ffffffffffff, 0x40045431, &(0x7f00000000c0)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_pts(0xffffffffffffffff, 0x4000000000000002) r4 = dup3(r3, r0, 0x0) ioctl$TCXONC(r4, 0x540a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r4, 0x540a, 0x1) 22:43:21 executing program 5: 22:43:21 executing program 4: 22:43:21 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000000c0)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_pts(0xffffffffffffffff, 0x4000000000000002) r4 = dup3(r3, r0, 0x0) ioctl$TCXONC(r4, 0x540a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r4, 0x540a, 0x1) [ 262.075654] gfs2: statfs_quantum mount option requires a non-negative numeric argument 22:43:21 executing program 5: 22:43:21 executing program 4: 22:43:21 executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x60082) readv(r1, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/143, 0x8f}], 0x1) close(r1) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) tkill(r0, 0x1000000000016) [ 262.145812] gfs2: can't parse mount arguments 22:43:21 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000000c0)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_pts(0xffffffffffffffff, 0x4000000000000002) r4 = dup3(r3, r0, 0x0) ioctl$TCXONC(r4, 0x540a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r4, 0x540a, 0x1) 22:43:21 executing program 1: socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_mount_image$gfs2(&(0x7f00000002c0)='gfs2\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@statfs_quantum={'statfs_quantum', 0x3d, 0xfffffffffffffffe}}]}) 22:43:21 executing program 5: 22:43:21 executing program 4: [ 262.375130] gfs2: statfs_quantum mount option requires a non-negative numeric argument [ 262.423356] gfs2: can't parse mount arguments 22:43:22 executing program 3: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0xe0000200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 22:43:22 executing program 5: r0 = socket$kcm(0x10, 0x800000000002, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)="2e000000120081aee4520cecff0e00fa078b5bdb4cb904e473730e55cff26d1b0e001d80360000005e510befccd7", 0x2e}], 0x1}, 0x0) 22:43:22 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_pts(r0, 0x4000000000000002) r4 = dup3(r3, 0xffffffffffffffff, 0x0) ioctl$TCXONC(r4, 0x540a, 0x0) write$binfmt_script(r0, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(0xffffffffffffffff, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r4, 0x540a, 0x1) 22:43:22 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r0, 0x8946, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x06\x02\xff', @ifru_names='bond_slave_1\x00t\x00'}) 22:43:22 executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x60082) readv(r1, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/143, 0x8f}], 0x1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) tkill(r0, 0x1000000000016) 22:43:22 executing program 1: socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_mount_image$gfs2(&(0x7f00000002c0)='gfs2\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@statfs_quantum={'statfs_quantum', 0x3d, 0xfffffffffffffffe}}]}) 22:43:22 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_pts(r0, 0x4000000000000002) r4 = dup3(r3, 0xffffffffffffffff, 0x0) ioctl$TCXONC(r4, 0x540a, 0x0) write$binfmt_script(r0, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(0xffffffffffffffff, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r4, 0x540a, 0x1) [ 262.919107] audit: type=1400 audit(1575758602.103:252): avc: denied { ioctl } for pid=13140 comm="syz-executor.4" path="socket:[57457]" dev="sockfs" ino=57457 ioctlcmd=0x8946 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 22:43:22 executing program 5: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) mount(&(0x7f0000000140)=@filename='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='ext4\x00@\xc3l\x05W\r\xed\x18\x0fx\xcb\x06~m\x1e\a\x837\xf7\xc0U\xf8m\xdd}\x01+\xce\x1f%\x19\xd1\x1d\x00?\rM\x82\xa2\xa40\xfb\xf1\x88\xa9b\x1f\x05\x1bS\xef\xe7\x04\x00\x82\x98|\xb3\xab\x04I\xacfUh\x87\xb5\xees^\xa5\x84\x96\x94H|W{\x19\xabG[\x05A=\x83\xa7\x94u\x95\xac\x03\xf9\x94I\xe7\x14\xa8 \xc9_\rR\xc2\xe5\xd8\xe7{\xfb', 0x0, 0x0) 22:43:22 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='ip6erspan0\x00', 0x16) [ 262.977887] gfs2: statfs_quantum mount option requires a non-negative numeric argument [ 263.023807] gfs2: can't parse mount arguments 22:43:22 executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x60082) readv(r1, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/143, 0x8f}], 0x1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) tkill(r0, 0x1000000000016) 22:43:22 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x5, 0x0, 0x0) 22:43:22 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_pts(r0, 0x4000000000000002) r4 = dup3(r3, 0xffffffffffffffff, 0x0) ioctl$TCXONC(r4, 0x540a, 0x0) write$binfmt_script(r0, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(0xffffffffffffffff, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r4, 0x540a, 0x1) [ 263.134515] print_req_error: I/O error, dev loop11, sector 2 [ 263.144095] EXT4-fs (loop11): unable to read superblock 22:43:22 executing program 3: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0xe0000200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 22:43:22 executing program 1: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$gfs2(&(0x7f00000002c0)='gfs2\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@statfs_quantum={'statfs_quantum', 0x3d, 0xfffffffffffffffe}}]}) 22:43:22 executing program 5: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) mount(&(0x7f0000000140)=@filename='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='ext4\x00@\xc3l\x05W\r\xed\x18\x0fx\xcb\x06~m\x1e\a\x837\xf7\xc0U\xf8m\xdd}\x01+\xce\x1f%\x19\xd1\x1d\x00?\rM\x82\xa2\xa40\xfb\xf1\x88\xa9b\x1f\x05\x1bS\xef\xe7\x04\x00\x82\x98|\xb3\xab\x04I\xacfUh\x87\xb5\xees^\xa5\x84\x96\x94H|W{\x19\xabG[\x05A=\x83\xa7\x94u\x95\xac\x03\xf9\x94I\xe7\x14\xa8 \xc9_\rR\xc2\xe5\xd8\xe7{\xfb', 0x0, 0x0) 22:43:22 executing program 4: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) sysinfo(&(0x7f0000000000)=""/1) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00\x05\xea:\x01\x00\x00\x01', @ifru_flags}) 22:43:22 executing program 2: r0 = syz_open_procfs(0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) 22:43:22 executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x60082) readv(r1, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/143, 0x8f}], 0x1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) tkill(r0, 0x1000000000016) [ 263.787260] print_req_error: I/O error, dev loop11, sector 2 [ 263.794077] EXT4-fs (loop11): unable to read superblock 22:43:23 executing program 5: socket$kcm(0x2b, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000980)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\x8c,\xe1[&\xe5\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ}\xb7\xf3\xfe\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\aE\xdfK\x1d\xeeH;\x15v$\xc5\xbcq\x9a\t\x9ej5\t\x00\x00\x009\x8c4', 0x2761, 0xfffffff5) write$cgroup_pid(r0, &(0x7f0000000100), 0xda4fff08) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0x10000000d) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)={[{0x0, 'rdma'}]}, 0x6) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000380)={0x0, 0x0}) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40305828, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) socketpair(0x8, 0x3, 0xc3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffa0008000, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)}, 0x40) 22:43:23 executing program 4: mknod(&(0x7f0000000080)='./file0\x00', 0xcb7567723ce6e558, 0x0) chroot(&(0x7f0000001380)='./file0\x00') open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 22:43:23 executing program 2: r0 = syz_open_procfs(0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) [ 263.841195] gfs2: statfs_quantum mount option requires a non-negative numeric argument [ 263.874100] gfs2: can't parse mount arguments 22:43:23 executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) readv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/143, 0x8f}], 0x1) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) tkill(r0, 0x1000000000016) 22:43:23 executing program 1: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$gfs2(&(0x7f00000002c0)='gfs2\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@statfs_quantum={'statfs_quantum', 0x3d, 0xfffffffffffffffe}}]}) 22:43:23 executing program 4: getpid() socket$unix(0x1, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) sendmmsg(r0, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) [ 264.075471] gfs2: statfs_quantum mount option requires a non-negative numeric argument [ 264.116641] gfs2: can't parse mount arguments [ 264.160374] net_ratelimit: 20 callbacks suppressed [ 264.160380] protocol 88fb is buggy, dev hsr_slave_0 [ 264.172089] protocol 88fb is buggy, dev hsr_slave_1 [ 264.480213] protocol 88fb is buggy, dev hsr_slave_0 [ 264.485693] protocol 88fb is buggy, dev hsr_slave_1 [ 264.640251] protocol 88fb is buggy, dev hsr_slave_0 [ 264.646965] protocol 88fb is buggy, dev hsr_slave_1 [ 264.781171] IPVS: ftp: loaded support on port[0] = 21 [ 265.040257] protocol 88fb is buggy, dev hsr_slave_0 [ 265.046957] protocol 88fb is buggy, dev hsr_slave_1 [ 265.450657] protocol 88fb is buggy, dev hsr_slave_0 [ 265.456851] protocol 88fb is buggy, dev hsr_slave_1 22:43:24 executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) readv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/143, 0x8f}], 0x1) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) tkill(r0, 0x1000000000016) 22:43:24 executing program 3: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0xe0000200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 22:43:24 executing program 2: r0 = syz_open_procfs(0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) 22:43:24 executing program 1: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$gfs2(&(0x7f00000002c0)='gfs2\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@statfs_quantum={'statfs_quantum', 0x3d, 0xfffffffffffffffe}}]}) 22:43:24 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r2, &(0x7f00000000c0), 0xe) listen(r2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r3, &(0x7f00000000c0), 0xe) listen(r3, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r4, &(0x7f00000000c0), 0xe) listen(r4, 0x0) 22:43:24 executing program 5: setrlimit(0x7, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/\x00', 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) 22:43:24 executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) readv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/143, 0x8f}], 0x1) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) tkill(r0, 0x1000000000016) 22:43:24 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x29) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r3 = socket$inet6(0xa, 0x80003, 0x42) accept(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8475071") connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 22:43:24 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) [ 265.694933] gfs2: statfs_quantum mount option requires a non-negative numeric argument 22:43:24 executing program 4: [ 265.763001] gfs2: can't parse mount arguments 22:43:25 executing program 1: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$gfs2(&(0x7f00000002c0)='gfs2\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@statfs_quantum={'statfs_quantum', 0x3d, 0xfffffffffffffffe}}]}) 22:43:25 executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) r1 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x60082) readv(r1, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/143, 0x8f}], 0x1) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) tkill(r0, 0x1000000000016) 22:43:25 executing program 4: [ 265.925929] gfs2: statfs_quantum mount option requires a non-negative numeric argument [ 265.939944] gfs2: can't parse mount arguments 22:43:25 executing program 3: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0xe0000200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 22:43:25 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) 22:43:25 executing program 4: 22:43:25 executing program 1: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$gfs2(&(0x7f00000002c0)='gfs2\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@statfs_quantum={'statfs_quantum', 0x3d, 0xfffffffffffffffe}}]}) 22:43:25 executing program 4: 22:43:25 executing program 5: [ 266.546533] gfs2: statfs_quantum mount option requires a non-negative numeric argument [ 266.571599] gfs2: can't parse mount arguments 22:43:25 executing program 1: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$gfs2(&(0x7f00000002c0)='gfs2\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@statfs_quantum={'statfs_quantum', 0x3d, 0xfffffffffffffffe}}]}) 22:43:25 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) 22:43:25 executing program 4: 22:43:25 executing program 5: [ 266.729432] gfs2: statfs_quantum mount option requires a non-negative numeric argument [ 266.762927] gfs2: can't parse mount arguments 22:43:28 executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) r1 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x60082) readv(r1, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/143, 0x8f}], 0x1) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) tkill(r0, 0x1000000000016) 22:43:28 executing program 4: 22:43:28 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) 22:43:28 executing program 5: 22:43:28 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_mount_image$gfs2(&(0x7f00000002c0)='gfs2\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@statfs_quantum={'statfs_quantum', 0x3d, 0xfffffffffffffffe}}]}) 22:43:28 executing program 3: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0xe0000200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 22:43:28 executing program 4: 22:43:28 executing program 5: [ 268.965267] gfs2: statfs_quantum mount option requires a non-negative numeric argument [ 268.988694] gfs2: can't parse mount arguments 22:43:28 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_mount_image$gfs2(&(0x7f00000002c0)='gfs2\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@statfs_quantum={'statfs_quantum', 0x3d, 0xfffffffffffffffe}}]}) 22:43:28 executing program 4: 22:43:28 executing program 5: 22:43:28 executing program 4: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) setsockopt$inet6_dccp_buf(0xffffffffffffffff, 0x21, 0x2, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4\x02\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r0, &(0x7f0000000080)=0x1a001b00, 0x297ef) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$UI_GET_SYSNAME(r1, 0x8040552c, &(0x7f0000000140)) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)={&(0x7f0000000000)='./file0\x00', r0}, 0x10) [ 269.145205] gfs2: statfs_quantum mount option requires a non-negative numeric argument [ 269.171110] gfs2: can't parse mount arguments [ 269.200166] net_ratelimit: 20 callbacks suppressed [ 269.200172] protocol 88fb is buggy, dev hsr_slave_0 [ 269.210358] protocol 88fb is buggy, dev hsr_slave_1 [ 269.252727] IPVS: ftp: loaded support on port[0] = 21 [ 269.600182] protocol 88fb is buggy, dev hsr_slave_0 [ 269.605479] protocol 88fb is buggy, dev hsr_slave_1 [ 270.000253] protocol 88fb is buggy, dev hsr_slave_0 [ 270.005680] protocol 88fb is buggy, dev hsr_slave_1 [ 270.400144] protocol 88fb is buggy, dev hsr_slave_0 [ 270.405371] protocol 88fb is buggy, dev hsr_slave_1 [ 270.720168] protocol 88fb is buggy, dev hsr_slave_0 [ 270.725258] protocol 88fb is buggy, dev hsr_slave_1 22:43:31 executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) r1 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x60082) readv(r1, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/143, 0x8f}], 0x1) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) tkill(r0, 0x1000000000016) 22:43:31 executing program 5: 22:43:31 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_mount_image$gfs2(&(0x7f00000002c0)='gfs2\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@statfs_quantum={'statfs_quantum', 0x3d, 0xfffffffffffffffe}}]}) 22:43:31 executing program 4: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) setsockopt$inet6_dccp_buf(0xffffffffffffffff, 0x21, 0x2, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4\x02\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r0, &(0x7f0000000080)=0x1a001b00, 