20000, 0x8001, 0xe38f, 0x7, 0x0, 0x6, 0xc3a}, r1, 0xe, 0xffffffffffffff9c, 0x1) write$binfmt_elf32(r0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/udp\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r2, &(0x7f00000017c0), 0x199, 0x0) 01:29:13 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000001c0)={0x6, 0x1001, 0x4, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f00000000c0)=0x1) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000080)=0x1) 01:29:13 executing program 0: syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{}], 0x1}, 0x0) ioctl(0xffffffffffffffff, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 01:29:13 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x200080) r2 = dup2(r1, r0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc028ae92, &(0x7f0000000040)={0x8, 0x7}) fcntl$setstatus(r1, 0x4, 0x102800) write$binfmt_aout(r0, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], 0x1920) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000000)=0x401, 0x2) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r2, 0x80045700, &(0x7f0000000080)) 01:29:13 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x0, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)) ioctl$KVM_SET_PIT2(r1, 0xae71, &(0x7f0000000000)) 01:29:13 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f0000000080)={@local={0xfe, 0x80, [0x0, 0x3ef, 0x1000000000000, 0x3f00000000004000, 0x0, 0xfffffffe, 0x1107, 0x2000000, 0x0, 0x1000000000000, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000100)={@mcast1, @empty, @loopback, 0x0, 0x0, 0x5}) 01:29:13 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x0, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)) ioctl$KVM_SET_PIT2(r1, 0xae71, &(0x7f0000000000)) 01:29:13 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f0000000080)={@local={0xfe, 0x80, [0x0, 0x3ef, 0x1000000000000, 0x3f00000000004000, 0x0, 0xfffffffe, 0x1107, 0x2000000, 0x0, 0x1000000000000, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000100)={@mcast1, @empty, @loopback, 0x0, 0x0, 0x5}) 01:29:13 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)) ioctl$KVM_SET_PIT2(r1, 0xae71, &(0x7f0000000000)) 01:29:13 executing program 0: syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{}], 0x1}, 0x0) ioctl(0xffffffffffffffff, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 01:29:13 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x100, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x24, r1, 0x20, 0x70bd2d, 0x25dfdbff, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x9}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8011}, 0x40000) r2 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r2, 0x800000c0045009, &(0x7f00000001c0)=0x10) ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000080)) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0xc003, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r2, 0x6685) 01:29:13 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x50, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) syz_open_dev$mouse(&(0x7f0000000140)='/dev/input/mouse#\x00', 0x6, 0x200002) sendto$inet(r2, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r2, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x3e8, 0x0, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x200, 0x0) 01:29:13 executing program 0: syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{}], 0x1}, 0x0) ioctl(0xffffffffffffffff, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 01:29:13 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f0000000080)={@local={0xfe, 0x80, [0x0, 0x3ef, 0x1000000000000, 0x3f00000000004000, 0x0, 0xfffffffe, 0x1107, 0x2000000, 0x0, 0x1000000000000, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000100)={@mcast1, @empty, @loopback, 0x0, 0x0, 0x5}) 01:29:13 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x0, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)) ioctl$KVM_SET_PIT2(r1, 0xae71, &(0x7f0000000000)) 01:29:13 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, &(0x7f0000000180)='cpuacct.usage_sys\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00') lseek(r2, 0x20400000, 0x0) write$P9_RXATTRWALK(r2, &(0x7f0000000080)={0xf}, 0x2000008f) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000000)=0x1, &(0x7f00000000c0)=0x2) madvise(&(0x7f00000d9000/0x600000)=nil, 0x600000, 0x8) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000100)=0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000140)={0x0, r3}) 01:29:13 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{}], 0x1}, 0x0) ioctl(r0, 0x0, &(0x7f0000000140)) 01:29:13 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) setxattr$security_evm(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='security.evm\x00', &(0x7f00000003c0)=@ng={0x4, 0x3, '<)A'}, 0x5, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x101800, 0x0) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000000100), &(0x7f00000002c0)=0x4) 01:29:13 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)) ioctl$KVM_SET_PIT2(r1, 0xae71, &(0x7f0000000000)) 01:29:13 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="d800000018008100e00f80ecdb4cb904021d65ef0b007c05e87c55a1120009000e00009900000000000000000000812fa80004000f0063e3e558f030035c3b61c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683e4f6d0200003f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703", 0xd8}], 0x1}, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000200)='/proc/capi/capi20\x00', 0x0, 0x0) recvfrom$x25(r1, &(0x7f0000000240)=""/4096, 0x1000, 0x40, &(0x7f0000001240)={0x9, @remote={[], 0x2}}, 0x12) r2 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x76e, 0x2000) write$P9_RFLUSH(r2, &(0x7f0000000080)={0x7, 0x6d, 0x2}, 0x7) 01:29:13 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{}], 0x1}, 0x0) ioctl(r0, 0x0, &(0x7f0000000140)) [ 251.913157][ T8592] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 252.022502][ T8592] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 01:29:14 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)) ioctl$KVM_SET_PIT2(r1, 0xae71, &(0x7f0000000000)) 01:29:14 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{}], 0x1}, 0x0) ioctl(r0, 0x0, &(0x7f0000000140)) 01:29:14 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x50, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) syz_open_dev$mouse(&(0x7f0000000140)='/dev/input/mouse#\x00', 0x6, 0x200002) sendto$inet(r2, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r2, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x3e8, 0x0, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x200, 0x0) 01:29:14 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x80, 0x0) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f0000001b00)='bcsh0\x00') syz_mount_image$f2fs(&(0x7f0000000100)='f2fs\x00', &(0x7f0000000140)='./file0\x00', 0x1, 0xa, &(0x7f0000001940)=[{&(0x7f00000003c0)="ec5159903215b23201a10bf41a6d57a1e8834a3265d91d14d4371a56481bb570619ccbde3fd7dd9988db9231eee6c97d4c14c58dc8e59c45c1f6a6e116764894384bac81a9a7876c8173f2a10c0021b92118f4a109dc37c084c26ad6d857f3a50026db71e541b548933905d67d61d8762eca562a0eaf221525ed77c8f768854516c13229f2dc6d5a1314485617c186fe5667a16d77f1d1d66afd8c271fd88f", 0x9f, 0x2}, {&(0x7f0000000480)="00acc0cf976bb6d66b9a675060ddf08abc15ae4d794b6e2f06d95f8f71e31661defd7fa0d85e89c3b4f7746ceeea17daca0b957f2fbf00b0b0f183141496086c160e59faf87123617c4ee0dd258012476c2d49e62be80a8bcd6b5cc249bea34534b5028cd247fc6a507df66803b008f1ac977a9da29afd08ae4e868152fb2ef3be4f0aa1fb82a2d7cf520149bce4ba6fff52ba25acac178b8fa2ab14dfaed907a7c779637e47c868f9cab202c4faa02e7ad6577b66a4523e7cb42a3b622770", 0xbf, 0x9}, {&(0x7f0000000300)="7c6cace30aef5b0d354d353d2e11d26a65302ae5dce538cacf1c1d45ec511c1c1af411a0f1a319394d576b4f48caf784cb632c67ceee1a365289970776a347fe7726e7f26dbf5b39a7199600e3325d69", 0x50, 0x1ff}, {&(0x7f0000000540)="1556eb7715ceb758edc08ef638162dcea7b1abc9e75e662b8e472a06dd60daa927242b7c5919a8b8ab19ef51ec4ddd3f1d833a1a256a3cb1170ffd1978a951d659574df9350a6cf73373efbe7c1476846d3d8882ec3ad72110f7b1681d8896a42036dea2b4699efdbb006d2fb5c8", 0x6e, 0x4}, {&(0x7f00000005c0)="04ed946abdfcea432070eb00a35f31561cd511507e8fcac011d1606a76b8b6569014576107e51b0b92f60f53617b7762708111aadf6438756dc8008df6f7c06f62da6b32dd0e7fd5ce9ae412e7be19c042c0512eae76faa27200af6b61df3c9333339363894aeb9e25c3e1d4c3edc33a6b0384ed1c4d80c38f241289", 0x7c}, {&(0x7f0000000640)="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", 0x1000, 0x4}, {&(0x7f0000001640)="255ff88300a3a39d9f21f6eff829534959889e272bb053672256c46c631d71102178099da553a99aba4d33644d390d1f78689b15f2b44a15e7b6f91377cfe4b78c53ddcb7bd008e3fb7c5ed493f705e9b05710fd0a56a2a9def7efd20696142b3682571a1cb70ec3ff6167b57bdc795733cc274d40721204bf152a911a38e0978cc6d477870dbc08ebfd69c4c6d7251c02942ffb57a42477127f733b467c254c234c5d99713d6eec7c18af8d2a9506d2ff15c8c33b5b423fed858d69b041f941c99719f67cf6180e334e1efb97e224a65cc3e52848c518d7f071bfe1a3deadf9fe86de3e70fd5c692bbae5ce27189b310dd9", 0xf2, 0x9}, {&(0x7f0000001740)="7c3c17fabf6834a02e520c4f0bad59464cd59981937228bcfe75235eaef5295fff6ab9be35bf14cb04d3b4aaebfdde470be98ed7b7c2095afbb389fc6a66787d619a990e205b904090783168", 0x4c, 0x4}, {&(0x7f00000017c0)="65ab8612744145b30881d13d7a5d89eb4b2707ab6ca3f2e5109f9d7805fe210997882d2f28a587815e061aa148aac12d19c46c267c2937852a042ff787eec4dac82920575c851904edd649c0ac560e6483bd2449893b1b9393783860188aae54c76c9e1d1781e570b9f3e9d428d986840c717b13b24afc9ec26fe46c23d4fde83ec0b95c0afd2cde1f048eec523fc9a476eb1c433e67f9aa346325c09431180b5afaba611976f8df6de75b38bbeee4d2a2e047d6c2296c557ac62bcd9d4dc361e1cd8c69db92efb714284e4d674444efdd04b7", 0xd3, 0xff}, {&(0x7f00000018c0)="5fc615b804b6dc5065fc44721ad2418ff458f820d39b86654c26e246849bc7ccb3ada9f09d9575286b9032994cde5fcaae66c4acdfe39eac716cc54557ac1f715f714d81149f7160330acb1e966307c0cfc96b852608994fa831432dd408a1d5ef7c0f0e6626e4e48f18", 0x6a, 0x1000000000}], 0x808, &(0x7f0000001a40)={[{@jqfmt_vfsold='jqfmt=vfsold'}, {@usrjquota={'usrjquota', 0x3d, '/dev/kvm\x00'}}], [{@permit_directio='permit_directio'}, {@obj_type={'obj_type', 0x3d, '/dev/vsock\x00'}}, {@obj_type={'obj_type', 0x3d, 'vboxnet0&)ppp1wlan1security&!eth1)'}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@fsname={'fsname', 0x3d, '#]em1'}}]}) ioctl$FIBMAP(r2, 0x1, &(0x7f0000001b40)=0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="baa000edf26df20f080347640f0058d5640f320f381dec0f221b8d4e9c66b80500000066b94a7b00000f01c1", 0x2c}], 0x1, 0x0, 0x0, 0x0) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ftruncate(r0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$KDDELIO(r4, 0x4b35, 0x3f) socket$inet_udp(0x2, 0x2, 0x0) request_key(&(0x7f0000000080)='encrypted\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0) rt_sigpending(&(0x7f0000001b80), 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, 0x0, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0x400000, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb], 0x1f000}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 01:29:14 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f00000001c0)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x30, 0x1, @ib={0x1b, 0x0, 0x0, {"1e4f6d875243c60d0c03af9be03b0c31"}}}}, 0xa0) 01:29:14 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{}], 0x1}, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, 0x0) 01:29:14 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x20000000021) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xd}, 0x1c) r1 = socket(0xa, 0x40000000002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000140)=@nat={'nat\x00?