0x297ef) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$UI_GET_SYSNAME(r1, 0x8040552c, &(0x7f0000000140)) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)={&(0x7f0000000000)='./file0\x00', r0}, 0x10) 22:43:31 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) 22:43:31 executing program 3: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0xe0000200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 22:43:31 executing program 5: syz_emit_ethernet(0x2a, &(0x7f0000000040)={@broadcast, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast}, @igmp={0x0, 0x0, 0x0, @empty}}}}}, 0x0) 22:43:31 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) [ 272.056579] gfs2: statfs_quantum mount option requires a non-negative numeric argument [ 272.094219] gfs2: can't parse mount arguments 22:43:31 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) syz_mount_image$gfs2(&(0x7f00000002c0)='gfs2\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@statfs_quantum={'statfs_quantum', 0x3d, 0xfffffffffffffffe}}]}) 22:43:31 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') clone(0x20986100, 0x0, 0x0, 0x0, &(0x7f0000000100)="d353ff072d68b2e40014aa5fa8b3d94c22") 22:43:31 executing program 5: r0 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x60082) readv(r1, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/143, 0x8f}], 0x1) close(r1) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) tkill(r0, 0x1000000000016) [ 272.224181] gfs2: statfs_quantum mount option requires a non-negative numeric argument [ 272.239394] gfs2: can't parse mount arguments [ 272.251831] IPVS: ftp: loaded support on port[0] = 21 22:43:31 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) syz_mount_image$gfs2(&(0x7f00000002c0)='gfs2\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@statfs_quantum={'statfs_quantum', 0x3d, 0xfffffffffffffffe}}]}) [ 272.375467] gfs2: statfs_quantum mount option requires a non-negative numeric argument [ 272.385238] gfs2: can't parse mount arguments [ 274.560170] net_ratelimit: 20 callbacks suppressed [ 274.560175] protocol 88fb is buggy, dev hsr_slave_0 [ 274.570374] protocol 88fb is buggy, dev hsr_slave_1 [ 274.880181] protocol 88fb is buggy, dev hsr_slave_0 [ 274.885717] protocol 88fb is buggy, dev hsr_slave_1 22:43:34 executing program 0: r0 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x60082) readv(r1, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/143, 0x8f}], 0x1) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) tkill(r0, 0x1000000000016) 22:43:34 executing program 5: r0 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x60082) readv(r1, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/143, 0x8f}], 0x1) close(r1) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) tkill(r0, 0x1000000000016) 22:43:34 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) syz_mount_image$gfs2(&(0x7f00000002c0)='gfs2\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@statfs_quantum={'statfs_quantum', 0x3d, 0xfffffffffffffffe}}]}) 22:43:34 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) 22:43:34 executing program 3: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0xe0000200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 22:43:34 executing program 4: syz_mount_image$gfs2(&(0x7f00000002c0)='gfs2\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@statfs_quantum={'statfs_quantum'}}]}) [ 275.050161] protocol 88fb is buggy, dev hsr_slave_0 [ 275.055332] protocol 88fb is buggy, dev hsr_slave_1 22:43:34 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) clone(0xe0000200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 22:43:34 executing program 4: syz_mount_image$gfs2(&(0x7f00000002c0)='gfs2\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@statfs_quantum={'statfs_quantum'}}]}) [ 275.101160] gfs2: statfs_quantum mount option requires a non-negative numeric argument [ 275.118231] gfs2: not a GFS2 filesystem [ 275.129938] gfs2: can't parse mount arguments 22:43:34 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$gfs2(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@statfs_quantum={'statfs_quantum', 0x3d, 0xfffffffffffffffe}}]}) [ 275.236124] gfs2: not a GFS2 filesystem 22:43:34 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)) syz_open_procfs(0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x0) 22:43:34 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$gfs2(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@statfs_quantum={'statfs_quantum', 0x3d, 0xfffffffffffffffe}}]}) [ 275.313553] IPVS: ftp: loaded support on port[0] = 21 [ 275.366294] audit: type=1804 audit(1575758614.553:253): pid=13437 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir906942753/syzkaller.tQBHmq/345/file0" dev="sda1" ino=17171 res=1 22:43:34 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)) syz_open_procfs(0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x0) [ 275.427359] audit: type=1804 audit(1575758614.593:254): pid=13437 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.4" name="/root/syzkaller-testdir906942753/syzkaller.tQBHmq/345/file0" dev="sda1" ino=17171 res=1 [ 275.460220] protocol 88fb is buggy, dev hsr_slave_0 [ 275.465764] protocol 88fb is buggy, dev hsr_slave_1 [ 275.532359] audit: type=1804 audit(1575758614.723:255): pid=13446 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir906942753/syzkaller.tQBHmq/346/file0" dev="sda1" ino=17171 res=1 [ 275.565004] audit: type=1804 audit(1575758614.723:256): pid=13446 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.4" name="/root/syzkaller-testdir906942753/syzkaller.tQBHmq/346/file0" dev="sda1" ino=17171 res=1 [ 275.840198] protocol 88fb is buggy, dev hsr_slave_0 [ 275.845456] protocol 88fb is buggy, dev hsr_slave_1 22:43:37 executing program 0: r0 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x60082) readv(r1, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/143, 0x8f}], 0x1) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) tkill(r0, 0x1000000000016) 22:43:37 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) 22:43:37 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) clone(0xe0000200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 22:43:37 executing program 3: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0xe0000200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 22:43:37 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)) syz_open_procfs(0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffff) 22:43:37 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$gfs2(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@statfs_quantum={'statfs_quantum', 0x3d, 0xfffffffffffffffe}}]}) 22:43:37 executing program 4: r0 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x60082) readv(r1, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/143, 0x8f}], 0x1) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) tkill(r0, 0x1000000000016) [ 278.174109] audit: type=1804 audit(1575758617.363:257): pid=13465 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir906942753/syzkaller.tQBHmq/347/file0" dev="sda1" ino=17200 res=1 22:43:37 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$gfs2(&(0x7f00000002c0)='gfs2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@statfs_quantum={'statfs_quantum', 0x3d, 0xfffffffffffffffe}}]}) [ 278.203977] audit: type=1804 audit(1575758617.363:258): pid=13465 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.4" name="/root/syzkaller-testdir906942753/syzkaller.tQBHmq/347/file0" dev="sda1" ino=17200 res=1 22:43:37 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$gfs2(&(0x7f00000002c0)='gfs2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@statfs_quantum={'statfs_quantum', 0x3d, 0xfffffffffffffffe}}]}) [ 278.361641] IPVS: ftp: loaded support on port[0] = 21 22:43:37 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$gfs2(&(0x7f00000002c0)='gfs2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@statfs_quantum={'statfs_quantum', 0x3d, 0xfffffffffffffffe}}]}) 22:43:37 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$gfs2(&(0x7f00000002c0)='gfs2\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 22:43:37 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$gfs2(&(0x7f00000002c0)='gfs2\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 278.585069] gfs2: not a GFS2 filesystem [ 278.668158] gfs2: not a GFS2 filesystem [ 279.600135] net_ratelimit: 20 callbacks suppressed [ 279.600140] protocol 88fb is buggy, dev hsr_slave_0 [ 279.610299] protocol 88fb is buggy, dev hsr_slave_1 [ 280.000127] protocol 88fb is buggy, dev hsr_slave_0 [ 280.005272] protocol 88fb is buggy, dev hsr_slave_1 [ 280.400171] protocol 88fb is buggy, dev hsr_slave_0 [ 280.405718] protocol 88fb is buggy, dev hsr_slave_1 [ 280.800452] protocol 88fb is buggy, dev hsr_slave_0 [ 280.805838] protocol 88fb is buggy, dev hsr_slave_1 22:43:40 executing program 0: r0 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x60082) readv(r1, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/143, 0x8f}], 0x1) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) tkill(r0, 0x1000000000016) 22:43:40 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$gfs2(&(0x7f00000002c0)='gfs2\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 22:43:40 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) 22:43:40 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) clone(0xe0000200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 22:43:40 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0xe0000200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 281.130136] protocol 88fb is buggy, dev hsr_slave_0 [ 281.135318] protocol 88fb is buggy, dev hsr_slave_1 [ 281.191556] gfs2: not a GFS2 filesystem 22:43:40 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$gfs2(&(0x7f00000002c0)='gfs2\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)) 22:43:40 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)) syz_open_procfs(0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffff) [ 281.297058] gfs2: not a GFS2 filesystem [ 281.313348] audit: type=1804 audit(1575758620.503:259): pid=13526 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir906942753/syzkaller.tQBHmq/349/file0" dev="sda1" ino=17213 res=1 22:43:40 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)) syz_open_procfs(0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(0xffffffffffffffff, r0, 0x0, 0x7fffffff) 22:43:40 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$gfs2(&(0x7f00000002c0)='gfs2\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)) [ 281.341735] audit: type=1804 audit(1575758620.513:260): pid=13526 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.4" name="/root/syzkaller-testdir906942753/syzkaller.tQBHmq/349/file0" dev="sda1" ino=17213 res=1 [ 281.421658] IPVS: ftp: loaded support on port[0] = 21 [ 281.438711] audit: type=1804 audit(1575758620.623:261): pid=13534 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir906942753/syzkaller.tQBHmq/350/file0" dev="sda1" ino=17201 res=1 22:43:40 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)) syz_open_procfs(0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(0xffffffffffffffff, r0, 0x0, 0x7fffffff) [ 281.476676] gfs2: not a GFS2 filesystem [ 281.481191] audit: type=1804 audit(1575758620.663:262): pid=13534 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.4" name="/root/syzkaller-testdir906942753/syzkaller.tQBHmq/350/file0" dev="sda1" ino=17201 res=1 22:43:40 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$gfs2(&(0x7f00000002c0)='gfs2\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)) 22:43:40 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)=0x13) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000040)) [ 281.565823] audit: type=1804 audit(1575758620.753:263): pid=13540 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir906942753/syzkaller.tQBHmq/351/file0" dev="sda1" ino=17201 res=1 [ 281.605935] audit: type=1804 audit(1575758620.753:264): pid=13540 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.4" name="/root/syzkaller-testdir906942753/syzkaller.tQBHmq/351/file0" dev="sda1" ino=17201 res=1 [ 281.646348] gfs2: not a GFS2 filesystem 22:43:43 executing program 0: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x60082) readv(r0, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/143, 0x8f}], 0x1) close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) tkill(0x0, 0x1000000000016) 22:43:43 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)=0x13) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000040)) 22:43:43 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$gfs2(&(0x7f00000002c0)='gfs2\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@statfs_quantum={'statfs_quantum'}}]}) 22:43:43 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) 22:43:43 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0xe0000200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 22:43:43 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) clone(0xe0000200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 22:43:43 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)=0x13) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000040)) 22:43:43 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)=0x13) [ 284.255086] gfs2: not a GFS2 filesystem 22:43:43 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$gfs2(&(0x7f00000002c0)='gfs2\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@statfs_quantum={'statfs_quantum'}}]}) 22:43:43 executing program 4: ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000100)=0x13) 22:43:43 executing program 4: ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000100)=0x13) [ 284.388434] gfs2: not a GFS2 filesystem 22:43:43 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$gfs2(&(0x7f00000002c0)='gfs2\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@statfs_quantum={'statfs_quantum'}}]}) [ 284.441878] IPVS: ftp: loaded support on port[0] = 21 [ 284.515605] gfs2: not a GFS2 filesystem [ 284.960140] net_ratelimit: 20 callbacks suppressed [ 284.960145] protocol 88fb is buggy, dev hsr_slave_0 [ 284.970582] protocol 88fb is buggy, dev hsr_slave_1 22:43:44 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYPTR64], 0xff39) write$cgroup_pid(r1, &(0x7f0000000200), 0x12) 22:43:44 executing program 4: ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000100)=0x13) 22:43:44 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) 22:43:44 executing program 0: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x60082) readv(r0, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/143, 0x8f}], 0x1) close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) tkill(0x0, 0x1000000000016) 22:43:44 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0xe0000200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 22:43:44 executing program 4: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000100)=0x13) 22:43:44 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) clone(0xe0000200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 22:43:44 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'nr0\x01\x00', 0x4009}) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8923, &(0x7f0000000000)='nr0\x01:\xf2%\xa3\'>\xf8]\x81\n?\xfa\xff$\x00\x00\xbf\xef\xa9\xac\x03%\xf4D3A}?\a\x8b\x9c[\xdd\x06\xa4\n\xf4\x94\xa8>\xb1\xb1\xa2_&') 22:43:44 executing program 4: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000100)=0x13) 22:43:44 executing program 4: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000100)=0x13) [ 285.275053] IPVS: ftp: loaded support on port[0] = 21 [ 285.280944] protocol 88fb is buggy, dev hsr_slave_0 [ 285.280986] protocol 88fb is buggy, dev hsr_slave_1 [ 285.335468] ÿ$: renamed from nr0 22:43:44 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5412, 0x0) 22:43:44 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5412, 0x0) 22:43:44 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5412, 0x0) [ 285.450114] protocol 88fb is buggy, dev hsr_slave_0 [ 285.455304] protocol 88fb is buggy, dev hsr_slave_1 22:43:44 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000000c0)={0x7a, 0x0, [0x49, 0x0, 0x1d9], [0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11]}) 22:43:45 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) 22:43:45 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)) 22:43:45 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0xe0000200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 22:43:45 executing program 1: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x0) close(r1) [ 285.850152] protocol 88fb is buggy, dev hsr_slave_0 [ 285.855339] protocol 88fb is buggy, dev hsr_slave_1 22:43:45 executing program 0: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x60082) readv(r0, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/143, 0x8f}], 0x1) close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) tkill(0x0, 0x1000000000016) 22:43:45 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)) 22:43:45 executing program 5: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0xe0000200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 22:43:45 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0xcc000000, &(0x7f0000000000)=[{&(0x7f0000000140)="2e0000003100050ad22780648c6394fb0124fc0010000b400c000200053582c137153e370900018025643000d1bd", 0x2e}], 0x1}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @dev}, 0x80, 0x0}, 0x9e1fbd8d0173c727) recvmsg(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB]}, 0x0) 22:43:45 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)) 22:43:45 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'nr0\x01\x00', 0x4009}) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x123, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) ioctl$TUNSETLINK(r0, 0x400454cd, 0x308) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a1, &(0x7f0000000680)='&@[\x00') r3 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r3) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40042409, 0x1) socket$kcm(0x29, 0x5, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-0\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 22:43:45 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f000086fff4)={0x20000000}) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) setuid(0x0) [ 286.250201] protocol 88fb is buggy, dev hsr_slave_0 [ 286.255941] protocol 88fb is buggy, dev hsr_slave_1 22:43:45 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f000086fff4)={0x20000000}) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) setuid(0x0) [ 286.363079] device nr0 entered promiscuous mode 22:43:45 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) 22:43:45 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f000086fff4)={0x20000000}) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) setuid(0x0) 22:43:45 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0xe0000200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 22:43:45 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'nr0\x01\x00', 0x4009}) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x123, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) ioctl$TUNSETLINK(r0, 0x400454cd, 0x308) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a1, &(0x7f0000000680)='&@[\x00') r3 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r3) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40042409, 0x1) socket$kcm(0x29, 0x5, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-0\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 22:43:46 executing program 0: r0 = gettid() timer_create(0x0, 0x0, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x60082) readv(r1, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/143, 0x8f}], 0x1) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) tkill(r0, 0x1000000000016) 22:43:46 executing program 5: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0xe0000200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 22:43:46 executing program 0: r0 = gettid() timer_create(0x0, 0x0, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x60082) readv(r1, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/143, 0x8f}], 0x1) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) tkill(r0, 0x1000000000016) [ 287.013056] device nr0 entered promiscuous mode 22:43:46 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'nr0\x01\x00', 0x4009}) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) socket$kcm(0x29, 0x5, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8923, &(0x7f0000000000)='nr0\x01:\xf2%\xa3\'>\xf8]\x81\n?\xfa\xff$\x00\x00\xbf\xef\xa9\xac\x03%\xf4D3A}?\a\x8b\x9c[\xdd\x06\xa4\n\xf4\x94\xa8>\xb1\xb1\xa2_&') 22:43:46 executing program 0: r0 = gettid() timer_create(0x0, 0x0, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x60082) readv(r1, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/143, 0x8f}], 0x1) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) tkill(r0, 0x1000000000016) 22:43:46 executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x60082) readv(r1, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/143, 0x8f}], 0x1) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) tkill(r0, 0x1000000000016) [ 287.315100] ÿ$: renamed from nr0 22:43:46 executing program 1: r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000005d40)={&(0x7f00000003c0)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000005d00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev}}}], 0x20}, 0x0) 22:43:46 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdc98}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) creat(0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="edff00f23201ce646ba1a34578d3abdf1e15566701800100000000006722b4ec23b5d1d5e03c26c3c908337c4d4f534b3210b3905290804108f3d8a665b4e8bd8362f147794b5cafb14823ed9d0917e74f2757f4c78e97205e97c0d4c906f4cd078e1f276faf2c18b384e9e262eef2124aac864f91cecb2c48816db7"], 0x1}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x101], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, &(0x7f0000000240)={0x0, 0x2, 0x0, 0x8, 0x0, 0x7, 0x0, 0x1, 0x1, 0x0, 0x9, 0x7, 0x0, 0xff7f, 0x0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) socket$inet6(0xa, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x6, 0x7) listen(r3, 0x0) getuid() socket(0x0, 0x1, 0x0) getegid() socket(0x0, 0x1, 0x0) 22:43:46 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) 22:43:46 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'nr0\x01\x00', 0x4009}) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) socket$kcm(0x29, 0x5, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8923, &(0x7f0000000000)='nr0\x01:\xf2%\xa3\'>\xf8]\x81\n?\xfa\xff$\x00\x00\xbf\xef\xa9\xac\x03%\xf4D3A}?\a\x8b\x9c[\xdd\x06\xa4\n\xf4\x94\xa8>\xb1\xb1\xa2_&') 22:43:46 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0xe0000200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 287.814939] ÿ$: renamed from nr0 22:43:47 executing program 5: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0xe0000200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 22:43:47 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'nr0\x01\x00', 0x4009}) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) socket$kcm(0x29, 0x5, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8923, &(0x7f0000000000)='nr0\x01:\xf2%\xa3\'>\xf8]\x81\n?\xfa\xff$\x00\x00\xbf\xef\xa9\xac\x03%\xf4D3A}?\a\x8b\x9c[\xdd\x06\xa4\n\xf4\x94\xa8>\xb1\xb1\xa2_&') [ 288.144929] ÿ$: renamed from nr0 22:43:47 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) io_submit(r1, 0x20000000000001cb, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 288.340672] audit: type=1804 audit(1575758627.533:265): pid=13766 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir906942753/syzkaller.tQBHmq/374/bus" dev="sda1" ino=17254 res=1 [ 288.416173] audit: type=1804 audit(1575758627.563:266): pid=13766 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.4" name="/root/syzkaller-testdir906942753/syzkaller.tQBHmq/374/bus" dev="sda1" ino=17254 res=1 22:43:47 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000780)=[{&(0x7f00000001c0)=""/101, 0x65}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xbf9d, 0x0, 0x0, 0x800e0053e) shutdown(r0, 0x0) r2 = socket$inet6_tcp(0x1c, 0x1, 0x0) r3 = dup2(r2, r2) poll(&(0x7f0000000040)=[{r3}], 0x1, 0xbc) shutdown(r1, 0x0) 22:43:47 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) [ 288.445759] audit: type=1804 audit(1575758627.563:267): pid=13766 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.4" name="/root/syzkaller-testdir906942753/syzkaller.tQBHmq/374/bus" dev="sda1" ino=17254 res=1 22:43:47 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdc98}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) creat(0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="edff00f23201ce646ba1a34578d3abdf1e15566701800100000000006722b4ec23b5d1d5e03c26c3c908337c4d4f534b3210b3905290804108f3d8a665b4e8bd8362f147794b5cafb14823ed9d0917e74f2757f4c78e97205e97c0d4c906f4cd078e1f276faf2c18b384e9e262eef2124aac864f91cecb2c48816db7"], 0x1}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x101], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, &(0x7f0000000240)={0x0, 0x2, 0x0, 0x8, 0x0, 0x7, 0x0, 0x1, 0x1, 0x0, 0x9, 0x7, 0x0, 0xff7f, 0x0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) socket$inet6(0xa, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x6, 0x7) listen(r3, 0x0) getuid() socket(0x0, 0x1, 0x0) getegid() socket(0x0, 0x1, 0x0) [ 288.631791] IPVS: ftp: loaded support on port[0] = 21 [ 290.000202] net_ratelimit: 20 callbacks suppressed [ 290.000209] protocol 88fb is buggy, dev hsr_slave_0 [ 290.010981] protocol 88fb is buggy, dev hsr_slave_1 22:43:49 executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x60082) readv(r1, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/143, 0x8f}], 0x1) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) tkill(r0, 0x1000000000016) 22:43:49 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdc98}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) creat(0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="edff00f23201ce646ba1a34578d3abdf1e15566701800100000000006722b4ec23b5d1d5e03c26c3c908337c4d4f534b3210b3905290804108f3d8a665b4e8bd8362f147794b5cafb14823ed9d0917e74f2757f4c78e97205e97c0d4c906f4cd078e1f276faf2c18b384e9e262eef2124aac864f91cecb2c48816db7"], 0x1}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x101], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, &(0x7f0000000240)={0x0, 0x2, 0x0, 0x8, 0x0, 0x7, 0x0, 0x1, 0x1, 0x0, 0x9, 0x7, 0x0, 0xff7f, 0x0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) socket$inet6(0xa, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x6, 0x7) listen(r3, 0x0) getuid() socket(0x0, 0x1, 0x0) getegid() socket(0x0, 0x1, 0x0) 22:43:49 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) 22:43:49 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0xe0000200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 22:43:49 executing program 5: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0xe0000200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 22:43:49 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f00000000c0)={0xa, 0x4e22, 0x100}, 0x1c) shutdown(r3, 0x1) r4 = accept(r0, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) close(r3) [ 290.338412] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 22:43:49 executing program 1: [ 290.379996] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 290.400593] protocol 88fb is buggy, dev hsr_slave_0 [ 290.406077] protocol 88fb is buggy, dev hsr_slave_1 22:43:49 executing program 1: 22:43:49 executing program 1: 22:43:49 executing program 1: 22:43:49 executing program 1: 22:43:49 executing program 1: [ 290.800145] protocol 88fb is buggy, dev hsr_slave_0 [ 290.805282] protocol 88fb is buggy, dev hsr_slave_1 [ 291.200140] protocol 88fb is buggy, dev hsr_slave_0 [ 291.205319] protocol 88fb is buggy, dev hsr_slave_1 [ 291.520148] protocol 88fb is buggy, dev hsr_slave_0 [ 291.525340] protocol 88fb is buggy, dev hsr_slave_1 22:43:52 executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x60082) readv(r1, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/143, 0x8f}], 0x1) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) tkill(r0, 0x1000000000016) 22:43:52 executing program 1: syz_emit_ethernet(0x4a, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaac1177987239186dd60a9380900140600fe8000000000000000000000000000aacb24daba7406000066cc9101258289ad00000000040190781259ff40604f6096dc4a2bb9"], &(0x7f0000000100)={0x0, 0x3, [0x0, 0xc0]}) 22:43:52 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x5}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) 22:43:52 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0xe0000200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 22:43:52 executing program 5: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0xe0000200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 22:43:52 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) semop(0x0, 0x0, 0x53475d76ee690e8a) recvfrom$inet(r0, 0x0, 0x100000211, 0x0, 0x0, 0x800e00567) shutdown(r0, 0x0) 22:43:52 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{}, {0x0, 0x20000, 0x0, 0x5, 0xca}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:43:52 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x20040200, 0x0, 0x0, 0x0, 0x0) mknod(0x0, 0x1040, 0x0) execve(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r1 = gettid() kcmp(r1, r1, 0x2, r0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r1, 0x15) open$dir(&(0x7f0000000200)='./file0\x00', 0x27e, 0x0) [ 293.433970] *** Guest State *** [ 293.438305] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 293.447463] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 293.466933] CR3 = 0x00000000fffbc000 [ 293.474146] RSP = 0x00000000000000bf RIP = 0x00000000000000c2 [ 293.481092] RFLAGS=0x00010006 DR7 = 0x0000000000000400 [ 293.487380] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 293.504501] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 293.518691] DS: sel=0x0000, attr=0x00005, limit=0x00020000, base=0x0000000000000000 [ 293.528616] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 293.539783] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 293.549482] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 293.562903] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 293.571620] GDTR: limit=0x00000000, base=0x0000000000000000 [ 293.579934] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 293.581549] IPVS: ftp: loaded support on port[0] = 21 [ 293.591234] IDTR: limit=0x00000000, base=0x0000000000000000 [ 293.611062] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 293.623762] EFER = 0x0000000000000000 PAT = 0x0007040600070406 22:43:52 executing program 4: socket$inet6(0xa, 0xe, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000c40)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) fchdir(r0) munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500)=0xffffffffffffffff, 0x4) getpgid(0x0) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e002, 0x1, &(0x7f0000000280)=[{&(0x7f00000003c0)="eb64c86d4f66732e66617400020441000500077008f80000d8c32d8cbe59628cf9d9ed7b2c", 0x25}], 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x4, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) dup(0xffffffffffffffff) creat(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(r1, &(0x7f00000004c0)='./file1\x00', 0x100000000) [ 293.632045] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 293.640861] Interruptibility = 00000000 ActivityState = 00000000 [ 293.647405] *** Host State *** [ 293.650872] RIP = 0xffffffff8117a490 RSP = 0xffff88805736f998 [ 293.657015] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 293.663690] FSBase=00007f5d50c14700 GSBase=ffff8880aec00000 TRBase=fffffe0000003000 [ 293.672010] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 293.678177] CR0=0000000080050033 CR3=000000009fbc2000 CR4=00000000001426f0 [ 293.685520] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff868018e0 [ 293.692537] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 293.698727] *** Control State *** [ 293.702339] PinBased=0000003f CPUBased=b699edfa SecondaryExec=000000e2 [ 293.710862] EntryControls=0000d1ff ExitControls=002fefff [ 293.716513] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 293.723704] VMEntry: intr_info=8000030d errcode=00000000 ilen=00000000 [ 293.730764] VMExit: intr_info=00000000 errcode=00000000 ilen=00000004 [ 293.737531] reason=80000021 qualification=0000000000000000 [ 293.744525] IDTVectoring: info=00000000 errcode=00000000 [ 293.750741] TSC Offset = 0xffffff5f89953926 [ 293.755267] EPT pointer = 0x0000000097bf701e [ 293.761284] Virtual processor ID = 0x0001 [ 293.775690] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 22:43:53 