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x19, 0x2, 0x208, [0x20000600, 0x0, 0x0, 0x20000630, 0x20000660], 0x0, 0x0, &(0x7f0000000600)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0x5, 0x0, 0x0, 'veth0_to_team\x00', 'dummy0\x00', 'dummy0\x00', 'syzkaller1\x00', @broadcast, [], @broadcast, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xffffffffffffffff}}}}, {{{0xb, 0x0, 0x0, 'syzkaller1\x00', 'gretap0\x00', 'vlan0\x00', 'dummy0\x00', @link_local, [], @remote, [], 0x70, 0x70, 0xa8}}, @snat={'snat\x00', 0x10, {{@empty, 0xffffffffffffffff}}}}]}]}, 0x280) sendto$inet6(r0, &(0x7f0000000000), 0xff77, 0x0, 0x0, 0x4d97) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@empty}}, &(0x7f0000000000)=0xe8) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000080)={r2, 0x1, 0x6, @local}, 0x10) 01:29:14 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)) ioctl$KVM_SET_PIT2(r1, 0xae71, &(0x7f0000000000)) 01:29:14 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{}], 0x1}, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, 0x0) 01:29:14 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$midi(0x0, 0xb0e, 0x0) ioctl$SIOCRSGL2CALL(r0, 0x89e5, &(0x7f0000000040)=@bcast) setsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000180)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x7fffffff, 'syz1\x00', 0x0, 0x0, [], [0x0, 0x0, 0x0, 0xffffffffffffff00]}) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="00091809000000000000007cbf9e1bdde809c7e70999cf00"/34], 0x2) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x0) readv(r2, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) [ 252.509607][ T8615] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0xf9a55905) [ 252.575420][ T8615] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock 01:29:14 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x79fd, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x40000, 0x0}, &(0x7f0000000200)="5f39203a1ec6", 0x0, 0x0, 0x0, 0x0, 0x0, 0x6100, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x500}) 01:29:14 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{}], 0x1}, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, 0x0) 01:29:14 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)) ioctl$KVM_SET_PIT2(r1, 0xae71, &(0x7f0000000000)) [ 252.668843][ T8615] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 252.735590][ T8615] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 252.855313][ T8633] kvm: pic: non byte read 01:29:14 executing program 0 (fault-call:3 fault-nth:0): r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{}], 0x1}, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) [ 252.876827][ T8633] kvm: pic: non byte read [ 252.950166][ T8633] kvm: pic: single mode not supported [ 252.950604][ T8633] kvm: pic: level sensitive irq not supported [ 252.974950][ T8633] kvm: pic: single mode not supported [ 252.981426][ T8633] kvm: pic: level sensitive irq not supported [ 252.999239][ T8664] FAULT_INJECTION: forcing a failure. [ 252.999239][ T8664] name failslab, interval 1, probability 0, space 0, times 1 [ 253.009696][ T8633] kvm: pic: single mode not supported [ 253.036030][ T8664] CPU: 0 PID: 8664 Comm: syz-executor.0 Not tainted 5.1.0-rc5+ #77 [ 253.049298][ T8664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 253.059373][ T8664] Call Trace: [ 253.062739][ T8664] dump_stack+0x172/0x1f0 [ 253.067116][ T8664] should_fail.cold+0xa/0x15 [ 253.071725][ T8664] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 253.077576][ T8664] ? ___might_sleep+0x163/0x280 [ 253.082461][ T8664] __should_failslab+0x121/0x190 [ 253.082893][ T8633] kvm: pic: single mode not supported [ 253.082933][ T8633] kvm: pic: level sensitive irq not supported [ 253.087418][ T8664] should_failslab+0x9/0x14 [ 253.087435][ T8664] __kmalloc+0x2dc/0x740 [ 253.087488][ T8664] ? drm_ioctl+0x45c/0xa50 [ 253.101984][ T8633] kvm: pic: single mode not supported [ 253.103536][ T8633] kvm: pic: single mode not supported [ 253.107614][ T8664] drm_ioctl+0x45c/0xa50 [ 253.107647][ T8664] ? drm_connector_property_set_ioctl+0x180/0x180 [ 253.107673][ T8664] ? drm_version+0x3d0/0x3d0 [ 253.107715][ T8664] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 253.124402][ T8633] kvm: pic: level sensitive irq not supported [ 253.127380][ T8633] kvm: pic: single mode not supported [ 253.133523][ T8664] ? ___might_sleep+0x163/0x280 [ 253.133561][ T8664] ? drm_version+0x3d0/0x3d0 [ 253.133597][ T8664] do_vfs_ioctl+0xd6e/0x1390 [ 253.133640][ T8664] ? ioctl_preallocate+0x210/0x210 [ 253.133657][ T8664] ? selinux_file_mprotect+0x620/0x620 [ 253.133675][ T8664] ? __fget+0x381/0x550 [ 253.133704][ T8664] ? ksys_dup3+0x3e0/0x3e0 [ 253.133733][ T8664] ? tomoyo_file_ioctl+0x23/0x30 [ 253.133757][ T8664] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 253.133782][ T8664] ? security_file_ioctl+0x93/0xc0 [ 253.133813][ T8664] ksys_ioctl+0xab/0xd0 [ 253.145182][ T8633] kvm: pic: level sensitive irq not supported [ 253.145863][ T8633] kvm: pic: level sensitive irq not supported [ 253.150261][ T8664] __x64_sys_ioctl+0x73/0xb0 [ 253.150299][ T8664] do_syscall_64+0x103/0x610 [ 253.164635][ T8633] kvm: pic: single mode not supported [ 253.164678][ T8633] kvm: pic: level sensitive irq not supported [ 253.165099][ T8664] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 253.165114][ T8664] RIP: 0033:0x458c29 [ 253.165129][ T8664] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 253.165151][ T8664] RSP: 002b:00007f1d18c73c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 253.174753][ T8633] kvm: pic: level sensitive irq not supported [ 253.176014][ T8633] kvm: pic: level sensitive irq not supported [ 253.180267][ T8664] RAX: ffffffffffffffda RBX: 00007f1d18c73c90 RCX: 0000000000458c29 01:29:15 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x80, 0x0) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f0000001b00)='bcsh0\x00') syz_mount_image$f2fs(&(0x7f0000000100)='f2fs\x00', &(0x7f0000000140)='./file0\x00', 0x1, 0xa, &(0x7f0000001940)=[{&(0x7f00000003c0)="ec5159903215b23201a10bf41a6d57a1e8834a3265d91d14d4371a56481bb570619ccbde3fd7dd9988db9231eee6c97d4c14c58dc8e59c45c1f6a6e116764894384bac81a9a7876c8173f2a10c0021b92118f4a109dc37c084c26ad6d857f3a50026db71e541b548933905d67d61d8762eca562a0eaf221525ed77c8f768854516c13229f2dc6d5a1314485617c186fe5667a16d77f1d1d66afd8c271fd88f", 0x9f, 0x2}, {&(0x7f0000000480)="00acc0cf976bb6d66b9a675060ddf08abc15ae4d794b6e2f06d95f8f71e31661defd7fa0d85e89c3b4f7746ceeea17daca0b957f2fbf00b0b0f183141496086c160e59faf87123617c4ee0dd258012476c2d49e62be80a8bcd6b5cc249bea34534b5028cd247fc6a507df66803b008f1ac977a9da29afd08ae4e868152fb2ef3be4f0aa1fb82a2d7cf520149bce4ba6fff52ba25acac178b8fa2ab14dfaed907a7c779637e47c868f9cab202c4faa02e7ad6577b66a4523e7cb42a3b622770", 0xbf, 0x9}, {&(0x7f0000000300)="7c6cace30aef5b0d354d353d2e11d26a65302ae5dce538cacf1c1d45ec511c1c1af411a0f1a319394d576b4f48caf784cb632c67ceee1a365289970776a347fe7726e7f26dbf5b39a7199600e3325d69", 0x50, 0x1ff}, {&(0x7f0000000540)="1556eb7715ceb758edc08ef638162dcea7b1abc9e75e662b8e472a06dd60daa927242b7c5919a8b8ab19ef51ec4ddd3f1d833a1a256a3cb1170ffd1978a951d659574df9350a6cf73373efbe7c1476846d3d8882ec3ad72110f7b1681d8896a42036dea2b4699efdbb006d2fb5c8", 0x6e, 0x4}, {&(0x7f00000005c0)="04ed946abdfcea432070eb00a35f31561cd511507e8fcac011d1606a76b8b6569014576107e51b0b92f60f53617b7762708111aadf6438756dc8008df6f7c06f62da6b32dd0e7fd5ce9ae412e7be19c042c0512eae76faa27200af6b61df3c9333339363894aeb9e25c3e1d4c3edc33a6b0384ed1c4d80c38f241289", 0x7c}, {&(0x7f0000000640)="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", 0x1000, 0x4}, {&(0x7f0000001640)="255ff88300a3a39d9f21f6eff829534959889e272bb053672256c46c631d71102178099da553a99aba4d33644d390d1f78689b15f2b44a15e7b6f91377cfe4b78c53ddcb7bd008e3fb7c5ed493f705e9b05710fd0a56a2a9def7efd20696142b3682571a1cb70ec3ff6167b57bdc795733cc274d40721204bf152a911a38e0978cc6d477870dbc08ebfd69c4c6d7251c02942ffb57a42477127f733b467c254c234c5d99713d6eec7c18af8d2a9506d2ff15c8c33b5b423fed858d69b041f941c99719f67cf6180e334e1efb97e224a65cc3e52848c518d7f071bfe1a3deadf9fe86de3e70fd5c692bbae5ce27189b310dd9", 0xf2, 0x9}, {&(0x7f0000001740)="7c3c17fabf6834a02e520c4f0bad59464cd59981937228bcfe75235eaef5295fff6ab9be35bf14cb04d3b4aaebfdde470be98ed7b7c2095afbb389fc6a66787d619a990e205b904090783168", 0x4c, 0x4}, {&(0x7f00000017c0)="65ab8612744145b30881d13d7a5d89eb4b2707ab6ca3f2e5109f9d7805fe210997882d2f28a587815e061aa148aac12d19c46c267c2937852a042ff787eec4dac82920575c851904edd649c0ac560e6483bd2449893b1b9393783860188aae54c76c9e1d1781e570b9f3e9d428d986840c717b13b24afc9ec26fe46c23d4fde83ec0b95c0afd2cde1f048eec523fc9a476eb1c433e67f9aa346325c09431180b5afaba611976f8df6de75b38bbeee4d2a2e047d6c2296c557ac62bcd9d4dc361e1cd8c69db92efb714284e4d674444efdd04b7", 0xd3, 0xff}, {&(0x7f00000018c0)="5fc615b804b6dc5065fc44721ad2418ff458f820d39b86654c26e246849bc7ccb3ada9f09d9575286b9032994cde5fcaae66c4acdfe39eac716cc54557ac1f715f714d81149f7160330acb1e966307c0cfc96b852608994fa831432dd408a1d5ef7c0f0e6626e4e48f18", 0x6a, 0x1000000000}], 0x808, &(0x7f0000001a40)={[{@jqfmt_vfsold='jqfmt=vfsold'}, {@usrjquota={'usrjquota', 0x3d, '/dev/kvm\x00'}}], [{@permit_directio='permit_directio'}, {@obj_type={'obj_type', 0x3d, '/dev/vsock\x00'}}, {@obj_type={'obj_type', 0x3d, 'vboxnet0&)ppp1wlan1security&!eth1)'}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@fsname={'fsname', 0x3d, '#]em1'}}]}) ioctl$FIBMAP(r2, 0x1, &(0x7f0000001b40)=0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="baa000edf26df20f080347640f0058d5640f320f381dec0f221b8d4e9c66b80500000066b94a7b00000f01c1", 0x2c}], 0x1, 0x0, 0x0, 0x0) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ftruncate(r0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$KDDELIO(r4, 0x4b35, 0x3f) socket$inet_udp(0x2, 0x2, 0x0) request_key(&(0x7f0000000080)='encrypted\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0) rt_sigpending(&(0x7f0000001b80), 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, 0x0, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0x400000, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb], 0x1f000}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 253.180277][ T8664] RDX: 0000000020000140 RSI: fffffbfffff3ffa7 RDI: 0000000000000003 [ 253.180285][ T8664] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 253.180293][ T8664] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1d18c746d4 [ 253.180302][ T8664] R13: 00000000004bfe5a R14: 00000000004d21b0 R15: 0000000000000004 [ 253.201826][ T8633] kvm: pic: level sensitive irq not supported [ 253.202087][ T8633] kvm: pic: single mode not supported [ 253.233336][ T8633] kvm: pic: single mode not supported 01:29:15 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x50, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) syz_open_dev$mouse(&(0x7f0000000140)='/dev/input/mouse#\x00', 0x6, 0x200002) sendto$inet(r2, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r2, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x3e8, 0x0, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x200, 0x0) 01:29:15 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)) ioctl$KVM_SET_PIT2(r1, 0xae71, &(0x7f0000000000)) 01:29:15 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x79fd, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x40000, 0x0}, &(0x7f0000000200)="5f39203a1ec6", 0x0, 0x0, 0x0, 0x0, 0x0, 0x6100, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x500}) 01:29:15 executing program 0 (fault-call:3 fault-nth:1): r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{}], 0x1}, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) [ 253.431643][ T8678] FAULT_INJECTION: forcing a failure. [ 253.431643][ T8678] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 253.445250][ T8678] CPU: 0 PID: 8678 Comm: syz-executor.0 Not tainted 5.1.0-rc5+ #77 [ 253.445263][ T8678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 253.445273][ T8678] Call Trace: [ 253.445312][ T8678] dump_stack+0x172/0x1f0 [ 253.445348][ T8678] should_fail.cold+0xa/0x15 [ 253.475463][ T8678] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 253.481296][ T8678] ? __lock_acquire+0x548/0x3fb0 [ 253.486253][ T8678] ? _raw_spin_unlock_irq+0x28/0x90 [ 253.491470][ T8678] should_fail_alloc_page+0x50/0x60 [ 253.496675][ T8678] __alloc_pages_nodemask+0x1a1/0x7e0 [ 253.496697][ T8678] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 253.496711][ T8678] ? find_held_lock+0x35/0x130 [ 253.496735][ T8678] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 253.496757][ T8678] cache_grow_begin+0x9c/0x860 [ 253.523119][ T8678] ? drm_ioctl+0x45c/0xa50 [ 253.523137][ T8678] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 253.523157][ T8678] __kmalloc+0x67f/0x740 [ 253.523176][ T8678] ? drm_ioctl+0x45c/0xa50 [ 253.533811][ T8678] drm_ioctl+0x45c/0xa50 [ 253.533828][ T8678] ? drm_connector_property_set_ioctl+0x180/0x180 [ 253.533848][ T8678] ? drm_version+0x3d0/0x3d0 [ 253.533862][ T8678] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 253.533887][ T8678] ? ___might_sleep+0x163/0x280 [ 253.533908][ T8678] ? drm_version+0x3d0/0x3d0 [ 253.533928][ T8678] do_vfs_ioctl+0xd6e/0x1390 [ 253.577641][ T8678] ? ioctl_preallocate+0x210/0x210 [ 253.582757][ T8678] ? selinux_file_mprotect+0x620/0x620 [ 253.588214][ T8678] ? __fget+0x381/0x550 [ 253.592374][ T8678] ? ksys_dup3+0x3e0/0x3e0 [ 253.596798][ T8678] ? tomoyo_file_ioctl+0x23/0x30 [ 253.601739][ T8678] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 253.607978][ T8678] ? security_file_ioctl+0x93/0xc0 [ 253.613091][ T8678] ksys_ioctl+0xab/0xd0 [ 253.617251][ T8678] __x64_sys_ioctl+0x73/0xb0 [ 253.621939][ T8678] do_syscall_64+0x103/0x610 [ 253.626536][ T8678] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 253.632423][ T8678] RIP: 0033:0x458c29 [ 253.636326][ T8678] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 253.655938][ T8678] RSP: 002b:00007f1d18c73c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 253.664355][ T8678] RAX: ffffffffffffffda RBX: 00007f1d18c73c90 RCX: 0000000000458c29 [ 253.672346][ T8678] RDX: 0000000020000140 RSI: fffffbfffff3ffa7 RDI: 0000000000000003 [ 253.680680][ T8678] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 253.688825][ T8678] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1d18c746d4 [ 253.696808][ T8678] R13: 00000000004bfe5a R14: 00000000004d21b0 R15: 0000000000000004 01:29:15 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x79fd, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x40000, 0x0}, &(0x7f0000000200)="5f39203a1ec6", 0x0, 0x0, 0x0, 0x0, 0x0, 0x6100, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x500}) 01:29:15 executing program 0 (fault-call:3 fault-nth:2): r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{}], 0x1}, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 01:29:15 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x79fd, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x40000, 0x0}, &(0x7f0000000200)="5f39203a1ec6", 0x0, 0x0, 0x0, 0x0, 0x0, 0x6100, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x500}) 01:29:15 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)) ioctl$KVM_SET_PIT2(r1, 0xae71, &(0x7f0000000000)) 01:29:15 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x50, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) syz_open_dev$mouse(&(0x7f0000000140)='/dev/input/mouse#\x00', 0x6, 0x200002) sendto$inet(r2, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r2, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x3e8, 0x0, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x200, 0x0) [ 253.852657][ T8691] FAULT_INJECTION: forcing a failure. [ 253.852657][ T8691] name failslab, interval 1, probability 0, space 0, times 0 [ 253.906131][ T8681] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0xf9a55905) [ 253.934346][ T8681] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 253.946287][ T8691] CPU: 0 PID: 8691 Comm: syz-executor.0 Not tainted 5.1.0-rc5+ #77 [ 253.954246][ T8691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 253.964334][ T8691] Call Trace: [ 253.967675][ T8691] dump_stack+0x172/0x1f0 [ 253.972045][ T8691] should_fail.cold+0xa/0x15 [ 253.976684][ T8691] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 253.982509][ T8691] ? ___might_sleep+0x163/0x280 [ 253.987374][ T8691] __should_failslab+0x121/0x190 [ 253.992330][ T8691] should_failslab+0x9/0x14 [ 253.996842][ T8691] kmem_cache_alloc_trace+0x2d1/0x760 [ 254.002224][ T8691] ? ___might_sleep+0x163/0x280 [ 254.007090][ T8691] drm_mode_duplicate+0x48/0x1b0 [ 254.012039][ T8691] drm_add_modes_noedid+0x16a/0x1f0 [ 254.013477][ T8696] kvm: pic: non byte read [ 254.017263][ T8691] vkms_conn_get_modes+0x22/0x40 [ 254.017296][ T8691] drm_helper_probe_single_connector_modes+0x5ea/0x1c00 [ 254.017317][ T8691] ? __mutex_lock+0x3cd/0x1310 [ 254.017334][ T8691] ? drm_mode_getconnector+0x608/0x132e [ 254.017358][ T8691] ? drm_helper_probe_detect+0x1b0/0x1b0 [ 254.026183][ T8696] kvm: pic: non byte read [ 254.026620][ T8691] ? drm_helper_probe_detect+0x1b0/0x1b0 [ 254.026669][ T8691] drm_mode_getconnector+0x726/0x132e [ 254.064781][ T8691] ? drm_connector_property_set_ioctl+0x180/0x180 [ 254.071226][ T8691] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 254.077479][ T8691] drm_ioctl_kernel+0x23e/0x2e0 [ 254.082337][ T8691] ? drm_connector_property_set_ioctl+0x180/0x180 [ 254.088759][ T8691] ? drm_setversion+0x8c0/0x8c0 [ 254.093620][ T8691] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 254.099885][ T8691] ? _copy_from_user+0xdd/0x150 [ 254.104750][ T8691] drm_ioctl+0x545/0xa50 [ 254.108995][ T8691] ? drm_connector_property_set_ioctl+0x180/0x180 [ 254.115421][ T8691] ? drm_version+0x3d0/0x3d0 [ 254.120023][ T8691] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 254.125846][ T8691] ? ___might_sleep+0x163/0x280 [ 254.130711][ T8691] ? drm_version+0x3d0/0x3d0 [ 254.135310][ T8691] do_vfs_ioctl+0xd6e/0x1390 [ 254.139912][ T8691] ? ioctl_preallocate+0x210/0x210 [ 254.145033][ T8691] ? selinux_file_mprotect+0x620/0x620 [ 254.150494][ T8691] ? __fget+0x381/0x550 [ 254.154678][ T8691] ? ksys_dup3+0x3e0/0x3e0 [ 254.159117][ T8691] ? tomoyo_file_ioctl+0x23/0x30 [ 254.164065][ T8691] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 254.170309][ T8691] ? security_file_ioctl+0x93/0xc0 [ 254.175430][ T8691] ksys_ioctl+0xab/0xd0 [ 254.179599][ T8691] __x64_sys_ioctl+0x73/0xb0 [ 254.184221][ T8691] do_syscall_64+0x103/0x610 [ 254.188823][ T8691] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 254.194721][ T8691] RIP: 0033:0x458c29 [ 254.198621][ T8691] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 254.218245][ T8691] RSP: 002b:00007f1d18c73c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 254.226673][ T8691] RAX: ffffffffffffffda RBX: 00007f1d18c73c90 RCX: 0000000000458c29 [ 254.234671][ T8691] RDX: 0000000020000140 RSI: fffffbfffff3ffa7 RDI: 0000000000000003 [ 254.242658][ T8691] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 01:29:16 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000240)=0x9, 0x5f) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @ipv4={[], [], @empty}, 0x3ff}, 0x1c) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}, 0x200}], 0x1, 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.selinux\x00', &(0x7f00000000c0)='system_u:object_r:sshd_key_t:s0\x00', 0x20, 0x2) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x8) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) lsetxattr$security_ima(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='security.ima\x00', &(0x7f0000000180)=@sha1={0x1, "ed76646f460563bb24463fdc9491749b1627a497"}, 0x15, 0x1) 01:29:16 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000001540)=0x1ffe0000) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vfio/vfio\x00', 0x0, 0x0) preadv(r2, &(0x7f00000014c0)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000000180)=""/142, 0x8e}, {&(0x7f0000000240)=""/196, 0xc4}, {&(0x7f0000000000)=""/80, 0x50}, {&(0x7f0000001380)=""/255, 0xff}, {&(0x7f0000001480)=""/16, 0x10}], 0x6, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) [ 254.248941][ T8681] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 254.250666][ T8691] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1d18c746d4 [ 254.250675][ T8691] R13: 00000000004bfe5a R14: 00000000004d21b0 R15: 0000000000000004 [ 254.452424][ T8681] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock 01:29:16 executing program 1: r0 = accept$inet(0xffffffffffffff9c, &(0x7f0000000080)={0x2, 0x0, @remote}, &(0x7f00000000c0)=0x10) getsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000000100)={@rand_addr, @multicast1}, &(0x7f0000000140)=0x8) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") getsockopt$sock_buf(r1, 0x1, 0x15, &(0x7f0000b56f40)=""/192, &(0x7f0000000040)=0xc0) 01:29:16 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c12") ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)) ioctl$KVM_SET_PIT2(r1, 0xae71, &(0x7f0000000000)) 01:29:16 executing program 2: mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x400802, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000080)={0x10000}, 0x1) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000240)) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x12, 0x12, &(0x7f00000000c0)="2e12a879d628d383aad4aac486cc57adde8b"}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000779000/0x1000)=nil, 0x1000}, 0x1}) 01:29:16 executing program 0 (fault-call:3 fault-nth:3): r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{}], 0x1}, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 01:29:16 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x50, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) syz_open_dev$mouse(&(0x7f0000000140)='/dev/input/mouse#\x00', 0x6, 0x200002) sendto$inet(r2, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r2, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x3e8, 0x0, 0x0) 01:29:16 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000000c0)={0x77, 0x0, [0x4b564d02, 0x3]}) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x800) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[], 0x0, 0xfffffffffffffffd}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 254.794435][ T8726] FAULT_INJECTION: forcing a failure. [ 254.794435][ T8726] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 254.807683][ T8726] CPU: 0 PID: 8726 Comm: syz-executor.0 Not tainted 5.1.0-rc5+ #77 [ 254.815929][ T8726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 254.826080][ T8726] Call Trace: [ 254.829394][ T8726] dump_stack+0x172/0x1f0 [ 254.833749][ T8726] should_fail.cold+0xa/0x15 [ 254.838359][ T8726] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 254.844174][ T8726] ? __lock_acquire+0x548/0x3fb0 [ 254.849136][ T8726] should_fail_alloc_page+0x50/0x60 [ 254.854336][ T8726] __alloc_pages_nodemask+0x1a1/0x7e0 [ 254.859712][ T8726] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 254.865451][ T8726] ? find_held_lock+0x35/0x130 [ 254.870250][ T8726] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 254.876081][ T8726] cache_grow_begin+0x9c/0x860 [ 254.880845][ T8726] ? drm_mode_duplicate+0x48/0x1b0 [ 254.885954][ T8726] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 254.892196][ T8726] kmem_cache_alloc_trace+0x67f/0x760 [ 254.897570][ T8726] ? ___might_sleep+0x163/0x280 [ 254.902435][ T8726] drm_mode_duplicate+0x48/0x1b0 [ 254.907376][ T8726] drm_add_modes_noedid+0x16a/0x1f0 [ 254.912597][ T8726] vkms_conn_get_modes+0x22/0x40 [ 254.917551][ T8726] drm_helper_probe_single_connector_modes+0x5ea/0x1c00 [ 254.924488][ T8726] ? __mutex_lock+0x3cd/0x1310 [ 254.929252][ T8726] ? drm_mode_getconnector+0x608/0x132e [ 254.934805][ T8726] ? drm_helper_probe_detect+0x1b0/0x1b0 [ 254.940456][ T8726] ? drm_helper_probe_detect+0x1b0/0x1b0 [ 254.946090][ T8726] drm_mode_getconnector+0x726/0x132e [ 254.951470][ T8726] ? drm_connector_property_set_ioctl+0x180/0x180 [ 254.957899][ T8726] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 254.964140][ T8726] drm_ioctl_kernel+0x23e/0x2e0 [ 254.968989][ T8726] ? drm_connector_property_set_ioctl+0x180/0x180 [ 254.975401][ T8726] ? drm_setversion+0x8c0/0x8c0 [ 254.980252][ T8726] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 254.986491][ T8726] ? _copy_from_user+0xdd/0x150 [ 254.991345][ T8726] drm_ioctl+0x545/0xa50 [ 254.995583][ T8726] ? drm_connector_property_set_ioctl+0x180/0x180 [ 255.002011][ T8726] ? drm_version+0x3d0/0x3d0 [ 255.006596][ T8726] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 255.012429][ T8726] ? ___might_sleep+0x163/0x280 [ 255.017286][ T8726] ? drm_version+0x3d0/0x3d0 [ 255.021891][ T8726] do_vfs_ioctl+0xd6e/0x1390 [ 255.026497][ T8726] ? ioctl_preallocate+0x210/0x210 [ 255.031607][ T8726] ? selinux_file_mprotect+0x620/0x620 [ 255.037072][ T8726] ? __fget+0x381/0x550 [ 255.041235][ T8726] ? ksys_dup3+0x3e0/0x3e0 [ 255.045666][ T8726] ? tomoyo_file_ioctl+0x23/0x30 [ 255.050603][ T8726] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 255.056857][ T8726] ? security_file_ioctl+0x93/0xc0 [ 255.061972][ T8726] ksys_ioctl+0xab/0xd0 [ 255.066130][ T8726] __x64_sys_ioctl+0x73/0xb0 [ 255.070725][ T8726] do_syscall_64+0x103/0x610 [ 255.075318][ T8726] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 255.081205][ T8726] RIP: 0033:0x458c29 [ 255.085096][ T8726] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 255.104693][ T8726] RSP: 002b:00007f1d18c73c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 255.113097][ T8726] RAX: ffffffffffffffda RBX: 00007f1d18c73c90 RCX: 0000000000458c29 [ 255.121065][ T8726] RDX: 0000000020000140 RSI: fffffbfffff3ffa7 RDI: 0000000000000003 [ 255.129028][ T8726] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 255.136992][ T8726] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1d18c746d4 01:29:17 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c12") ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)) ioctl$KVM_SET_PIT2(r1, 0xae71, &(0x7f0000000000)) [ 255.144957][ T8726] R13: 00000000004bfe5a R14: 00000000004d21b0 R15: 0000000000000004 01:29:17 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') ioctl$TIOCGPTPEER(0xffffffffffffff9c, 0x5441, 0x0) readahead(0xffffffffffffffff, 0x100000000000000, 0x6) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000240)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x75b, &(0x7f0000000280)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0xfffffeee}], 0x4, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(0x0, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) connect$inet(r2, &(0x7f0000000200)={0x2, 0x4e22, @broadcast}, 0x10) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000100), 0x0) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000000c0)) tkill(0x0, 0x1104400000013) preadv(r1, &(0x7f0000000480), 0x1000000000000214, 0x0) 01:29:17 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000180)="b63db85e1e8d0900000003eaff3df0011dcc606aed53d2bcc2feff04000000ffffe22c9b160096aa1faeae", 0x2b) r1 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) clock_gettime(0x0, 0x0) shutdown(r1, 0x0) 01:29:17 executing program 0 (fault-call:3 fault-nth:4): r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{}], 0x1}, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 01:29:17 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x50, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) syz_open_dev$mouse(&(0x7f0000000140)='/dev/input/mouse#\x00', 0x6, 0x200002) sendto$inet(r2, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r2, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x3e8, 0x0, 0x0) [ 255.333241][ T8744] *** Guest State *** [ 255.374877][ T8744] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 255.416339][ T8744] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 255.429110][ T8744] CR3 = 0x0000000000000000 [ 255.438131][ T8744] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 255.448101][ T8744] RFLAGS=0xffffffffffffffff DR7 = 0x0000000000000400 [ 255.459081][ T8744] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 01:29:17 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c12") ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)) ioctl$KVM_SET_PIT2(r1, 0xae71, &(0x7f0000000000)) [ 255.469871][ T8744] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 255.479302][ T8744] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 255.518679][ T8749] sg_write: data in/out 625914/1 bytes for SCSI command 0x16-- guessing data in; [ 255.518679][ T8749] program syz-executor.1 not setting count and/or reply_len properly [ 255.524518][ T8744] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 01:29:17 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319b") ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)) ioctl$KVM_SET_PIT2(r1, 0xae71, &(0x7f0000000000)) [ 255.686761][ T8758] FAULT_INJECTION: forcing a failure. [ 255.686761][ T8758] name failslab, interval 1, probability 0, space 0, times 0 [ 255.692933][ T8744] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 01:29:17 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000180)="b63db85e1e8d0900000003eaff3df0011dcc606aed53d2bcc2feff04000000ffffe22c9b160096aa1faeae", 0x2b) r1 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) clock_gettime(0x0, 0x0) shutdown(r1, 0x0) [ 255.750582][ T8744] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 255.783979][ T8744] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 255.841943][ T8744] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 255.887806][ T8765] sg_write: data in/out 625914/1 bytes for SCSI command 0x16-- guessing data in; [ 255.887806][ T8765] program syz-executor.1 not setting count and/or reply_len properly 01:29:17 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319b") ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)) ioctl$KVM_SET_PIT2(r1, 0xae71, &(0x7f0000000000)) [ 255.931316][ T8744] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 255.970606][ T8744] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 256.030496][ T8758] CPU: 1 PID: 8758 Comm: syz-executor.0 Not tainted 5.1.0-rc5+ #77 [ 256.038427][ T8758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 256.048571][ T8758] Call Trace: [ 256.051881][ T8758] dump_stack+0x172/0x1f0 [ 256.056229][ T8758] should_fail.cold+0xa/0x15 [ 256.060837][ T8758] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 256.066671][ T8758] ? ___might_sleep+0x163/0x280 [ 256.071535][ T8758] __should_failslab+0x121/0x190 [ 256.076475][ T8758] should_failslab+0x9/0x14 [ 256.080975][ T8758] kmem_cache_alloc_trace+0x2d1/0x760 [ 256.086347][ T8758] ? ___might_sleep+0x163/0x280 [ 256.091201][ T8758] drm_mode_duplicate+0x48/0x1b0 [ 256.096147][ T8758] drm_add_modes_noedid+0x16a/0x1f0 [ 256.101351][ T8758] vkms_conn_get_modes+0x22/0x40 [ 256.106293][ T8758] drm_helper_probe_single_connector_modes+0x5ea/0x1c00 [ 256.113232][ T8758] ? __mutex_lock+0x3cd/0x1310 [ 256.117994][ T8758] ? drm_mode_getconnector+0x608/0x132e [ 256.123557][ T8758] ? drm_helper_probe_detect+0x1b0/0x1b0 [ 256.129205][ T8758] ? drm_helper_probe_detect+0x1b0/0x1b0 [ 256.134839][ T8758] drm_mode_getconnector+0x726/0x132e [ 256.140223][ T8758] ? drm_connector_property_set_ioctl+0x180/0x180 [ 256.146660][ T8758] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 256.152922][ T8758] drm_ioctl_kernel+0x23e/0x2e0 [ 256.157772][ T8758] ? drm_connector_property_set_ioctl+0x180/0x180 [ 256.164182][ T8758] ? drm_setversion+0x8c0/0x8c0 [ 256.169035][ T8758] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 256.175272][ T8758] ? _copy_from_user+0xdd/0x150 [ 256.180123][ T8758] drm_ioctl+0x545/0xa50 [ 256.184367][ T8758] ? drm_connector_property_set_ioctl+0x180/0x180 [ 256.190789][ T8758] ? drm_version+0x3d0/0x3d0 [ 256.195377][ T8758] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 256.201190][ T8758] ? ___might_sleep+0x163/0x280 [ 256.206046][ T8758] ? drm_version+0x3d0/0x3d0 [ 256.210647][ T8758] do_vfs_ioctl+0xd6e/0x1390 [ 256.215240][ T8758] ? ioctl_preallocate+0x210/0x210 [ 256.220349][ T8758] ? selinux_file_mprotect+0x620/0x620 [ 256.225802][ T8758] ? __fget+0x381/0x550 [ 256.229959][ T8758] ? ksys_dup3+0x3e0/0x3e0 [ 256.234381][ T8758] ? tomoyo_file_ioctl+0x23/0x30 [ 256.239315][ T8758] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 256.245553][ T8758] ? security_file_ioctl+0x93/0xc0 [ 256.250666][ T8758] ksys_ioctl+0xab/0xd0 [ 256.254822][ T8758] __x64_sys_ioctl+0x73/0xb0 [ 256.259412][ T8758] do_syscall_64+0x103/0x610 [ 256.264003][ T8758] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 256.269891][ T8758] RIP: 0033:0x458c29 [ 256.273874][ T8758] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 256.293471][ T8758] RSP: 002b:00007f1d18c73c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 256.301882][ T8758] RAX: ffffffffffffffda RBX: 00007f1d18c73c90 RCX: 0000000000458c29 [ 256.309845][ T8758] RDX: 0000000020000140 RSI: fffffbfffff3ffa7 RDI: 0000000000000003 [ 256.317809][ T8758] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 256.325777][ T8758] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1d18c746d4 [ 256.333742][ T8758] R13: 00000000004bfe5a R14: 00000000004d21b0 R15: 0000000000000004 [ 256.351742][ T8744] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 256.375711][ T8744] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 256.388964][ T8744] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 256.397863][ T8744] Interruptibility = 00000000 ActivityState = 00000000 [ 256.411057][ T8744] *** Host State *** [ 256.415180][ T8744] RIP = 0xffffffff811b4980 RSP = 0xffff8880505378e0 [ 256.450997][ T8744] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 256.466263][ T8744] FSBase=00007f188c583700 GSBase=ffff8880ae800000 TRBase=fffffe0000003000 [ 256.486995][ T8744] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 01:29:18 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000180)="b63db85e1e8d0900000003eaff3df0011dcc606aed53d2bcc2feff04000000ffffe22c9b160096aa1faeae", 0x2b) r1 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) clock_gettime(0x0, 0x0) shutdown(r1, 0x0) [ 256.546324][ T8744] CR0=0000000080050033 CR3=000000008b7ab000 CR4=00000000001426f0 01:29:18 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319b") ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)) ioctl$KVM_SET_PIT2(r1, 0xae71, &(0x7f0000000000)) [ 256.624931][ T8744] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201360 [ 256.670501][ T8744] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 256.686328][ T8744] *** Control State *** [ 256.696103][ T8784] sg_write: data in/out 625914/1 bytes for SCSI command 0x16-- guessing data in; [ 256.696103][ T8784] program syz-executor.1 not setting count and/or reply_len properly [ 256.720343][ T8744] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3 [ 256.740363][ T8744] EntryControls=0000d1ff ExitControls=002fefff [ 256.760399][ T8744] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 256.780390][ T8744] VMEntry: intr_info=8000030e errcode=00000000 ilen=00000000 [ 256.803470][ T8744] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 256.825504][ T8744] reason=80000021 qualification=0000000000000000 [ 256.843945][ T8744] IDTVectoring: info=00000000 errcode=00000000 [ 256.861397][ T8744] TSC Offset = 0xffffff7554733030 [ 256.891619][ T8744] TPR Threshold = 0x00 [ 256.895724][ T8744] EPT pointer = 0x000000009182601e 01:29:18 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000000c0)={0x77, 0x0, [0x4b564d02, 0x3]}) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x800) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[], 0x0, 0xfffffffffffffffd}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:29:18 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') ioctl$TIOCGPTPEER(0xffffffffffffff9c, 0x5441, 0x0) readahead(0xffffffffffffffff, 0x100000000000000, 0x6) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000240)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x75b, &(0x7f0000000280)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0xfffffeee}], 0x4, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(0x0, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) connect$inet(r2, &(0x7f0000000200)={0x2, 0x4e22, @broadcast}, 0x10) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000100), 0x0) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000000c0)) tkill(0x0, 0x1104400000013) preadv(r1, &(0x7f0000000480), 0x1000000000000214, 0x0) 01:29:18 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') ioctl$TIOCGPTPEER(0xffffffffffffff9c, 0x5441, 0x0) readahead(0xffffffffffffffff, 0x100000000000000, 0x6) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000240)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x75b, &(0x7f0000000280)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0xfffffeee}], 0x4, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(0x0, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) connect$inet(r2, &(0x7f0000000200)={0x2, 0x4e22, @broadcast}, 0x10) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000100), 