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) 22:43:53 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{}, {0x0, 0x20000, 0x0, 0x5, 0xca}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 293.862683] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 293.908695] *** Guest State *** [ 293.913219] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 293.928404] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 293.937896] CR3 = 0x00000000fffbc000 [ 293.942379] RSP = 0x00000000000000bf RIP = 0x00000000000000c2 [ 293.948928] RFLAGS=0x00010006 DR7 = 0x0000000000000400 [ 293.955275] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 293.962235] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 293.962250] DS: sel=0x0000, attr=0x00005, limit=0x00020000, base=0x0000000000000000 [ 293.962262] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 293.962272] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 293.962282] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 293.962292] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 293.962301] GDTR: limit=0x00000000, base=0x0000000000000000 [ 293.962312] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 293.962319] IDTR: limit=0x00000000, base=0x0000000000000000 [ 293.962329] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 293.962336] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 293.962344] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 293.962350] Interruptibility = 00000000 ActivityState = 00000000 [ 293.962357] *** Host State *** [ 294.069128] RIP = 0xffffffff8117a490 RSP = 0xffff888087717998 [ 294.075800] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 294.082488] FSBase=00007f5d50c14700 GSBase=ffff8880aec00000 TRBase=fffffe0000003000 [ 294.090443] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 294.096642] CR0=0000000080050033 CR3=00000000a90c0000 CR4=00000000001426f0 22:43:53 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x5}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) [ 294.103816] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff868018e0 [ 294.110634] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 294.116913] *** Control State *** [ 294.120520] PinBased=0000003f CPUBased=b699edfa SecondaryExec=000000e2 [ 294.127242] EntryControls=0000d1ff ExitControls=002fefff [ 294.133140] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 294.164442] VMEntry: intr_info=8000030d errcode=00000000 ilen=00000000 [ 294.172260] VMExit: intr_info=00000000 errcode=00000000 ilen=00000004 [ 294.179727] reason=80000021 qualification=0000000000000000 [ 294.189250] IDTVectoring: info=00000000 errcode=00000000 [ 294.196267] TSC Offset = 0xffffff5f491c30b1 [ 294.202116] EPT pointer = 0x000000009a28501e [ 294.211863] Virtual processor ID = 0x0001 [ 295.360280] net_ratelimit: 20 callbacks suppressed [ 295.360288] protocol 88fb is buggy, dev hsr_slave_0 [ 295.370448] protocol 88fb is buggy, dev hsr_slave_1 [ 295.680226] protocol 88fb is buggy, dev hsr_slave_0 [ 295.685641] protocol 88fb is buggy, dev hsr_slave_1 [ 295.840144] protocol 88fb is buggy, dev hsr_slave_0 [ 295.845303] protocol 88fb is buggy, dev hsr_slave_1 [ 296.240183] protocol 88fb is buggy, dev hsr_slave_0 [ 296.245296] protocol 88fb is buggy, dev hsr_slave_1 22:43:55 executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x60082) readv(r1, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/143, 0x8f}], 0x1) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) tkill(r0, 0x1000000000016) 22:43:55 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0xe0000200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 22:43:55 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{}, {0x0, 0x20000, 0x0, 0x5, 0xca}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:43:55 executing program 5: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0xe0000200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 22:43:55 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) 22:43:55 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x5}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) [ 296.445836] *** Guest State *** [ 296.449731] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 296.459029] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 296.468448] CR3 = 0x00000000fffbc000 [ 296.472640] RSP = 0x00000000000000bf RIP = 0x00000000000000c2 [ 296.478835] RFLAGS=0x00010006 DR7 = 0x0000000000000400 [ 296.485990] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 296.493174] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 296.501488] DS: sel=0x0000, attr=0x00005, limit=0x00020000, base=0x0000000000000000 [ 296.509578] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 296.518027] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 296.526099] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 296.534164] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 296.542172] GDTR: limit=0x00000000, base=0x0000000000000000 [ 296.550278] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 296.558279] IDTR: limit=0x00000000, base=0x0000000000000000 [ 296.566465] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 296.574544] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 296.581173] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 296.588871] Interruptibility = 00000000 ActivityState = 00000000 [ 296.595277] *** Host State *** [ 296.598491] RIP = 0xffffffff8117a490 RSP = 0xffff888093a9f998 [ 296.604529] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 296.611150] FSBase=00007f5d50c14700 GSBase=ffff8880aed00000 TRBase=fffffe0000034000 [ 296.619038] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 296.625145] CR0=0000000080050033 CR3=00000000a92a8000 CR4=00000000001426e0 [ 296.632530] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff868018e0 [ 296.639361] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 296.641610] IPVS: ftp: loaded support on port[0] = 21 [ 296.645567] protocol 88fb is buggy, dev hsr_slave_0 [ 296.655906] protocol 88fb is buggy, dev hsr_slave_1 [ 296.661115] *** Control State *** [ 296.664586] PinBased=0000003f CPUBased=b699edfa SecondaryExec=000000e2 [ 296.671494] EntryControls=0000d1ff ExitControls=002fefff [ 296.676957] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 296.683993] VMEntry: intr_info=8000030d errcode=00000000 ilen=00000000 [ 296.690719] VMExit: intr_info=00000000 errcode=00000000 ilen=00000004 22:43:55 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{}, {0x0, 0x20000, 0x0, 0x5, 0xca}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 296.697305] reason=80000021 qualification=0000000000000000 [ 296.704096] IDTVectoring: info=00000000 errcode=00000000 [ 296.709561] TSC Offset = 0xffffff5ded0936e2 [ 296.713964] EPT pointer = 0x000000008afc701e [ 296.718374] Virtual processor ID = 0x0001 [ 296.805376] *** Guest State *** [ 296.808867] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 296.818214] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 296.827481] CR3 = 0x00000000fffbc000 [ 296.831432] RSP = 0x00000000000000bf RIP = 0x00000000000000c2 [ 296.837932] RFLAGS=0x00010006 DR7 = 0x0000000000000400 [ 296.844459] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 296.851375] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 296.859469] DS: sel=0x0000, attr=0x00005, limit=0x00020000, base=0x0000000000000000 [ 296.867806] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 296.876201] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 296.884447] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 296.892550] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 296.900566] GDTR: limit=0x00000000, base=0x0000000000000000 [ 296.900580] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 296.900588] IDTR: limit=0x00000000, base=0x0000000000000000 [ 296.900601] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 296.900609] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 296.900616] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 296.900621] Interruptibility = 00000000 ActivityState = 00000000 [ 296.900623] *** Host State *** [ 296.900630] RIP = 0xffffffff8117a490 RSP = 0xffff888093a9f998 [ 296.900644] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 296.900652] FSBase=00007f5d50c14700 GSBase=ffff8880aed00000 TRBase=fffffe0000034000 [ 296.900659] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 296.900668] CR0=0000000080050033 CR3=00000000a9339000 CR4=00000000001426e0 [ 296.900679] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff868018e0 [ 296.900686] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 296.900688] *** Control State *** [ 296.900694] PinBased=0000003f CPUBased=b699edfa SecondaryExec=000000e2 [ 296.900698] EntryControls=0000d1ff ExitControls=002fefff [ 296.900706] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 296.900711] VMEntry: intr_info=8000030d errcode=00000000 ilen=00000000 [ 296.900714] VMExit: intr_info=00000000 errcode=00000000 ilen=00000004 [ 296.900718] reason=80000021 qualification=0000000000000000 [ 296.900722] IDTVectoring: info=00000000 errcode=00000000 22:43:56 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 296.900726] TSC Offset = 0xffffff5dbbd5e2d5 [ 296.900730] EPT pointer = 0x00000000a193901e [ 296.900735] Virtual processor ID = 0x0001 22:43:56 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:43:56 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) 22:43:56 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) 22:43:56 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:43:58 executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x60082) readv(r1, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/143, 0x8f}], 0x1) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) tkill(r0, 0x1000000000016) 22:43:58 executing program 5: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) clone(0xe0000200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 22:43:58 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) 22:43:58 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{}, {0x0, 0x20000, 0x0, 0x5, 0xca}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:43:58 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0xe0000200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 22:43:58 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) 22:43:58 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) [ 299.478287] *** Guest State *** [ 299.488692] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 299.498289] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 299.507559] CR3 = 0x00000000fffbc000 [ 299.511461] RSP = 0x00000000000000fb RIP = 0x0000000000000000 [ 299.517678] RFLAGS=0x00010002 DR7 = 0x0000000000000400 [ 299.524007] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 299.531145] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 299.539273] DS: sel=0x0000, attr=0x00005, limit=0x00020000, base=0x0000000000000000 [ 299.548193] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 299.557322] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 299.565757] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 22:43:58 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) [ 299.574706] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 299.583481] GDTR: limit=0x00000000, base=0x0000000000000000 [ 299.592348] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 299.603892] IDTR: limit=0x00000000, base=0x0000000000000000 [ 299.612879] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 299.621251] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 299.628008] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 299.635816] Interruptibility = 00000000 ActivityState = 00000000 [ 299.642701] *** Host State *** [ 299.646073] RIP = 0xffffffff8117a490 RSP = 0xffff88805ac57998 [ 299.657652] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 299.664337] FSBase=00007f5d50c14700 GSBase=ffff8880aed00000 TRBase=fffffe0000003000 [ 299.674061] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 299.684925] CR0=0000000080050033 CR3=0000000083673000 CR4=00000000001426e0 [ 299.693436] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff868018e0 [ 299.702800] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 299.709434] *** Control State *** [ 299.714002] PinBased=0000003f CPUBased=b699edfa SecondaryExec=000000e2 [ 299.722859] IPVS: ftp: loaded support on port[0] = 21 22:43:58 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) [ 299.730561] EntryControls=0000d1ff ExitControls=002fefff [ 299.737329] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 299.745211] VMEntry: intr_info=80000306 errcode=00000000 ilen=00000000 [ 299.752183] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 299.759009] reason=80000021 qualification=0000000000000000 [ 299.765669] IDTVectoring: info=00000000 errcode=00000000 [ 299.771557] TSC Offset = 0xffffff5c4d2ec2e1 [ 299.776019] EPT pointer = 0x00000000a921701e [ 299.780666] Virtual processor ID = 0x0001 22:43:59 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) 22:43:59 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{}, {0x0, 0x20000, 0x0, 0x5, 0xca}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:43:59 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(0xffffffffffffffff, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) [ 299.927341] *** Guest State *** [ 299.930987] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 299.939937] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 299.955764] CR3 = 0x00000000fffbc000 [ 299.960558] RSP = 0x00000000000000fb RIP = 0x0000000000000000 [ 299.967179] RFLAGS=0x00010002 DR7 = 0x0000000000000400 [ 299.974490] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 299.981704] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 299.989875] DS: sel=0x0000, attr=0x00005, limit=0x00020000, base=0x0000000000000000 [ 299.998400] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 300.010751] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 300.019296] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 300.027838] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 300.036413] GDTR: limit=0x00000000, base=0x0000000000000000 [ 300.044625] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 300.053130] IDTR: limit=0x00000000, base=0x0000000000000000 [ 300.061674] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 300.070208] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 300.076805] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 300.084566] Interruptibility = 00000000 ActivityState = 00000000 [ 300.090980] *** Host State *** [ 300.094329] RIP = 0xffffffff8117a490 RSP = 0xffff88805a9b7998 [ 300.101227] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 300.107784] FSBase=00007f5d50c14700 GSBase=ffff8880aed00000 TRBase=fffffe0000003000 [ 300.115880] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 300.122025] CR0=0000000080050033 CR3=0000000097d4b000 CR4=00000000001426e0 [ 300.129155] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff868018e0 [ 300.136120] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 300.142344] *** Control State *** [ 300.146028] PinBased=0000003f CPUBased=b699edfa SecondaryExec=000000e2 [ 300.152997] EntryControls=0000d1ff ExitControls=002fefff [ 300.158622] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 300.165891] VMEntry: intr_info=80000306 errcode=00000000 ilen=00000000 [ 300.172774] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 300.179486] reason=80000021 qualification=0000000000000000 [ 300.186142] IDTVectoring: info=00000000 errcode=00000000 [ 300.191890] TSC Offset = 0xffffff5c10f4d376 [ 300.196402] EPT pointer = 0x00000000a900401e [ 300.201138] Virtual processor ID = 0x0001 [ 300.410161] net_ratelimit: 20 callbacks suppressed [ 300.410168] protocol 88fb is buggy, dev hsr_slave_0 [ 300.415572] protocol 88fb is buggy, dev hsr_slave_1 [ 300.800170] protocol 88fb is buggy, dev hsr_slave_0 [ 300.805447] protocol 88fb is buggy, dev hsr_slave_1 [ 301.200170] protocol 88fb is buggy, dev hsr_slave_0 [ 301.205276] protocol 88fb is buggy, dev hsr_slave_1 [ 301.600133] protocol 88fb is buggy, dev hsr_slave_0 [ 301.605260] protocol 88fb is buggy, dev hsr_slave_1 [ 301.920182] protocol 88fb is buggy, dev hsr_slave_0 [ 301.925313] protocol 88fb is buggy, dev hsr_slave_1 22:44:01 executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x60082) readv(r1, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/143, 0x8f}], 0x1) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) tkill(r0, 