0x0) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000000c0)) tkill(0x0, 0x1104400000013) preadv(r1, &(0x7f0000000480), 0x1000000000000214, 0x0) 01:29:18 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd0") ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)) ioctl$KVM_SET_PIT2(r1, 0xae71, &(0x7f0000000000)) 01:29:19 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{}], 0x1}, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 01:29:19 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x50, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) syz_open_dev$mouse(&(0x7f0000000140)='/dev/input/mouse#\x00', 0x6, 0x200002) sendto$inet(r2, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x3e8, 0x0, 0x0) 01:29:19 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd0") ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)) ioctl$KVM_SET_PIT2(r1, 0xae71, &(0x7f0000000000)) 01:29:19 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x50, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) syz_open_dev$mouse(&(0x7f0000000140)='/dev/input/mouse#\x00', 0x6, 0x200002) sendto$inet(r2, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x3e8, 0x0, 0x0) 01:29:19 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{}], 0x1}, 0x0) ioctl(r0, 0xfffffbff00000002, &(0x7f0000000140)) 01:29:19 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x50, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) syz_open_dev$mouse(&(0x7f0000000140)='/dev/input/mouse#\x00', 0x6, 0x200002) sendto$inet(r2, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x3e8, 0x0, 0x0) 01:29:19 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') ioctl$TIOCGPTPEER(0xffffffffffffff9c, 0x5441, 0x0) readahead(0xffffffffffffffff, 0x100000000000000, 0x6) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000240)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x75b, &(0x7f0000000280)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0xfffffeee}], 0x4, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(0x0, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) connect$inet(r2, &(0x7f0000000200)={0x2, 0x4e22, @broadcast}, 0x10) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000100), 0x0) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000000c0)) tkill(0x0, 0x1104400000013) preadv(r1, &(0x7f0000000480), 0x1000000000000214, 0x0) 01:29:19 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd0") ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)) ioctl$KVM_SET_PIT2(r1, 0xae71, &(0x7f0000000000)) [ 257.608209][ T8799] *** Guest State *** [ 257.663405][ T8799] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 257.798989][ T8799] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 257.941193][ T8799] CR3 = 0x0000000000000000 [ 257.972072][ T8799] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 258.045505][ T8799] RFLAGS=0xffffffffffffffff DR7 = 0x0000000000000400 [ 258.063003][ T8799] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 258.070963][ T8799] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 258.080359][ T8799] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 258.089062][ T8799] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 258.097831][ T8799] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 258.106567][ T8799] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 258.115427][ T8799] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 258.124149][ T8799] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 258.132871][ T8799] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 258.141588][ T8799] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 258.150322][ T8799] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 258.158999][ T8799] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 258.166154][ T8799] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 258.174351][ T8799] Interruptibility = 00000000 ActivityState = 00000000 [ 258.181337][ T8799] *** Host State *** [ 258.185240][ T8799] RIP = 0xffffffff811b4980 RSP = 0xffff88806051f8e0 [ 258.192080][ T8799] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 258.199195][ T8799] FSBase=00007f188c5a5700 GSBase=ffff8880ae900000 TRBase=fffffe0000003000 [ 258.207736][ T8799] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 258.216298][ T8799] CR0=0000000080050033 CR3=000000008a7d6000 CR4=00000000001426e0 [ 258.224115][ T8799] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201360 [ 258.224128][ T8799] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 258.224133][ T8799] *** Control State *** [ 258.224141][ T8799] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3 [ 258.224149][ T8799] EntryControls=0000d1ff ExitControls=002fefff [ 258.224161][ T8799] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 258.224170][ T8799] VMEntry: intr_info=8000030e errcode=00000000 ilen=00000000 [ 258.224178][ T8799] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 258.224186][ T8799] reason=80000021 qualification=0000000000000000 [ 258.224193][ T8799] IDTVectoring: info=00000000 errcode=00000000 01:29:20 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000000c0)={0x77, 0x0, [0x4b564d02, 0x3]}) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x800) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[], 0x0, 0xfffffffffffffffd}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:29:20 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{}], 0x1}, 0x0) ioctl(r0, 0xfffffbff00004b47, &(0x7f0000000140)) 01:29:20 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x50, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r2, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x3e8, 0x0, 0x0) 01:29:20 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000180)) ioctl$KVM_SET_PIT2(r1, 0xae71, &(0x7f0000000000)) 01:29:20 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') ioctl$TIOCGPTPEER(0xffffffffffffff9c, 0x5441, 0x0) readahead(0xffffffffffffffff, 0x100000000000000, 0x6) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000240)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x75b, &(0x7f0000000280)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0xfffffeee}], 0x4, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(0x0, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) connect$inet(r2, &(0x7f0000000200)={0x2, 0x4e22, @broadcast}, 0x10) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000100), 0x0) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000000c0)) tkill(0x0, 0x1104400000013) preadv(r1, &(0x7f0000000480), 0x1000000000000214, 0x0) [ 258.224200][ T8799] TSC Offset = 0xffffff7436c03166 [ 258.224205][ T8799] TPR Threshold = 0x00 [ 258.224213][ T8799] EPT pointer = 0x000000008b22e01e 01:29:20 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{}], 0x1}, 0x0) ioctl(r0, 0xfffffbff00004b49, &(0x7f0000000140)) 01:29:20 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000180)) ioctl$KVM_SET_PIT2(r1, 0xae71, &(0x7f0000000000)) 01:29:20 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{}], 0x1}, 0x0) ioctl(r0, 0xfffffbff0000541b, &(0x7f0000000140)) 01:29:20 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x50, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r2, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r2, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x3e8, 0x0, 0x0) [ 258.637406][ T8855] *** Guest State *** [ 258.650537][ T8855] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 258.660111][ T8855] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 258.691969][ T8855] CR3 = 0x0000000000000000 [ 258.696428][ T8855] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 258.770782][ T8855] RFLAGS=0xffffffffffffffff DR7 = 0x0000000000000400 01:29:20 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{}], 0x1}, 0x0) ioctl(r0, 0xfffffbff00005421, &(0x7f0000000140)) [ 258.818030][ T8855] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 258.870685][ T8855] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 258.900645][ T8855] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 258.921746][ T8855] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 258.966144][ T8855] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 258.996365][ T8855] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 01:29:21 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') ioctl$TIOCGPTPEER(0xffffffffffffff9c, 0x5441, 0x0) readahead(0xffffffffffffffff, 0x100000000000000, 0x6) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000240)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x75b, &(0x7f0000000280)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0xfffffeee}], 0x4, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(0x0, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) connect$inet(r2, &(0x7f0000000200)={0x2, 0x4e22, @broadcast}, 0x10) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000100), 0x0) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000000c0)) tkill(0x0, 0x1104400000013) preadv(r1, &(0x7f0000000480), 0x1000000000000214, 0x0) 01:29:21 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000180)) ioctl$KVM_SET_PIT2(r1, 0xae71, &(0x7f0000000000)) [ 259.020489][ T8855] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 259.082238][ T8855] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 259.106420][ T8855] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 259.161933][ T8855] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 259.190383][ T8855] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 259.243141][ T8855] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 259.283179][ T8855] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 259.315593][ T8855] Interruptibility = 00000000 ActivityState = 00000000 [ 259.347014][ T8855] *** Host State *** [ 259.356335][ T8855] RIP = 0xffffffff811b4980 RSP = 0xffff888081dcf8e0 [ 259.386220][ T8855] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 259.426246][ T8855] FSBase=00007f188c584700 GSBase=ffff8880ae900000 TRBase=fffffe0000003000 [ 259.452526][ T8855] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 259.469723][ T8855] CR0=0000000080050033 CR3=000000008f73e000 CR4=00000000001426e0 [ 259.492781][ T8855] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201360 [ 259.510745][ T8855] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 259.519830][ T8855] *** Control State *** [ 259.524386][ T8855] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3 [ 259.532046][ T8855] EntryControls=0000d1ff ExitControls=002fefff [ 259.538385][ T8855] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 259.546463][ T8855] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 259.572906][ T8855] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 259.610491][ T8855] reason=80000021 qualification=0000000000000000 [ 259.617557][ T8855] IDTVectoring: info=00000000 errcode=00000000 [ 259.640564][ T8855] TSC Offset = 0xffffff738db0dacc [ 259.645645][ T8855] TPR Threshold = 0x00 [ 259.649750][ T8855] EPT pointer = 0x00000000a930201e 01:29:21 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x50, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r2, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r2, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x3e8, 0x0, 0x0) 01:29:21 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x50, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r2, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r2, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x3e8, 0x0, 0x0) 01:29:21 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{}], 0x1}, 0x0) ioctl(r0, 0xfffffbff00005450, &(0x7f0000000140)) 01:29:21 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, 0x0) ioctl$KVM_SET_PIT2(r1, 0xae71, &(0x7f0000000000)) 01:29:22 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') ioctl$TIOCGPTPEER(0xffffffffffffff9c, 0x5441, 0x0) readahead(0xffffffffffffffff, 0x100000000000000, 0x6) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000240)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x75b, &(0x7f0000000280)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0xfffffeee}], 