0x1000000000016) 22:44:01 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{}, {0x0, 0x20000, 0x0, 0x5, 0xca}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:44:01 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) 22:44:01 executing program 5: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) clone(0xe0000200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 22:44:01 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x0, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0xe0000200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 22:44:01 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(0xffffffffffffffff, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) [ 302.533155] *** Guest State *** [ 302.537565] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 302.546997] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 302.556067] CR3 = 0x00000000fffbc000 [ 302.561353] RSP = 0x00000000000000fb RIP = 0x0000000000000000 [ 302.567394] RFLAGS=0x00010002 DR7 = 0x0000000000000400 [ 302.573918] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 302.581327] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 302.589612] DS: sel=0x0000, attr=0x00005, limit=0x00020000, base=0x0000000000000000 [ 302.597830] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 302.606269] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 302.614479] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 302.622624] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 302.630832] GDTR: limit=0x00000000, base=0x0000000000000000 [ 302.639693] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 302.647931] IDTR: limit=0x00000000, base=0x0000000000000000 [ 302.656042] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 302.664099] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 302.670909] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 302.678375] Interruptibility = 00000000 ActivityState = 00000000 [ 302.684975] *** Host State *** [ 302.688191] RIP = 0xffffffff8117a490 RSP = 0xffff88805e5bf998 [ 302.694482] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 302.701331] FSBase=00007f5d50c14700 GSBase=ffff8880aed00000 TRBase=fffffe0000034000 [ 302.709336] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 302.715372] CR0=0000000080050033 CR3=000000009edf3000 CR4=00000000001426e0 [ 302.722532] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff868018e0 [ 302.729318] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 302.735510] *** Control State *** [ 302.738982] PinBased=0000003f CPUBased=b699edfa SecondaryExec=000000e2 [ 302.741592] IPVS: ftp: loaded support on port[0] = 21 [ 302.745817] EntryControls=0000d1ff ExitControls=002fefff [ 302.756509] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 302.763526] VMEntry: intr_info=80000306 errcode=00000000 ilen=00000000 [ 302.770392] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 302.776969] reason=80000021 qualification=0000000000000000 22:44:02 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{}, {0x0, 0x20000, 0x0, 0x5, 0xca}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 302.783789] IDTVectoring: info=00000000 errcode=00000000 [ 302.789345] TSC Offset = 0xffffff5aa9de47ec [ 302.793762] EPT pointer = 0x000000009775401e [ 302.798175] Virtual processor ID = 0x0001 [ 302.868665] *** Guest State *** [ 302.872354] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 302.881649] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 302.890789] CR3 = 0x00000000fffbc000 [ 302.894549] RSP = 0x00000000000000fb RIP = 0x0000000000000000 [ 302.900744] RFLAGS=0x00010002 DR7 = 0x0000000000000400 [ 302.906841] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 302.913707] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 302.921784] DS: sel=0x0000, attr=0x00005, limit=0x00020000, base=0x0000000000000000 [ 302.930139] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 302.938236] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 302.946509] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 302.954576] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 302.963387] GDTR: limit=0x00000000, base=0x0000000000000000 [ 302.971630] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 302.979609] IDTR: limit=0x00000000, base=0x0000000000000000 [ 302.987715] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 302.995883] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 302.995893] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 302.995900] Interruptibility = 00000000 ActivityState = 00000000 [ 302.995903] *** Host State *** [ 302.995910] RIP = 0xffffffff8117a490 RSP = 0xffff888057d37998 [ 302.995924] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 302.995933] FSBase=00007f5d50c14700 GSBase=ffff8880aed00000 TRBase=fffffe0000034000 [ 302.995940] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 302.995951] CR0=0000000080050033 CR3=0000000095296000 CR4=00000000001426e0 [ 302.995962] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff868018e0 [ 302.995969] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 302.995972] *** Control State *** [ 302.995977] PinBased=0000003f CPUBased=b699edfa SecondaryExec=000000e2 [ 302.995987] EntryControls=0000d1ff ExitControls=002fefff [ 303.010424] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 303.010430] VMEntry: intr_info=80000306 errcode=00000000 ilen=00000000 [ 303.010436] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 303.010441] reason=80000021 qualification=0000000000000000 [ 303.010445] IDTVectoring: info=00000000 errcode=00000000 22:44:02 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{}, {0x0, 0x20000, 0x0, 0x5, 0xca}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 303.010449] TSC Offset = 0xffffff5a7ba7fc59 [ 303.010454] EPT pointer = 0x000000009813001e [ 303.010460] Virtual processor ID = 0x0001 [ 303.205492] *** Guest State *** [ 303.208916] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 303.218663] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 303.231275] CR3 = 0x00000000fffbc000 [ 303.235231] RSP = 0x00000000000000fb RIP = 0x0000000000000000 [ 303.243578] RFLAGS=0x00010002 DR7 = 0x0000000000000400 [ 303.249701] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 303.257911] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 303.268347] DS: sel=0x0000, attr=0x00005, limit=0x00020000, base=0x0000000000000000 [ 303.278237] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 303.288831] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 22:44:02 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(0xffffffffffffffff, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) 22:44:02 executing program 5: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) clone(0xe0000200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 22:44:02 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) [ 303.309796] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 303.319650] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 303.331821] GDTR: limit=0x00000000, base=0x0000000000000000 [ 303.340014] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 303.352904] IDTR: limit=0x00000000, base=0x0000000000000000 [ 303.364682] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 303.379427] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 303.398133] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 303.409412] Interruptibility = 00000000 ActivityState = 00000000 [ 303.418249] *** Host State *** [ 303.425408] RIP = 0xffffffff8117a490 RSP = 0xffff8880560ff998 [ 303.436768] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 303.450280] FSBase=00007f5d50c14700 GSBase=ffff8880aed00000 TRBase=fffffe0000034000 [ 303.458262] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 303.464851] CR0=0000000080050033 CR3=00000000a5296000 CR4=00000000001426e0 [ 303.472611] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff868018e0 [ 303.479432] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 303.489050] *** Control State *** [ 303.492665] PinBased=0000003f CPUBased=b699edfa SecondaryExec=000000e2 [ 303.499415] EntryControls=0000d1ff ExitControls=002fefff 22:44:02 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{}, {0x0, 0x20000, 0x0, 0x5, 0xca}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 303.506185] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 303.514195] VMEntry: intr_info=80000306 errcode=00000000 ilen=00000000 [ 303.521602] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 303.528716] reason=80000021 qualification=0000000000000000 [ 303.535542] IDTVectoring: info=00000000 errcode=00000000 [ 303.541621] TSC Offset = 0xffffff5a4e3716f3 [ 303.546263] EPT pointer = 0x00000000a77ce01e [ 303.551089] Virtual processor ID = 0x0001 [ 303.626626] *** Guest State *** [ 303.631139] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 303.641081] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 303.650845] CR3 = 0x00000000fffbc000 [ 303.655080] RSP = 0x00000000000000fb RIP = 0x0000000000000000 [ 303.662016] RFLAGS=0x00010002 DR7 = 0x0000000000000400 [ 303.670879] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 303.677971] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 303.686923] DS: sel=0x0000, attr=0x00005, limit=0x00020000, base=0x0000000000000000 [ 303.695786] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 303.704276] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 303.714238] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 303.727043] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 303.736828] GDTR: limit=0x00000000, base=0x0000000000000000 [ 303.745820] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 303.755347] IDTR: limit=0x00000000, base=0x0000000000000000 [ 303.766300] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 303.775405] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 303.782565] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 303.791343] Interruptibility = 00000000 ActivityState = 00000000 [ 303.798683] *** Host State *** [ 303.802771] RIP = 0xffffffff8117a490 RSP = 0xffff8880560ff998 [ 303.809343] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 303.816383] FSBase=00007f5d50c14700 GSBase=ffff8880aec00000 TRBase=fffffe0000003000 [ 303.825176] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 303.832221] CR0=0000000080050033 CR3=00000000a5296000 CR4=00000000001426f0 [ 303.841195] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff868018e0 [ 303.848809] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 303.855528] *** Control State *** [ 303.859623] PinBased=0000003f CPUBased=b699edfa SecondaryExec=000000e2 [ 303.877912] EntryControls=0000d1ff ExitControls=002fefff [ 303.884503] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 303.893231] VMEntry: intr_info=80000306 errcode=00000000 ilen=00000000 [ 303.900676] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 303.907844] reason=80000021 qualification=0000000000000000 [ 303.915067] IDTVectoring: info=00000000 errcode=00000000 [ 303.921468] TSC Offset = 0xffffff5a13cab758 [ 303.926579] EPT pointer = 0x00000000585ca01e [ 303.931666] Virtual processor ID = 0x0001 [ 304.211660] IPVS: ftp: loaded support on port[0] = 21 22:44:04 executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x60082) readv(r1, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/143, 0x8f}], 0x1) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) tkill(r0, 0x1000000000016) 22:44:04 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x0, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0xe0000200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 22:44:04 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{}, {0x0, 0x20000, 0x0, 0x5, 0xca}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:44:04 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) 22:44:04 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) 22:44:04 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) clone(0xe0000200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 305.598446] *** Guest State *** [ 305.602900] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 305.612210] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 305.621981] CR3 = 0x00000000fffbc000 [ 305.626307] RSP = 0x00000000000000bf RIP = 0x0000000000001fff [ 305.634198] RFLAGS=0x00010046 DR7 = 0x0000000000000400 [ 305.640590] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 305.648043] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 305.656827] DS: sel=0x0000, attr=0x00005, limit=0x00020000, base=0x0000000000000000 [ 305.665451] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 305.673995] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 305.682624] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 305.682637] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 305.682645] GDTR: limit=0x00000000, base=0x0000000000000000 [ 305.682656] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 305.699161] IDTR: limit=0x00000000, base=0x0000000000000000 [ 305.716556] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 305.733196] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 305.740978] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 305.749584] Interruptibility = 00000000 ActivityState = 00000000 [ 305.757187] *** Host State *** [ 305.760805] net_ratelimit: 20 callbacks suppressed [ 305.760810] protocol 88fb is buggy, dev hsr_slave_0 [ 305.766085] protocol 88fb is buggy, dev hsr_slave_1 [ 305.776974] RIP = 0xffffffff8117a490 RSP = 0xffff88805873f998 [ 305.783347] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 305.790970] FSBase=00007f5d50c14700 GSBase=ffff8880aec00000 TRBase=fffffe0000003000 [ 305.799596] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 305.799605] CR0=0000000080050033 CR3=0000000058d53000 CR4=00000000001426f0 [ 305.799614] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff868018e0 [ 305.799622] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 305.813625] *** Control State *** [ 305.831115] PinBased=0000003f CPUBased=b699edfa SecondaryExec=000000e2 [ 305.838394] EntryControls=0000d1ff ExitControls=002fefff 22:44:05 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{}, {0x0, 0x20000, 0x0, 0x5, 0xca}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 305.845192] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 305.852514] VMEntry: intr_info=80000306 errcode=00000000 ilen=00000000 [ 305.860092] VMExit: intr_info=00000000 errcode=00000000 ilen=00000002 [ 305.866911] reason=80000021 qualification=0000000000000000 [ 305.873761] IDTVectoring: info=00000000 errcode=00000000 [ 305.880484] TSC Offset = 0xffffff5905cd6c93 [ 305.886374] EPT pointer = 0x000000008eba001e [ 305.892238] Virtual processor ID = 0x0001 [ 306.001786] *** Guest State *** [ 306.005820] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 306.020965] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 306.036572] CR3 = 0x00000000fffbc000 [ 306.043884] RSP = 0x00000000000000bf RIP = 0x0000000000001fff [ 306.055512] RFLAGS=0x00010046 DR7 = 0x0000000000000400 [ 306.065335] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 306.076983] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 306.085808] protocol 88fb is buggy, dev hsr_slave_0 [ 306.085866] protocol 88fb is buggy, dev hsr_slave_1 [ 306.103951] DS: sel=0x0000, attr=0x00005, limit=0x00020000, base=0x0000000000000000 [ 306.114683] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 306.126752] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 306.137079] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 306.149411] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 306.160340] GDTR: limit=0x00000000, base=0x0000000000000000 [ 306.169509] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 306.183229] IDTR: limit=0x00000000, base=0x0000000000000000 [ 306.194229] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 306.206300] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 306.215429] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 306.227414] Interruptibility = 00000000 ActivityState = 00000000 [ 306.236221] *** Host State *** [ 306.239825] RIP = 0xffffffff8117a490 RSP = 0xffff8880560ff998 [ 306.246759] protocol 88fb is buggy, dev hsr_slave_0 [ 306.246813] protocol 88fb is buggy, dev hsr_slave_1 [ 306.263277] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 306.270370] FSBase=00007f5d50c14700 GSBase=ffff8880aed00000 TRBase=fffffe0000034000 [ 306.278902] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 306.290681] CR0=0000000080050033 CR3=00000000a8128000 CR4=00000000001426e0 [ 306.298700] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff868018e0 22:44:05 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) 22:44:05 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) [ 306.311657] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 306.319030] *** Control State *** [ 306.329416] PinBased=0000003f CPUBased=b699edfa SecondaryExec=000000e2 [ 306.338706] EntryControls=0000d1ff ExitControls=002fefff 22:44:05 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) clone(0xe0000200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 306.388844] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 306.417911] VMEntry: intr_info=80000306 errcode=00000000 ilen=00000000 22:44:05 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x0, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0xe0000200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 306.452937] VMExit: intr_info=00000000 errcode=00000000 ilen=00000002 [ 306.490810] reason=80000021 qualification=0000000000000000 [ 306.512603] IDTVectoring: info=00000000 errcode=00000000 [ 306.525658] TSC Offset = 0xffffff58cea3be3a [ 306.550835] EPT pointer = 0x00000000a921701e [ 306.556268] Virtual processor ID = 0x0001 22:44:05 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{}, {0x0, 0x20000, 0x0, 0x5, 0xca}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 306.650148] protocol 88fb is buggy, dev hsr_slave_0 [ 306.655546] protocol 88fb is buggy, dev hsr_slave_1 [ 306.707975] *** Guest State *** [ 306.716680] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 306.727744] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 306.743245] CR3 = 0x00000000fffbc000 [ 306.747660] RSP = 0x00000000000000bf RIP = 0x0000000000001fff [ 306.758857] RFLAGS=0x00010046 DR7 = 0x0000000000000400 [ 306.769528] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 306.779356] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 306.790092] DS: sel=0x0000, attr=0x00005, limit=0x00020000, base=0x0000000000000000 [ 306.799180] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 306.809231] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 306.817742] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 306.826700] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 306.835139] GDTR: limit=0x00000000, base=0x0000000000000000 [ 306.860120] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 306.869151] IDTR: limit=0x00000000, base=0x0000000000000000 [ 306.877959] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 306.887569] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 306.894817] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 306.902968] Interruptibility = 00000000 ActivityState = 00000000 [ 306.909831] *** Host State *** [ 306.913819] RIP = 0xffffffff8117a490 RSP = 0xffff888052237998 [ 306.921190] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 306.928343] FSBase=00007f5d50c14700 GSBase=ffff8880aed00000 TRBase=fffffe0000003000 [ 306.936492] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 306.943032] CR0=0000000080050033 CR3=00000000a5bb5000 CR4=00000000001426e0 [ 306.950628] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff868018e0 [ 306.957496] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 306.963771] *** Control State *** [ 306.967841] PinBased=0000003f CPUBased=b699edfa SecondaryExec=000000e2 [ 306.975279] EntryControls=0000d1ff ExitControls=002fefff [ 306.981688] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 306.989420] VMEntry: intr_info=80000306 errcode=00000000 ilen=00000000 [ 306.996496] VMExit: intr_info=00000000 errcode=00000000 ilen=00000002 [ 307.003512] reason=80000021 qualification=0000000000000000 [ 307.010895] IDTVectoring: info=00000000 errcode=00000000 [ 307.018758] TSC Offset = 0xffffff586d8c52cb [ 307.023469] EPT pointer = 0x00000000888ce01e [ 307.028341] Virtual processor ID = 0x0001 [ 307.040235] protocol 88fb is buggy, dev hsr_slave_0 [ 307.045684] protocol 88fb is buggy, dev hsr_slave_1 [ 307.521209] IPVS: ftp: loaded support on port[0] = 21 22:44:07 executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x60082) readv(r1, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/143, 0x8f}], 0x1) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) tkill(r0, 0x1000000000016) 22:44:07 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{}, {0x0, 0x20000, 0x0, 0x5, 0xca}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:44:07 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) 22:44:07 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) 22:44:07 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0xe0000200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 22:44:07 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) clone(0xe0000200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 308.629905] *** Guest State *** [ 308.638036] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 308.650091] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 308.659468] CR3 = 0x00000000fffbc000 [ 308.668156] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 308.674695] RFLAGS=0x00010002 DR7 = 0x0000000000000400 [ 308.684209] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 308.691474] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 308.699920] DS: sel=0x0000, attr=0x00005, limit=0x00020000, base=0x0000000000000000 [ 308.713317] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 308.723463] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 308.734386] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 308.743863] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 308.752989] GDTR: limit=0x00000000, base=0x0000000000000000 [ 308.762008] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 308.773346] IDTR: limit=0x00000000, base=0x0000000000000000 [ 308.784033] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 308.794026] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 308.800919] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 308.808726] Interruptibility = 00000000 ActivityState = 00000000 [ 308.815387] *** Host State *** [ 308.818751] RIP = 0xffffffff8117a490 RSP = 0xffff888054717998 [ 308.825973] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 308.833125] FSBase=00007f5d50c14700 GSBase=ffff8880aec00000 TRBase=fffffe0000034000 [ 308.841329] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 308.847492] CR0=0000000080050033 CR3=000000009bd16000 CR4=00000000001426f0 [ 308.847504] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff868018e0 [ 308.863576] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 308.869839] *** Control State *** [ 308.869846] PinBased=0000003f CPUBased=b699edfa SecondaryExec=000000e2 [ 308.869850] EntryControls=0000d1ff ExitControls=002fefff [ 308.869858] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 308.869863] VMEntry: intr_info=80000306 errcode=00000000 ilen=00000000 [ 308.869868] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 308.869874] reason=80000021 qualification=0000000000000000 [ 308.869878] IDTVectoring: info=00000000 errcode=00000000 [ 308.869883] TSC Offset = 0xffffff576619e124 [ 308.869889] EPT pointer = 0x00000000a45df01e 22:44:08 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{}, {0x0, 0x20000, 0x0, 0x5, 0xca}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 308.869897] Virtual processor ID = 0x0001 [ 309.015977] *** Guest State *** [ 309.019984] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 309.033314] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 309.043944] CR3 = 0x00000000fffbc000 [ 309.048151] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 309.048161] RFLAGS=0x00010002 DR7 = 0x0000000000000400 [ 309.064000] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 309.071372] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 309.079839] DS: sel=0x0000, attr=0x00005, limit=0x00020000, base=0x0000000000000000 [ 309.088237] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 309.096427] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 309.105166] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 309.114084] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 309.123676] GDTR: limit=0x00000000, base=0x0000000000000000 [ 309.132337] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 309.140901] IDTR: limit=0x00000000, base=0x0000000000000000 [ 309.149640] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 309.158583] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 309.166149] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 309.174312] Interruptibility = 00000000 ActivityState = 00000000 [ 309.180984] *** Host State *** [ 309.184655] RIP = 0xffffffff8117a490 RSP = 0xffff888052a17998 [ 309.191426] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 309.198385] FSBase=00007f5d50c14700 GSBase=ffff8880aec00000 TRBase=fffffe0000003000 [ 309.207443] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 309.214269] CR0=0000000080050033 CR3=0000000054134000 CR4=00000000001426f0 [ 309.222036] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff868018e0 [ 309.230593] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 309.237150] *** Control State *** [ 309.241267] PinBased=0000003f CPUBased=b699edfa SecondaryExec=000000e2 [ 309.249175] EntryControls=0000d1ff ExitControls=002fefff [ 309.255936] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 22:44:08 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{}, {0x0, 0x20000, 0x0, 0x5, 0xca}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 309.263676] VMEntry: intr_info=80000306 errcode=00000000 ilen=00000000 [ 309.272293] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 309.279984] reason=80000021 qualification=0000000000000000 [ 309.287006] IDTVectoring: info=00000000 errcode=00000000 [ 309.293434] TSC Offset = 0xffffff57311a0dc4 [ 309.298352] EPT pointer = 0x00000000a4e7601e [ 309.303184] Virtual processor ID = 0x0001 22:44:08 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r3 = syz_open_pts(r1, 0x4000000000000002) r4 = dup3(r3, r0, 0x0) ioctl$TCXONC(r4, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r4, 0x540a, 0x1) 22:44:08 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) clone(0xe0000200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 22:44:08 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0xe0000200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 22:44:08 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) [ 310.800230] net_ratelimit: 20 callbacks suppressed [ 310.800236] protocol 88fb is buggy, dev hsr_slave_0 [ 310.812060] protocol 88fb is buggy, dev hsr_slave_1 [ 311.200250] protocol 88fb is buggy, dev hsr_slave_0 [ 311.207036] protocol 88fb is buggy, dev hsr_slave_1 22:44:10 executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x60082) readv(r1, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/143, 0x8f}], 0x1) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) tkill(r0, 0x1000000000016) 22:44:10 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{}, {0x0, 0x20000, 0x0, 0x5, 0xca}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:44:10 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r3 = syz_open_pts(r1, 0x4000000000000002) r4 = dup3(r3, r0, 0x0) ioctl$TCXONC(r4, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r4, 0x540a, 0x1) 22:44:10 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) 22:44:10 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0xe0000200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 22:44:10 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) clone(0xe0000200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 311.600138] protocol 88fb is buggy, dev hsr_slave_0 [ 311.605720] protocol 88fb is buggy, dev hsr_slave_1 [ 311.686675] *** Guest State *** [ 311.692232] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 311.704464] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 311.716445] CR3 = 0x00000000fffbc000 [ 311.724920] RSP = 0x00000000000000fb RIP = 0x0000000000000000 [ 311.736027] RFLAGS=0x00010002 DR7 = 0x0000000000000400 [ 311.746152] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 311.757222] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 311.772535] DS: sel=0x0000, attr=0x00005, limit=0x00020000, base=0x0000000000000000 [ 311.783796] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 311.794844] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 311.807320] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 311.818881] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 311.829831] GDTR: limit=0x00000000, base=0x0000000000000000 [ 311.841588] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 311.850321] IDTR: limit=0x00000000, base=0x0000000000000000 [ 311.859322] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 311.868681] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 311.875903] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 311.884316] Interruptibility = 00000000 ActivityState = 00000000 [ 311.892065] *** Host State *** [ 311.896395] RIP = 0xffffffff8117a490 RSP = 0xffff88805a937998 [ 311.905664] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 311.914585] FSBase=00007f5d50c14700 GSBase=ffff8880aed00000 TRBase=fffffe0000003000 [ 311.940118] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 311.947248] CR0=0000000080050033 CR3=00000000a0aed000 CR4=00000000001426e0 [ 311.967847] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff868018e0 [ 311.976214] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 311.984416] *** Control State *** [ 311.989195] PinBased=0000003f CPUBased=b699edfa SecondaryExec=000000e2 [ 311.996548] EntryControls=0000d1ff ExitControls=002fefff [ 312.003306] protocol 88fb is buggy, dev hsr_slave_0 [ 312.003365] protocol 88fb is buggy, dev hsr_slave_1 [ 312.018410] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 312.029429] VMEntry: intr_info=80000306 errcode=00000000 ilen=00000000 [ 312.038714] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 312.046233] reason=80000021 qualification=0000000000000000 [ 312.055573] IDTVectoring: info=00000000 errcode=00000000 [ 312.069778] TSC Offset = 0xffffff55c3428fc5 [ 312.075792] EPT pointer = 0x0000000095aea01e [ 312.087479] Virtual processor ID = 0x0001 22:44:11 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{}, {0x0, 0x20000, 0x0, 0x5, 0xca}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 312.184631] *** Guest State *** [ 312.189348] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 312.200473] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 312.211696] CR3 = 0x00000000fffbc000 [ 312.215946] RSP = 0x00000000000000fb RIP = 0x0000000000000000 [ 312.222527] RFLAGS=0x00010002 DR7 = 0x0000000000000400 [ 312.239024] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 312.247694] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 312.263638] DS: sel=0x0000, attr=0x00005, limit=0x00020000, base=0x0000000000000000 [ 312.273611] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 312.287400] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 312.297850] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 312.308610] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 312.318738] GDTR: limit=0x00000000, base=0x0000000000000000 [ 312.327180] protocol 88fb is buggy, dev hsr_slave_0 [ 312.327227] protocol 88fb is buggy, dev hsr_slave_1 [ 312.338376] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 312.349177] IDTR: limit=0x00000000, base=0x0000000000000000 [ 312.359716] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 312.370458] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 312.377517] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 312.386282] Interruptibility = 00000000 ActivityState = 00000000 [ 312.393029] *** Host State *** [ 312.397891] RIP = 0xffffffff8117a490 RSP = 0xffff88805a937998 [ 312.404820] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 312.413010] FSBase=00007f5d50c14700 GSBase=ffff8880aec00000 TRBase=fffffe0000034000 [ 312.421634] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 312.428954] CR0=0000000080050033 CR3=0000000098715000 CR4=00000000001426f0 22:44:11 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r3 = syz_open_pts(r1, 0x4000000000000002) r4 = dup3(r3, r0, 0x0) ioctl$TCXONC(r4, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r4, 0x540a, 0x1) [ 312.437008] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff868018e0 [ 312.445006] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 