0x4, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(0x0, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) connect$inet(r2, &(0x7f0000000200)={0x2, 0x4e22, @broadcast}, 0x10) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000100), 0x0) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000000c0)) tkill(0x0, 0x1104400000013) preadv(r1, &(0x7f0000000480), 0x1000000000000214, 0x0) 01:29:22 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{}], 0x1}, 0x0) ioctl(r0, 0xfffffbff00005451, &(0x7f0000000140)) 01:29:22 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x50, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r2, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r2, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x3e8, 0x0, 0x0) 01:29:22 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') ioctl$TIOCGPTPEER(0xffffffffffffff9c, 0x5441, 0x0) readahead(0xffffffffffffffff, 0x100000000000000, 0x6) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000240)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x75b, &(0x7f0000000280)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0xfffffeee}], 0x4, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(0x0, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) connect$inet(r1, &(0x7f0000000200)={0x2, 0x4e22, @broadcast}, 0x10) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000100), 0x0) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000000c0)) tkill(0x0, 0x1104400000013) 01:29:22 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, 0x0) ioctl$KVM_SET_PIT2(r1, 0xae71, &(0x7f0000000000)) 01:29:22 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x50, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) syz_open_dev$mouse(&(0x7f0000000140)='/dev/input/mouse#\x00', 0x6, 0x200002) sendto$inet(r2, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r2, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x3e8, 0x0, 0x0) 01:29:22 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x50, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x3e8, 0x0, 0x0) 01:29:22 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{}], 0x1}, 0x0) ioctl(r0, 0xfffffbff00005452, &(0x7f0000000140)) 01:29:22 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x50, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x3e8, 0x0, 0x0) 01:29:22 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, 0x0) ioctl$KVM_SET_PIT2(r1, 0xae71, &(0x7f0000000000)) 01:29:22 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{}], 0x1}, 0x0) ioctl(r0, 0xfffffbff00005460, &(0x7f0000000140)) [ 261.041835][ T7] attempt to access beyond end of device 01:29:23 executing program 2: r0 = socket$inet6(0xa, 0xe, 0xffff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup\x00', 0x200002, 0x0) fchdir(r1) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500)=0xffffffffffffffff, 0x4) r2 = fcntl$getown(r0, 0x9) r3 = getpgid(r2) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x2000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x3, 0x0, 0x0, 0x8000, 0x0, 0x8, 0x0, 0xd0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x81, 0x101}, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffffffffffa}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e002, 0x1, &(0x7f0000000040)=[{&(0x7f00000003c0)="eb64c86d4f66732e66617400020441000500077008f80000d8c32d8cbe59628cf9d9ed7b2c", 0x25}], 0x0, 0x0) r4 = socket$inet6(0xa, 0x7, 0x3) ioctl(r4, 0x5a, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$vfat(&(0x7f0000000600)='vfat\x00', &(0x7f00000000c0)='./file0/file1\x00', 0xe005, 0x0, &(0x7f0000000380), 0x1010802, 0x0) r5 = open(&(0x7f00000001c0)='./file0\x00', 0x4, 0x0) mkdirat(0xffffffffffffffff, &(0x7f00000005c0)='./file0/file0\x00', 0x0) removexattr(&(0x7f0000000640)='./file0\x00', &(0x7f0000000800)=ANY=[@ANYPTR64=&(0x7f0000001180)=ANY=[@ANYBLOB="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"], @ANYRES64=r2]) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0xd1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6147, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, 0x110, r1, 0x8000000) openat$fuse(0xffffffffffffff9c, &(0x7f0000000580)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r5, 0x8004e500, &(0x7f0000001140)) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x9) r6 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0x0, 0x0, 0x0, 0x5, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioprio_get$pid(0x2, r3) capset(&(0x7f00000002c0)={0x19980330}, &(0x7f0000000300)={0x8, 0x2, 0x89, 0x3, 0xca, 0xca30}) r7 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfd, 0xfd, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff00000000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, @perf_bp, 0x1e, 0x0, 0x0, 0x4}, 0x0, 0x0, r6, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f0000000240)={0x0, 0x1, 0x80000000, 0x80, 0x1}, 0xc) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000000480)='/dev/null\x00', 0xa2081, 0x0) write$cgroup_type(r8, &(0x7f0000000700)='threaded\x00', 0x2) mkdirat(r5, &(0x7f00000004c0)='./file1\x00', 0x100000000) creat(&(0x7f0000000a00)='./file0/file0\x00', 0x44) fchdir(r7) seccomp(0x0, 0x0, &(0x7f0000000200)={0x0, &(0x7f00000001c0)}) fstatfs(r5, &(0x7f0000000400)=""/128) [ 261.127131][ T7] loop5: rw=1, want=33017, limit=32760 [ 261.356145][ T8946] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 261.514844][ T8946] capability: warning: `syz-executor.2' uses 32-bit capabilities (legacy support in use) 01:29:24 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') ioctl$TIOCGPTPEER(0xffffffffffffff9c, 0x5441, 0x0) readahead(0xffffffffffffffff, 0x100000000000000, 0x6) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000240)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x75b, &(0x7f0000000280)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0xfffffeee}], 0x4, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(0x0, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) connect$inet(r1, &(0x7f0000000200)={0x2, 0x4e22, @broadcast}, 0x10) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000100), 0x0) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000000c0)) tkill(0x0, 0x1104400000013) 01:29:24 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{}], 0x1}, 0x0) ioctl(r0, 0xfffffbff40049409, &(0x7f0000000140)) 01:29:24 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x50, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x3e8, 0x0, 0x0) 01:29:24 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0xae71, &(0x7f0000000000)) 01:29:24 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') ioctl$TIOCGPTPEER(0xffffffffffffff9c, 0x5441, 0x0) readahead(0xffffffffffffffff, 0x100000000000000, 0x6) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000240)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x75b, &(0x7f0000000280)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0xfffffeee}], 0x4, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(0x0, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) connect$inet(r1, &(0x7f0000000200)={0x2, 0x4e22, @broadcast}, 0x10) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000100), 0x0) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000000c0)) 01:29:24 executing program 2: r0 = socket$inet6(0xa, 0xe, 0xffff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup\x00', 0x200002, 0x0) fchdir(r1) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500)=0xffffffffffffffff, 0x4) r2 = fcntl$getown(r0, 0x9) r3 = getpgid(r2) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x2000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x3, 0x0, 0x0, 0x8000, 0x0, 0x8, 0x0, 0xd0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x81, 0x101}, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffffffffffa}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e002, 0x1, &(0x7f0000000040)=[{&(0x7f00000003c0)="eb64c86d4f66732e66617400020441000500077008f80000d8c32d8cbe59628cf9d9ed7b2c", 0x25}], 0x0, 0x0) r4 = socket$inet6(0xa, 0x7, 0x3) ioctl(r4, 0x5a, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$vfat(&(0x7f0000000600)='vfat\x00', &(0x7f00000000c0)='./file0/file1\x00', 0xe005, 0x0, &(0x7f0000000380), 0x1010802, 0x0) r5 = open(&(0x7f00000001c0)='./file0\x00', 0x4, 0x0) mkdirat(0xffffffffffffffff, &(0x7f00000005c0)='./file0/file0\x00', 0x0) removexattr(&(0x7f0000000640)='./file0\x00', &(0x7f0000000800)=ANY=[@ANYPTR64=&(0x7f0000001180)=ANY=[@ANYBLOB="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"], @ANYRES64=r2]) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0xd1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6147, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, 0x110, r1, 0x8000000) openat$fuse(0xffffffffffffff9c, &(0x7f0000000580)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r5, 0x8004e500, &(0x7f0000001140)) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x9) r6 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0x0, 0x0, 0x0, 0x5, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioprio_get$pid(0x2, r3) capset(&(0x7f00000002c0)={0x19980330}, &(0x7f0000000300)={0x8, 0x2, 0x89, 0x3, 0xca, 0xca30}) r7 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfd, 0xfd, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff00000000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, @perf_bp, 0x1e, 0x0, 0x0, 0x4}, 0x0, 0x0, r6, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f0000000240)={0x0, 0x1, 0x80000000, 0x80, 0x1}, 0xc) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000000480)='/dev/null\x00', 0xa2081, 0x0) write$cgroup_type(r8, &(0x7f0000000700)='threaded\x00', 0x2) mkdirat(r5, &(0x7f00000004c0)='./file1\x00', 0x100000000) creat(&(0x7f0000000a00)='./file0/file0\x00', 0x44) fchdir(r7) seccomp(0x0, 0x0, &(0x7f0000000200)={0x0, &(0x7f00000001c0)}) fstatfs(r5, &(0x7f0000000400)=""/128) 01:29:24 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{}], 0x1}, 0x0) ioctl(r0, 0xfffffbff40086602, &(0x7f0000000140)) 01:29:24 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x50, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r2, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x3e8, 0x0, 0x0) [ 262.865155][ T21] attempt to access beyond end of device [ 262.870888][ T21] loop5: rw=1, want=33017, limit=32760 01:29:24 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') ioctl$TIOCGPTPEER(0xffffffffffffff9c, 0x5441, 0x0) readahead(0xffffffffffffffff, 0x100000000000000, 0x6) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000240)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x75b, &(0x7f0000000280)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0xfffffeee}], 0x4, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(0x0, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) connect$inet(r1, &(0x7f0000000200)={0x2, 0x4e22, @broadcast}, 0x10) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000100), 0x0) 01:29:24 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0xae71, &(0x7f0000000000)) 01:29:25 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{}], 0x1}, 0x0) ioctl(r0, 0xfffffbff40087602, &(0x7f0000000140)) 01:29:25 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{}], 0x1}, 0x0) ioctl(r0, 0xfffffbff4020940d, &(0x7f0000000140)) [ 264.558770][ T8932] attempt to access beyond end of device [ 264.567548][ T8932] loop1: rw=1, want=33017, limit=32760 01:29:26 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') ioctl$TIOCGPTPEER(0xffffffffffffff9c, 0x5441, 0x0) readahead(0xffffffffffffffff, 0x100000000000000, 0x6) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000240)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x75b, &(0x7f0000000280)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0xfffffeee}], 0x4, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(0x0, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) connect$inet(r1, &(0x7f0000000200)={0x2, 0x4e22, @broadcast}, 0x10) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000100), 0x0) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000000c0)) tkill(0x0, 0x1104400000013) 01:29:26 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x50, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r2, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x3e8, 