312.453699] *** Control State *** [ 312.457947] PinBased=0000003f CPUBased=b699edfa SecondaryExec=000000e2 [ 312.465550] EntryControls=0000d1ff ExitControls=002fefff [ 312.471101] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 22:44:11 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) [ 312.484825] VMEntry: intr_info=80000306 errcode=00000000 ilen=00000000 [ 312.494651] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 312.508390] reason=80000021 qualification=0000000000000000 [ 312.521986] IPVS: ftp: loaded support on port[0] = 21 [ 312.524325] IDTVectoring: info=00000000 errcode=00000000 22:44:11 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0xe0000200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 22:44:11 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{}, {0x0, 0x20000, 0x0, 0x5, 0xca}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 312.539242] TSC Offset = 0xffffff557e97392a [ 312.549605] EPT pointer = 0x000000009fc6501e [ 312.555181] Virtual processor ID = 0x0001 [ 312.648064] *** Guest State *** [ 312.652361] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 312.663840] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 312.673749] CR3 = 0x00000000fffbc000 [ 312.677979] RSP = 0x00000000000000fb RIP = 0x0000000000000000 [ 312.685889] RFLAGS=0x00010002 DR7 = 0x0000000000000400 [ 312.692811] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 312.700253] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 312.710681] DS: sel=0x0000, attr=0x00005, limit=0x00020000, base=0x0000000000000000 [ 312.720145] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 312.728620] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 312.739423] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 312.750614] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 312.761127] GDTR: limit=0x00000000, base=0x0000000000000000 [ 312.770101] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 312.779363] IDTR: limit=0x00000000, base=0x0000000000000000 [ 312.779376] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 312.796971] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 312.796981] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 312.796992] Interruptibility = 00000000 ActivityState = 00000000 [ 312.814002] *** Host State *** [ 312.825317] RIP = 0xffffffff8117a490 RSP = 0xffff8880598d7998 [ 312.832550] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 312.840834] FSBase=00007f5d50c14700 GSBase=ffff8880aec00000 TRBase=fffffe0000003000 [ 312.849683] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 312.857649] CR0=0000000080050033 CR3=000000008ad00000 CR4=00000000001426f0 [ 312.865297] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff868018e0 [ 312.874175] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 312.880735] *** Control State *** [ 312.884807] PinBased=0000003f CPUBased=b699edfa SecondaryExec=000000e2 [ 312.893684] EntryControls=0000d1ff ExitControls=002fefff [ 312.899554] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 312.907403] VMEntry: intr_info=80000306 errcode=00000000 ilen=00000000 [ 312.914954] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 312.921946] reason=80000021 qualification=0000000000000000 [ 312.929434] IDTVectoring: info=00000000 errcode=00000000 [ 312.935182] TSC Offset = 0xffffff553f046153 [ 312.940713] EPT pointer = 0x0000000080b7701e 22:44:12 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000440)={{}, {0x0, 0x20000, 0x0, 0x5, 0xca}}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 312.946352] Virtual processor ID = 0x0001 [ 313.550934] IPVS: ftp: loaded support on port[0] = 21 22:44:13 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) 22:44:13 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000440)={{}, {0x0, 0x20000, 0x0, 0x5, 0xca}}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 22:44:13 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_open_pts(r1, 0x4000000000000002) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x1) 22:44:13 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) clone(0xe0000200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 22:44:13 executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = syz_open_dev$sg(0x0, 0x0, 0x60082) readv(r1, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/143, 0x8f}], 0x1) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) tkill(r0, 0x1000000000016) 22:44:13 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0xe0000200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 22:44:13 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_open_pts(r1, 0x4000000000000002) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x1) 22:44:13 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000440)={{}, {0x0, 0x20000, 0x0, 0x5, 0xca}}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 22:44:13 executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = syz_open_dev$sg(0x0, 0x0, 0x60082) readv(r1, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/143, 0x8f}], 0x1) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) tkill(r0, 0x1000000000016) 22:44:14 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_open_pts(r1, 0x4000000000000002) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x1) 22:44:14 executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = syz_open_dev$sg(0x0, 0x0, 0x60082) readv(r1, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/143, 0x8f}], 0x1) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) tkill(r0, 0x1000000000016) 22:44:14 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r0, 0x4138ae84, &(0x7f0000000440)={{}, {0x0, 0x20000, 0x0, 0x5, 0xca}}) ioctl$KVM_RUN(r0, 0xae80, 0x0) 22:44:14 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) 22:44:14 executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) readv(r1, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/143, 0x8f}], 0x1) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) tkill(r0, 0x1000000000016) 22:44:14 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$TCXONC(r4, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r4, 0x540a, 0x1) 22:44:14 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) clone(0xe0000200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 22:44:14 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r0, 0x4138ae84, &(0x7f0000000440)={{}, {0x0, 0x20000, 0x0, 0x5, 0xca}}) ioctl$KVM_RUN(r0, 0xae80, 0x0) 22:44:14 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0xe0000200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 22:44:14 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$TCXONC(r4, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r4, 0x540a, 0x1) 22:44:14 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r0, 0x4138ae84, &(0x7f0000000440)={{}, {0x0, 0x20000, 0x0, 0x5, 0xca}}) ioctl$KVM_RUN(r0, 0xae80, 0x0) 22:44:14 executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) readv(r1, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/143, 0x8f}], 0x1) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) tkill(r0, 0x1000000000016) 22:44:14 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$TCXONC(r4, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r4, 0x540a, 0x1) 22:44:14 executing program 1: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r1, 0x4138ae84, &(0x7f0000000440)={{}, {0x0, 0x20000, 0x0, 0x5, 0xca}}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 22:44:15 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r2, r2) r3 = syz_open_pts(r1, 0x4000000000000002) r4 = dup3(r3, r0, 0x0) ioctl$TCXONC(r4, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r4, 0x540a, 0x1) [ 316.160129] net_ratelimit: 20 callbacks suppressed [ 316.160135] protocol 88fb is buggy, dev hsr_slave_0 [ 316.170442] protocol 88fb is buggy, dev hsr_slave_1 22:44:15 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) 22:44:15 executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) readv(r1, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/143, 0x8f}], 0x1) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) tkill(r0, 0x1000000000016) 22:44:15 executing program 1: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r1, 0x4138ae84, &(0x7f0000000440)={{}, {0x0, 0x20000, 0x0, 0x5, 0xca}}) ioctl$KVM_RUN(r1, 0xae80, 0x0) [ 316.442510] IPVS: ftp: loaded support on port[0] = 21 [ 316.490136] protocol 88fb is buggy, dev hsr_slave_0 [ 316.495442] protocol 88fb is buggy, dev hsr_slave_1 [ 316.650114] protocol 88fb is buggy, dev hsr_slave_0 [ 316.655437] protocol 88fb is buggy, dev hsr_slave_1 [ 317.040163] protocol 88fb is buggy, dev hsr_slave_0 [ 317.045305] protocol 88fb is buggy, dev hsr_slave_1 22:44:16 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) clone(0xe0000200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 22:44:16 executing program 1: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r1, 0x4138ae84, &(0x7f0000000440)={{}, {0x0, 0x20000, 0x0, 0x5, 0xca}}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 22:44:16 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0xe0000200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 22:44:16 executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x60082) readv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/143, 0x8f}], 0x1) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) tkill(r0, 0x1000000000016) 22:44:16 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r2, r2) r3 = syz_open_pts(r1, 0x4000000000000002) r4 = dup3(r3, r0, 0x0) ioctl$TCXONC(r4, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r4, 0x540a, 0x1) 22:44:16 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(0xffffffffffffffff, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) 22:44:16 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{}, {0x0, 0x20000, 0x0, 0x5, 0xca}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:44:16 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(0xffffffffffffffff, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) 22:44:16 executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x60082) readv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/143, 0x8f}], 0x1) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) tkill(r0, 0x1000000000016) 22:44:16 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{}, {0x0, 0x20000, 0x0, 0x5, 0xca}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:44:16 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(0xffffffffffffffff, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) [ 317.440131] protocol 88fb is buggy, dev hsr_slave_0 [ 317.445308] protocol 88fb is buggy, dev hsr_slave_1 22:44:16 executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x60082) readv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/143, 0x8f}], 0x1) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) tkill(r0, 0x1000000000016) 22:44:17 executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x60082) readv(r1, 0x0, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) tkill(r0, 0x1000000000016) 22:44:17 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r2, r2) r3 = syz_open_pts(r1, 0x4000000000000002) r4 = dup3(r3, r0, 0x0) ioctl$TCXONC(r4, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r4, 0x540a, 0x1) 22:44:17 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{}, {0x0, 0x20000, 0x0, 0x5, 0xca}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:44:17 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x0) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) 22:44:17 executing program 3: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0xe0000200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 22:44:17 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) clone(0xe0000200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 22:44:17 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r1, 0x4138ae84, &(0x7f0000000440)={{}, {0x0, 0x20000, 0x0, 0x5, 0xca}}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 22:44:17 executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x60082) readv(r1, 0x0, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) tkill(r0, 0x1000000000016) 22:44:17 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x0) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) 22:44:17 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r1, 0x4138ae84, &(0x7f0000000440)={{}, {0x0, 0x20000, 0x0, 0x5, 0xca}}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 22:44:17 executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x60082) readv(r1, 0x0, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) tkill(r0, 0x1000000000016) 22:44:17 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x0) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) 22:44:17 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r1, 0x4138ae84, &(0x7f0000000440)={{}, {0x0, 0x20000, 0x0, 0x5, 0xca}}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 22:44:18 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) clone(0xe0000200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 22:44:18 executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x60082) readv(r1, &(0x7f00000001c0), 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) tkill(r0, 0x1000000000016) 22:44:18 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_open_pts(r1, 0x4000000000000002) r4 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$TCXONC(r4, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r4, 0x540a, 0x1) 22:44:18 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{}, {0x0, 0x20000, 0x0, 0x5, 0xca}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:44:18 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r3, 0x540a, 0x1) 22:44:18 executing program 3: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0xe0000200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 22:44:18 executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x60082) readv(r1, &(0x7f00000001c0), 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) tkill(r0, 0x1000000000016) 22:44:18 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{}, {0x0, 0x20000, 0x0, 0x5, 0xca}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:44:18 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_open_pts(r1, 0x4000000000000002) r4 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$TCXONC(r4, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r4, 0x540a, 0x1) 22:44:18 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_open_pts(r1, 0x4000000000000002) r4 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$TCXONC(r4, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r4, 0x540a, 0x1) 22:44:18 executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x60082) readv(r1, &(0x7f00000001c0), 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) tkill(r0, 0x1000000000016) 22:44:18 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{}, {0x0, 0x20000, 0x0, 0x5, 0xca}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:44:19 executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x60082) readv(r1, &(0x7f00000001c0)=[{0x0}], 0x1) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) tkill(r0, 0x1000000000016) 22:44:19 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, 0xffffffffffffffff, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) 22:44:19 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{}, {0x0, 0x20000, 0x0, 0x5, 0xca}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:44:19 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x0, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) clone(0xe0000200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 22:44:19 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r3, 0x540a, 0x1) [ 319.901179] IPVS: ftp: loaded support on port[0] = 21 [ 320.050430] *** Guest State *** [ 320.053854] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 320.064720] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 320.078456] CR3 = 0x00000000fffbc000 [ 320.084950] RSP = 0x00000000000000fb RIP = 0x0000000000000000 [ 320.091371] RFLAGS=0x00010002 DR7 = 0x0000000000000400 [ 320.097608] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 320.105090] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 320.113267] DS: sel=0x0000, attr=0x00005, limit=0x00020000, base=0x0000000000000000 [ 320.121981] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 320.131738] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 320.140188] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 