0x0, 0x0) 01:29:26 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0xae71, &(0x7f0000000000)) 01:29:26 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{}], 0x1}, 0x0) ioctl(r0, 0xfffffbff80086601, &(0x7f0000000140)) 01:29:26 executing program 2: r0 = socket$inet6(0xa, 0xe, 0xffff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup\x00', 0x200002, 0x0) fchdir(r1) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500)=0xffffffffffffffff, 0x4) r2 = fcntl$getown(r0, 0x9) r3 = getpgid(r2) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x2000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x3, 0x0, 0x0, 0x8000, 0x0, 0x8, 0x0, 0xd0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x81, 0x101}, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffffffffffa}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e002, 0x1, &(0x7f0000000040)=[{&(0x7f00000003c0)="eb64c86d4f66732e66617400020441000500077008f80000d8c32d8cbe59628cf9d9ed7b2c", 0x25}], 0x0, 0x0) r4 = socket$inet6(0xa, 0x7, 0x3) ioctl(r4, 0x5a, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$vfat(&(0x7f0000000600)='vfat\x00', &(0x7f00000000c0)='./file0/file1\x00', 0xe005, 0x0, &(0x7f0000000380), 0x1010802, 0x0) r5 = open(&(0x7f00000001c0)='./file0\x00', 0x4, 0x0) mkdirat(0xffffffffffffffff, &(0x7f00000005c0)='./file0/file0\x00', 0x0) removexattr(&(0x7f0000000640)='./file0\x00', &(0x7f0000000800)=ANY=[@ANYPTR64=&(0x7f0000001180)=ANY=[@ANYBLOB="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"], @ANYRES64=r2]) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0xd1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6147, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, 0x110, r1, 0x8000000) openat$fuse(0xffffffffffffff9c, &(0x7f0000000580)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r5, 0x8004e500, &(0x7f0000001140)) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x9) r6 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0x0, 0x0, 0x0, 0x5, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioprio_get$pid(0x2, r3) capset(&(0x7f00000002c0)={0x19980330}, &(0x7f0000000300)={0x8, 0x2, 0x89, 0x3, 0xca, 0xca30}) r7 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfd, 0xfd, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff00000000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, @perf_bp, 0x1e, 0x0, 0x0, 0x4}, 0x0, 0x0, r6, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f0000000240)={0x0, 0x1, 0x80000000, 0x80, 0x1}, 0xc) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000000480)='/dev/null\x00', 0xa2081, 0x0) write$cgroup_type(r8, &(0x7f0000000700)='threaded\x00', 0x2) mkdirat(r5, &(0x7f00000004c0)='./file1\x00', 0x100000000) creat(&(0x7f0000000a00)='./file0/file0\x00', 0x44) fchdir(r7) seccomp(0x0, 0x0, &(0x7f0000000200)={0x0, &(0x7f00000001c0)}) fstatfs(r5, &(0x7f0000000400)=""/128) 01:29:26 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') ioctl$TIOCGPTPEER(0xffffffffffffff9c, 0x5441, 0x0) readahead(0xffffffffffffffff, 0x100000000000000, 0x6) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000240)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x75b, &(0x7f0000000280)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0xfffffeee}], 0x4, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(0x0, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) connect$inet(r1, &(0x7f0000000200)={0x2, 0x4e22, @broadcast}, 0x10) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:29:26 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x50, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r2, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x3e8, 0x0, 0x0) 01:29:26 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{}], 0x1}, 0x0) ioctl(r0, 0xfffffbff80087601, &(0x7f0000000140)) 01:29:26 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)) ioctl$KVM_SET_PIT2(r1, 0xae71, 0x0) 01:29:27 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{}], 0x1}, 0x0) ioctl(r0, 0xc0045878, &(0x7f0000000140)) 01:29:27 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)) ioctl$KVM_SET_PIT2(r1, 0xae71, 0x0) 01:29:27 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') ioctl$TIOCGPTPEER(0xffffffffffffff9c, 0x5441, 0x0) readahead(0xffffffffffffffff, 0x100000000000000, 0x6) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000240)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x75b, &(0x7f0000000280)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0xfffffeee}], 0x4, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(0x0, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) connect$inet(r1, &(0x7f0000000200)={0x2, 0x4e22, @broadcast}, 0x10) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000100), 0x0) 01:29:28 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)) ioctl$KVM_SET_PIT2(r1, 0xae71, 0x0) 01:29:28 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x50, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r2, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x3e8, 0x0, 0x0) 01:29:28 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{}], 0x1}, 0x0) ioctl(r0, 0xfffffbffc0045878, &(0x7f0000000140)) 01:29:28 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') ioctl$TIOCGPTPEER(0xffffffffffffff9c, 0x5441, 0x0) readahead(0xffffffffffffffff, 0x100000000000000, 0x6) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000240)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x75b, &(0x7f0000000280)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0xfffffeee}], 0x4, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(0x0, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) connect$inet(r1, &(0x7f0000000200)={0x2, 0x4e22, @broadcast}, 0x10) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000100), 0x0) 01:29:28 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') ioctl$TIOCGPTPEER(0xffffffffffffff9c, 0x5441, 0x0) readahead(0xffffffffffffffff, 0x100000000000000, 0x6) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000240)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x75b, &(0x7f0000000280)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0xfffffeee}], 0x4, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(0x0, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) connect$inet(r1, &(0x7f0000000200)={0x2, 0x4e22, @broadcast}, 0x10) 01:29:28 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') ioctl$TIOCGPTPEER(0xffffffffffffff9c, 0x5441, 0x0) readahead(0xffffffffffffffff, 0x100000000000000, 0x6) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000240)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x75b, &(0x7f0000000280)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0xfffffeee}], 0x4, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(0x0, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) connect$inet(r1, &(0x7f0000000200)={0x2, 0x4e22, @broadcast}, 0x10) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000100), 0x0) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000000c0)) tkill(0x0, 0x1104400000013) 01:29:28 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') ioctl$TIOCGPTPEER(0xffffffffffffff9c, 0x5441, 0x0) readahead(0xffffffffffffffff, 0x100000000000000, 0x6) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000240)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x75b, &(0x7f0000000280)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0xfffffeee}], 0x4, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(0x0, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) connect$inet(r1, &(0x7f0000000200)={0x2, 0x4e22, @broadcast}, 0x10) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000100), 0x0) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000000c0)) tkill(0x0, 0x1104400000013) 01:29:28 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{}], 0x1}, 0x0) ioctl(r0, 0xfffffbffc0189436, &(0x7f0000000140)) 01:29:29 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x50, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r2, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x3e8, 0x0, 0x0) 01:29:29 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') ioctl$TIOCGPTPEER(0xffffffffffffff9c, 0x5441, 0x0) readahead(0xffffffffffffffff, 0x100000000000000, 0x6) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000240)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x75b, &(0x7f0000000280)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0xfffffeee}], 0x4, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(0x0, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) connect$inet(r1, &(0x7f0000000200)={0x2, 0x4e22, @broadcast}, 0x10) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000100), 0x0) 01:29:29 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{}], 0x1}, 0x0) ioctl(r0, 0xfffffbffc020660b, &(0x7f0000000140)) 01:29:30 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{}], 0x1}, 0x0) ioctl(r0, 0xfffffbfffff3ffc9, &(0x7f0000000140)) 01:29:30 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') ioctl$TIOCGPTPEER(0xffffffffffffff9c, 0x5441, 0x0) readahead(0xffffffffffffffff, 0x100000000000000, 0x6) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000240)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x75b, &(0x7f0000000280)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0xfffffeee}], 0x4, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(0x0, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) connect$inet(r1, &(0x7f0000000200)={0x2, 0x4e22, @broadcast}, 0x10) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000100), 0x0) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000000c0)) tkill(0x0, 0x1104400000013) 01:29:30 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x50, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r2, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x3e8, 0x0, 0x0) 01:29:30 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x50, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r2, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x3e8, 0x0, 0x0) 01:29:30 executing program 0: syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{}], 0x1}, 0x0) r1 = accept4$tipc(0xffffffffffffffff, 0x0, &(0x7f00000002c0), 0x80000) sendmsg(r1, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000300)="db9159926aed7c6e85277816f9517c36ffae35754bfc43f5e5112cbb8c3ed3ca6020a4f77d844610a55166508cb7b568fe54fa8bd67e0558bfd6a7dd8f56a8cb3193c65bc16bf132a5f7f92d93c485e5aa18399e6a3a3e9b6ba6ca7a70ba85e41062c95aae0a3be046ad798780c6d1a489be00b4abd36cbdbd", 0x79}, {&(0x7f0000000380)="8f2dc40a1651f04b204bd1dffc9251846d67f4c97ab81be2d7e35a4eef4b4a48215055f9fa5a3c938a66107131e23895862f9828799146c74fc7e49dbe618d68ea28a6f19de7192d984b73c20529dde6de872382db61b4acc74b6bdf4ab424775f9545c0e31131fbfceec738e82c717f6409ea5ced562adc97a05288f6d8784d5822456ad55aa356e5d04d51389792dd11d3d95395850a7b3e3a83a797cddce04106665a4665720ed8e93abc22c07ee0c93f5c1096999cc1475f620ae2af479bd675c6ce", 0xc4}], 0x2, &(0x7f00000004c0)=[{0x1010, 0x113, 0xe3e, "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"}, {0xf0, 0x10d, 0x7, "0973d44e447f3f6374b8cda4cb6cdda45a414c1bc6b6de38c58815e607b391ff8de82e6720c7e240844c94113d2ac6d532e205778aa4ffefe08b9e9c97834626dac6794d0f481da90e13544bb6c92ba3f1aee70cd12b8b3ef22f64026616b64f2c2460553f297e4aaecd549b9d645cce986ce546dff6d9bfcf765d6613119767586d49238852604334b382c27b6857ff358d1350fae85adfd2a9d119a8951ae8caacc42337f3d30e2e9f231476f0d1269d3558e5cbcff5f70499771d90e944cc5155b9ecf91bd1f81356772858928c29b791c1052301ffd838895f65f3b4"}, {0x50, 0x0, 0x10001, "a3395b1f430beb484d741b0f7b0e0f951b8a725def3f610368a901dc16d72b8d0f718edcaf998bf10b1e8d007d79d987800e83ffafaf872400889a206eab"}, {0x60, 0x10e, 0xf89, "fc88124d1aea44523c64dc6168a8f9a082305203cc34882189ca9a52ddb6269390ce57c1e97c14977b060e7eb3be741d957764b4e35e56f8d9de32563ca4b82d45b16a288dbc74a49c37"}, {0x78, 0x117, 0x5, "4c319be705bc460bc5dcf821661afe034681898dc2ea38ac8df3f01a6a988067ac1fde081f5844f022a0e114687f3685302504569feb2759b3f48227fbb80ec19953dc514d5bdcca92ddbcad07dd9ee5a9c1fbbd81168dac69de50258537546f815e93"}, {0x110, 0x117, 0x3f, "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"}], 0x1338}, 0x80) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) r2 = add_key(&(0x7f0000001840)='cifs.spnego\x00', &(0x7f0000001880)={'syz', 0x0}, &(0x7f00000018c0)="43e21b3ae08543cd407413b1a1e8b6d15e750602212b081f06c2e6e7cee384627ae59e57130c9ae270dbc977567ca1bb829b469fe4e6dcf2eb35788b785a45c29d7ecf6a4cb2dc2d3a74b93b3cce414209fd2e6546f61940c2500c763c24fe6a686f1875558ae742b6b0cdb711976cd7d87da6b152f798ee5e211dd0433cb86aae70d0", 0x83, 0xfffffffffffffff8) r3 = request_key(&(0x7f00000000c0)='id_legacy\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000001980)='/dev/dri/card#\x00', r2) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000001c0)="13418be10245398695372bcd0c76fb2f8160e3acb7e87a1fc343cd64d597b993a7e5456249d0da9ba322b0e000fa16f7cb91eec6e3eaf70360eb2d80954522efaa0619f30118e5af0b57c5aa4a8c4b113993a2b4e4016d6333825be403eaf69b4d38da2626272ac12577a8fb27cc0d9a7034872d58342c77945ccd71d90c164924b4d9db9be414c614ce82e2f4", 0x8d, r3) [ 291.950755][ T2554] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 430.670486][ T1042] INFO: task syz-executor.1:7910 blocked for more than 143 seconds. [ 430.678755][ T1042] Not tainted 5.1.0-rc5+ #77 [ 430.683951][ T1042] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 430.693070][ T1042] syz-executor.1 D24176 7910 1 0x00000004 [ 430.699485][ T1042] Call Trace: [ 430.702919][ T1042] __schedule+0x813/0x1cc0 [ 430.707342][ T1042] ? __sched_text_start+0x8/0x8 [ 430.712287][ T1042] ? mark_held_locks+0xa4/0xf0 [ 430.717046][ T1042] ? _raw_spin_unlock_irq+0x28/0x90 [ 430.722301][ T1042] ? wait_on_page_bit_common+0x4cc/0xd00 [ 430.727924][ T1042] ? _raw_spin_unlock_irq+0x28/0x90 [ 430.733167][ T1042] schedule+0x92/0x180 [ 430.737427][ T1042] io_schedule+0x1c/0x70 [ 430.741815][ T1042] wait_on_page_bit_common+0x518/0xd00 [ 430.747397][ T1042] ? replace_page_cache_page+0xe30/0xe30 [ 430.753086][ T1042] ? add_to_page_cache_lru+0x760/0x760 [ 430.758737][ T1042] ? pagevec_lookup_range_tag+0x40/0x80 [ 430.764334][ T1042] __filemap_fdatawait_range+0x3ec/0x530 [ 430.769965][ T1042] ? wait_on_page_bit_common+0xd00/0xd00 [ 430.775666][ T1042] ? sync_inodes_sb+0x651/0xae0 [ 430.780555][ T1042] ? sync_inodes_sb+0x687/0xae0 [ 430.785398][ T1042] ? lock_downgrade+0x880/0x880 [ 430.790619][ T1042] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 430.796862][ T1042] filemap_fdatawait_keep_errors+0x2d/0xd0 [ 430.802715][ T1042] sync_inodes_sb+0x6b6/0xae0 [ 430.807387][ T1042] ? try_to_writeback_inodes_sb+0x70/0x70 [ 430.813138][ T1042] ? filemap_flush+0x24/0x30 [ 430.817791][ T1042] sync_filesystem+0x16a/0x270 [ 430.822604][ T1042] generic_shutdown_super+0x75/0x370 [ 430.827990][ T1042] kill_block_super+0xa0/0x100 [ 430.832804][ T1042] deactivate_locked_super+0x9a/0x100 [ 430.838169][ T1042] deactivate_super+0x1b2/0x1d0 [ 430.843097][ T1042] ? mount_ns+0x1d0/0x1d0 [ 430.847418][ T1042] ? dput+0x38/0x6a0 [ 430.851338][ T1042] ? dput+0x1e6/0x6a0 [ 430.855324][ T1042] cleanup_mnt+0xbf/0x160 [ 430.859633][ T1042] __cleanup_mnt+0x16/0x20 [ 430.864096][ T1042] task_work_run+0x14a/0x1c0 [ 430.868825][ T1042] exit_to_usermode_loop+0x273/0x2c0 [ 430.874155][ T1042] do_syscall_64+0x52d/0x610 [ 430.878736][ T1042] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 430.884650][ T1042] RIP: 0033:0x45b677 [ 430.888536][ T1042] Code: d9 ff d0 48 8b 7c 24 30 48 8b 77 08 48 2b 74 24 28 64 48 89 3c 25 f8 ff ff ff 48 89 f4 89 44 24 18 c3 48 83 ec 40 48 83 e4 f0 <48> c7 44 24 30 00 00 00 00 48 89 54 24 28 48 89 df 48 89 d9 ff d0 [ 430.908197][ T1042] RSP: 002b:00007ffc93a5bd18 EFLAGS: 00000202 ORIG_RAX: 00000000000000a6 [ 430.916636][ T1042] RAX: 0000000000000000 RBX: 00000000000411d0 RCX: 000000000045b677 [ 430.924667][ T1042] RDX: 0000000000403270 RSI: 0000000000000002 RDI: 00007ffc93a5bdc0 [ 430.932676][ T1042] RBP: 000000000000006f R08: 0000000000000000 R09: 000000000000000a [ 430.940699][ T1042] R10: 0000000000000005 R11: 0000000000000202 R12: 00007ffc93a5ce50 [ 430.948709][ T1042] R13: 0000000000f94940 R14: 0000000000000000 R15: 00007ffc93a5ce50 [ 430.956754][ T1042] INFO: task syz-executor.5:7922 blocked for more than 143 seconds. [ 430.964741][ T1042] Not tainted 5.1.0-rc5+ #77 [ 430.969835][ T1042] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 430.978548][ T1042] syz-executor.5 D24176 7922 1 0x00000004 [ 430.984900][ T1042] Call Trace: [ 430.988183][ T1042] __schedule+0x813/0x1cc0 [ 430.992667][ T1042] ? __sched_text_start+0x8/0x8 [ 430.997514][ T1042] ? mark_held_locks+0xa4/0xf0 [ 431.002319][ T1042] ? _raw_spin_unlock_irq+0x28/0x90 [ 431.007515][ T1042] ? wait_on_page_bit_common+0x4cc/0xd00 [ 431.013198][ T1042] ? _raw_spin_unlock_irq+0x28/0x90 [ 431.018404][ T1042] schedule+0x92/0x180 [ 431.022614][ T1042] io_schedule+0x1c/0x70 [ 431.026841][ T1042] wait_on_page_bit_common+0x518/0xd00 [ 431.032350][ T1042] ? replace_page_cache_page+0xe30/0xe30 [ 431.037988][ T1042] ? add_to_page_cache_lru+0x760/0x760 [ 431.043495][ T1042] ? pagevec_lookup_range_tag+0x40/0x80 [ 431.049030][ T1042] __filemap_fdatawait_range+0x3ec/0x530 [ 431.054702][ T1042] ? wait_on_page_bit_common+0xd00/0xd00 [ 431.060526][ T1042] ? sync_inodes_sb+0x651/0xae0 [ 431.065365][ T1042] ? sync_inodes_sb+0x687/0xae0 [ 431.070212][ T1042] ? lock_downgrade+0x880/0x880 [ 431.075116][ T1042] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 431.081379][ T1042] filemap_fdatawait_keep_errors+0x2d/0xd0 [ 431.087179][ T1042] sync_inodes_sb+0x6b6/0xae0 [ 431.091994][ T1042] ? try_to_writeback_inodes_sb+0x70/0x70 [ 431.097774][ T1042] ? filemap_flush+0x24/0x30 [ 431.102417][ T1042] sync_filesystem+0x16a/0x270 [ 431.107165][ T1042] generic_shutdown_super+0x75/0x370 [ 431.112534][ T1042] kill_block_super+0xa0/0x100 [ 431.117302][ T1042] deactivate_locked_super+0x9a/0x100 [ 431.122767][ T1042] deactivate_super+0x1b2/0x1d0 [ 431.127623][ T1042] ? mount_ns+0x1d0/0x1d0 [ 431.131999][ T1042] ? dput+0x38/0x6a0 [ 431.135878][ T1042] ? dput+0x1e6/0x6a0 [ 431.139849][ T1042] cleanup_mnt+0xbf/0x160 [ 431.144220][ T1042] __cleanup_mnt+0x16/0x20 [ 431.148728][ T1042] task_work_run+0x14a/0x1c0 [ 431.153839][ T1042] exit_to_usermode_loop+0x273/0x2c0 [ 431.159117][ T1042] do_syscall_64+0x52d/0x610 [ 431.164039][ T1042] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 431.169966][ T1042] RIP: 0033:0x45b677 [ 431.173906][ T1042] Code: d9 ff d0 48 8b 7c 24 30 48 8b 77 08 48 2b 74 24 28 64 48 89 3c 25 f8 ff ff ff 48 89 f4 89 44 24 18 c3 48 83 ec 40 48 83 e4 f0 <48> c7 44 24 30 00 00 00 00 48 89 54 24 28 48 89 df 48 89 d9 ff d0 [ 431.193541][ T1042] RSP: 002b:00007ffcf0695598 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 431.202000][ T1042] RAX: 0000000000000000 RBX: 00000000000411d9 RCX: 000000000045b677 [ 431.209986][ T1042] RDX: 0000000000403270 RSI: 0000000000000002 RDI: 00007ffcf0695640 [ 431.217993][ T1042] RBP: 0000000000000066 R08: 0000000000000000 R09: 000000000000000a [ 431.225992][ T1042] R10: 0000000000000005 R11: 0000000000000206 R12: 00007ffcf06966d0 [ 431.234037][ T1042] R13: 0000000001aca940 R14: 0000000000000000 R15: 00007ffcf06966d0 [ 431.242376][ T1042] [ 431.242376][ T1042] Showing all locks held in the system: [ 431.250142][ T1042] 1 lock held by khungtaskd/1042: [ 431.255202][ T1042] #0: 00000000e59d24ab (rcu_read_lock){....}, at: debug_show_all_locks+0x5f/0x27e [ 431.264563][ T1042] 1 lock held by rsyslogd/7745: [ 431.269394][ T1042] #0: 00000000984f4caa (&f->f_pos_lock){+.+.}, at: __fdget_pos+0xee/0x110 [ 431.278057][ T1042] 2 locks held by getty/7868: [ 431.282737][ T1042] #0: 00000000292c7189 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 431.291758][ T1042] #1: 00000000def9d263 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 431.301345][ T1042] 2 locks held by getty/7869: [ 431.305996][ T1042] #0: 0000000065834c6b (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 431.315044][ T1042] #1: 000000002dcaa2aa (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 431.324648][ T1042] 2 locks held by getty/7870: [ 431.329312][ T1042] #0: 0000000094b23496 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 431.338312][ T1042] #1: 0000000080989c51 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 431.347930][ T1042] 2 locks held by getty/7871: [ 431.352677][ T1042] #0: 00000000ec48ecd5 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 431.361689][ T1042] #1: 000000003d0b28af (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 431.371335][ T1042] 2 locks held by getty/7872: [ 431.376145][ T1042] #0: 000000001746a4bb (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 431.385237][ T1042] #1: 000000009884b66d (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 431.394974][ T1042] 2 locks held by getty/7873: [ 431.399650][ T1042] #0: 000000006bc0a21d (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 431.408650][ T1042] #1: 00000000754f1a59 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 431.418274][ T1042] 2 locks held by getty/7874: [ 431.423000][ T1042] #0: 00000000546473a8 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 431.432013][ T1042] #1: 000000003da5b0db (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 431.441674][ T1042] 2 locks held by syz-executor.1/7910: [ 431.447132][ T1042] #0: 0000000056ba16ff (&type->s_umount_key#61){++++}, at: deactivate_super+0x1aa/0x1d0 [ 431.456992][ T1042] #1: 00000000d4fe42ef (&s->s_sync_lock){+.+.}, at: sync_inodes_sb+0x22d/0xae0 [ 431.466093][ T1042] 2 locks held by syz-executor.5/7922: [ 431.471644][ T1042] #0: 000000005fe58136 (&type->s_umount_key#61){++++}, at: deactivate_super+0x1aa/0x1d0 [ 431.481527][ T1042] #1: 000000006a894197 (&s->s_sync_lock){+.+.}, at: sync_inodes_sb+0x22d/0xae0 [ 431.490669][ T1042] 3 locks held by kworker/u4:5/8932: [ 431.495948][ T1042] #0: 000000003366518d (&rq->lock){-.-.}, at: pick_next_task_fair+0x1214/0x19a0 [ 431.505106][ T1042] #1: 00000000e59d24ab (rcu_read_lock){....}, at: __update_idle_core+0x45/0x3f0 [ 431.514329][ T1042] #2: 00000000f769655e (&base->lock){-.-.}, at: lock_timer_base+0x56/0x1b0 [ 431.523088][ T1042] [ 431.525420][ T1042] ============================================= [ 431.525420][ T1042] [ 431.533912][ T1042] NMI backtrace for cpu 0 [ 431.538249][ T1042] CPU: 0 PID: 1042 Comm: khungtaskd Not tainted 5.1.0-rc5+ #77 [ 431.545765][ T1042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 431.555798][ T1042] Call Trace: [ 431.559073][ T1042] dump_stack+0x172/0x1f0 [ 431.563388][ T1042] nmi_cpu_backtrace.cold+0x63/0xa4 [ 431.568762][ T1042] ? lapic_can_unplug_cpu.cold+0x38/0x38 [ 431.574372][ T1042] nmi_trigger_cpumask_backtrace+0x1be/0x236 [ 431.580352][ T1042] arch_trigger_cpumask_backtrace+0x14/0x20 [ 431.586591][ T1042] watchdog+0x9b7/0xec0 [ 431.590866][ T1042] kthread+0x357/0x430 [ 431.594931][ T1042] ? reset_hung_task_detector+0x30/0x30 [ 431.600459][ T1042] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 431.606696][ T1042] ret_from_fork+0x3a/0x50 [ 431.611272][ T1042] Sending NMI from CPU 0 to CPUs 1: [ 431.616576][ C1] NMI backtrace for cpu 1 skipped: idling at native_safe_halt+0x2/0x10 [ 431.617487][ T1042] Kernel panic - not syncing: hung_task: blocked tasks [ 431.631671][ T1042] CPU: 0 PID: 1042 Comm: khungtaskd Not tainted 5.1.0-rc5+ #77 [ 431.639200][ T1042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 431.649231][ T1042] Call Trace: [ 431.652505][ T1042] dump_stack+0x172/0x1f0 [ 431.656832][ T1042] panic+0x2cb/0x65c [ 431.660707][ T1042] ? __warn_printk+0xf3/0xf3 [ 431.665387][ T1042] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 431.671101][ T1042] ? printk_safe_flush+0xf2/0x140 [ 431.676112][ T1042] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 431.682337][ T1042] ? lapic_can_unplug_cpu.cold+0x38/0x38 [ 431.687959][ T1042] ? nmi_trigger_cpumask_backtrace+0x1a7/0x236 [ 431.694151][ T1042] ? nmi_trigger_cpumask_backtrace+0x19e/0x236 [ 431.700304][ T1042] watchdog+0x9c8/0xec0 [ 431.704459][ T1042] kthread+0x357/0x430 [ 431.708507][ T1042] ? reset_hung_task_detector+0x30/0x30 [ 431.714102][ T1042] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 431.720345][ T1042] ret_from_fork+0x3a/0x50 [ 431.725953][ T1042] Kernel Offset: disabled [ 431.730411][ T1042] Rebooting in 86400 seconds..