320.148665] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 320.157113] GDTR: limit=0x00000000, base=0x0000000000000000 [ 320.167052] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 320.175980] IDTR: limit=0x00000000, base=0x0000000000000000 [ 320.184382] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 320.192536] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 320.199084] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 320.207793] Interruptibility = 00000000 ActivityState = 00000000 [ 320.214525] *** Host State *** [ 320.217929] RIP = 0xffffffff8117a490 RSP = 0xffff88805807f998 [ 320.224120] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 320.230934] FSBase=00007f5d50c14700 GSBase=ffff8880aec00000 TRBase=fffffe0000003000 [ 320.238880] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 320.244972] CR0=0000000080050033 CR3=000000009ef3d000 CR4=00000000001426f0 [ 320.252177] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff868018e0 [ 320.259102] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 320.265716] *** Control State *** [ 320.269281] PinBased=0000003f CPUBased=b699edfa SecondaryExec=000000e2 [ 320.276438] EntryControls=0000d1ff ExitControls=002fefff [ 320.282141] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 320.289165] VMEntry: intr_info=80000306 errcode=00000000 ilen=00000000 [ 320.296063] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 320.303465] reason=80000021 qualification=0000000000000000 [ 320.310125] IDTVectoring: info=00000000 errcode=00000000 [ 320.315857] TSC Offset = 0xffffff514869b545 [ 320.320526] EPT pointer = 0x000000008fadb01e [ 320.325038] Virtual processor ID = 0x0001 22:44:19 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, 0xffffffffffffffff, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) 22:44:19 executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x60082) readv(r1, &(0x7f00000001c0)=[{0x0}], 0x1) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) tkill(r0, 0x1000000000016) 22:44:19 executing program 3: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0xe0000200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 22:44:19 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{}, {0x0, 0x20000, 0x0, 0x5, 0xca}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:44:19 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, 0xffffffffffffffff, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) 22:44:19 executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x60082) readv(r1, &(0x7f00000001c0)=[{0x0}], 0x1) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) tkill(r0, 0x1000000000016) [ 320.782667] *** Guest State *** 22:44:20 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r3, 0x540a, 0x1) 22:44:20 executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x60082) readv(r1, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/143, 0x8f}], 0x1) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) tkill(r0, 0x1000000000016) 22:44:20 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x0, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) clone(0xe0000200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 320.809449] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 320.847573] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 22:44:20 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) [ 320.878378] CR3 = 0x00000000fffbc000 [ 320.886847] RSP = 0x00000000000000fb RIP = 0x0000000000000000 [ 320.904189] RFLAGS=0x00010002 DR7 = 0x0000000000000400 [ 320.918516] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 320.935373] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 320.949025] DS: sel=0x0000, attr=0x00005, limit=0x00020000, base=0x0000000000000000 [ 320.958027] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 320.967256] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 22:44:20 executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x60082) readv(r1, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/143, 0x8f}], 0x1) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) tkill(r0, 0x1000000000016) [ 320.977968] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 320.986801] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 320.995226] GDTR: limit=0x00000000, base=0x0000000000000000 [ 321.003529] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 321.011756] IDTR: limit=0x00000000, base=0x0000000000000000 [ 321.019764] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 321.029213] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 321.038420] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 321.047019] Interruptibility = 00000000 ActivityState = 00000000 [ 321.056724] *** Host State *** [ 321.067062] RIP = 0xffffffff8117a490 RSP = 0xffff88808e79f998 [ 321.073656] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 321.080416] FSBase=00007f5d50c14700 GSBase=ffff8880aed00000 TRBase=fffffe0000034000 [ 321.088487] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 321.094661] CR0=0000000080050033 CR3=0000000096315000 CR4=00000000001426e0 [ 321.102181] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff868018e0 [ 321.109886] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 321.109890] *** Control State *** [ 321.109896] PinBased=0000003f CPUBased=b699edfa SecondaryExec=000000e2 [ 321.109901] EntryControls=0000d1ff ExitControls=002fefff 22:44:20 executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x60082) readv(r1, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/143, 0x8f}], 0x1) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) tkill(r0, 0x1000000000016) [ 321.109910] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 321.109914] VMEntry: intr_info=80000306 errcode=00000000 ilen=00000000 [ 321.109919] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 321.109923] reason=80000021 qualification=0000000000000000 [ 321.109927] IDTVectoring: info=00000000 errcode=00000000 [ 321.109931] TSC Offset = 0xffffff50e4dedf5b [ 321.109937] EPT pointer = 0x000000005847901e [ 321.109944] Virtual processor ID = 0x0001 22:44:20 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{}, {0x0, 0x20000, 0x0, 0x5, 0xca}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 321.200151] net_ratelimit: 20 callbacks suppressed [ 321.200157] protocol 88fb is buggy, dev hsr_slave_0 [ 321.210411] protocol 88fb is buggy, dev hsr_slave_1 [ 321.274954] *** Guest State *** [ 321.278324] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 321.287528] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 321.296497] CR3 = 0x00000000fffbc000 [ 321.300313] RSP = 0x00000000000000fb RIP = 0x0000000000000000 [ 321.306764] RFLAGS=0x00010002 DR7 = 0x0000000000000400 [ 321.314110] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 321.321199] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 321.321214] DS: sel=0x0000, attr=0x00005, limit=0x00020000, base=0x0000000000000000 [ 321.321229] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 321.321285] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 321.321295] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 321.321307] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 22:44:20 executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x60082) readv(r1, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/143, 0x8f}], 0x1) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) tkill(r0, 0x1000000000016) [ 321.321347] GDTR: limit=0x00000000, base=0x0000000000000000 [ 321.337639] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 321.375362] IDTR: limit=0x00000000, base=0x0000000000000000 [ 321.403990] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 321.415607] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 321.424831] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 321.437516] Interruptibility = 00000000 ActivityState = 00000000 [ 321.444760] *** Host State *** [ 321.447968] RIP = 0xffffffff8117a490 RSP = 0xffff888057bbf998 [ 321.454363] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 321.461187] FSBase=00007f5d50c14700 GSBase=ffff8880aed00000 TRBase=fffffe0000034000 [ 321.469050] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 321.475307] CR0=0000000080050033 CR3=000000009eea3000 CR4=00000000001426e0 [ 321.482525] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff868018e0 [ 321.482535] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 321.482538] *** Control State *** [ 321.482545] PinBased=0000003f CPUBased=b699edfa SecondaryExec=000000e2 [ 321.482550] EntryControls=0000d1ff ExitControls=002fefff [ 321.482558] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 321.482566] VMEntry: intr_info=80000306 errcode=00000000 ilen=00000000 22:44:20 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0xe0000200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 22:44:20 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{}, {0x0, 0x20000, 0x0, 0x5, 0xca}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 321.496206] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 321.512530] reason=80000021 qualification=0000000000000000 [ 321.539189] IDTVectoring: info=00000000 errcode=00000000 [ 321.544917] TSC Offset = 0xffffff50a052dd93 [ 321.549414] EPT pointer = 0x0000000093e3301e [ 321.554435] Virtual processor ID = 0x0001 [ 321.600111] protocol 88fb is buggy, dev hsr_slave_0 [ 321.605454] protocol 88fb is buggy, dev hsr_slave_1 [ 321.663563] *** Guest State *** [ 321.667359] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 321.677635] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 321.686907] CR3 = 0x00000000fffbc000 [ 321.690940] RSP = 0x00000000000000fb RIP = 0x0000000000000000 [ 321.697327] RFLAGS=0x00010002 DR7 = 0x0000000000000400 [ 321.703676] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 22:44:20 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_pts(r1, 0x4000000000000002) r4 = dup3(r3, r0, 0x0) ioctl$TCXONC(r4, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r4, 0x540a, 0x1) 22:44:20 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x0, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) clone(0xe0000200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 321.710930] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 321.721814] DS: sel=0x0000, attr=0x00005, limit=0x00020000, base=0x0000000000000000 [ 321.730910] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 321.739288] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 321.747733] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 321.756553] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 321.765290] GDTR: limit=0x00000000, base=0x0000000000000000 [ 321.773569] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 22:44:21 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) [ 321.807720] IDTR: limit=0x00000000, base=0x0000000000000000 [ 321.819071] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 321.831794] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 321.839379] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 321.866127] Interruptibility = 00000000 ActivityState = 00000000 [ 321.873017] *** Host State *** [ 321.876648] RIP = 0xffffffff8117a490 RSP = 0xffff888052fa7998 [ 321.884006] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 321.893531] FSBase=00007f5d50c14700 GSBase=ffff8880aec00000 TRBase=fffffe0000003000 [ 321.902167] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 321.909127] CR0=0000000080050033 CR3=000000009e0f5000 CR4=00000000001426f0 [ 321.916951] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff868018e0 [ 321.924275] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 321.930855] *** Control State *** [ 321.934647] PinBased=0000003f CPUBased=b699edfa SecondaryExec=000000e2 [ 321.942731] EntryControls=0000d1ff ExitControls=002fefff [ 321.948496] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 321.955840] VMEntry: intr_info=80000306 errcode=00000000 ilen=00000000 [ 321.967431] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 321.974495] reason=80000021 qualification=0000000000000000 [ 321.985948] IDTVectoring: info=00000000 errcode=00000000 [ 321.992973] TSC Offset = 0xffffff506b2301f0 [ 321.997621] EPT pointer = 0x000000008779e01e [ 322.002639] protocol 88fb is buggy, dev hsr_slave_0 [ 322.002742] protocol 88fb is buggy, dev hsr_slave_1 22:44:21 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{}, {0x0, 0x20000, 0x0, 0x5, 0xca}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 322.014097] Virtual processor ID = 0x0001 [ 322.118364] *** Guest State *** [ 322.122757] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 322.137492] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 322.147261] CR3 = 0x00000000fffbc000 [ 322.156700] RSP = 0x00000000000000fb RIP = 0x0000000000000000 [ 322.165217] RFLAGS=0x00010002 DR7 = 0x0000000000000400 [ 322.177968] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 322.186198] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 322.200199] DS: sel=0x0000, attr=0x00005, limit=0x00020000, base=0x0000000000000000 [ 322.209103] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 22:44:21 executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x60082) readv(r1, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/143, 0x8f}], 0x1) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) tkill(r0, 0x1000000000016) [ 322.226311] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 322.248571] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 322.278906] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 322.302918] GDTR: limit=0x00000000, base=0x0000000000000000 [ 322.323024] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 322.336445] IDTR: limit=0x00000000, base=0x0000000000000000 [ 322.345320] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 322.358541] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 322.367119] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 322.379937] Interruptibility = 00000000 ActivityState = 00000000 [ 322.388347] *** Host State *** [ 322.396848] RIP = 0xffffffff8117a490 RSP = 0xffff8880820ef998 [ 322.403131] protocol 88fb is buggy, dev hsr_slave_0 [ 322.403187] protocol 88fb is buggy, dev hsr_slave_1 22:44:21 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0xe0000200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 322.439863] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 322.447718] FSBase=00007f5d50c14700 GSBase=ffff8880aec00000 TRBase=fffffe0000003000 [ 322.457322] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 322.464759] CR0=0000000080050033 CR3=000000009e0f5000 CR4=00000000001426f0 [ 322.472484] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff868018e0 [ 322.479809] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 322.486608] *** Control State *** [ 322.491310] PinBased=0000003f CPUBased=b699edfa SecondaryExec=000000e2 [ 322.498655] EntryControls=0000d1ff ExitControls=002fefff [ 322.504972] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 322.513029] VMEntry: intr_info=80000306 errcode=00000000 ilen=00000000 [ 322.529063] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 22:44:21 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{}, {0x0, 0x20000, 0x0, 0x5, 0xca}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 322.547121] reason=80000021 qualification=0000000000000000 [ 322.557484] IDTVectoring: info=00000000 errcode=00000000 [ 322.563945] TSC Offset = 0xffffff502ccd67ac [ 322.568706] EPT pointer = 0x00000000a47e801e [ 322.574168] Virtual processor ID = 0x0001 22:44:21 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_pts(r1, 0x4000000000000002) r4 = dup3(r3, r0, 0x0) ioctl$TCXONC(r4, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r4, 0x540a, 0x1) 22:44:21 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) 22:44:21 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) clone(0xe0000200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 322.698791] *** Guest State *** [ 322.714586] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 322.723967] protocol 88fb is buggy, dev hsr_slave_0 [ 322.729372] protocol 88fb is buggy, dev hsr_slave_1 [ 322.767488] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 322.798547] CR3 = 0x00000000fffbc000 [ 322.811596] RSP = 0x00000000000000fb RIP = 0x0000000000000000 [ 322.830146] RFLAGS=0x00010002 DR7 = 0x0000000000000400 [ 322.836348] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 322.850223] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 322.859095] DS: sel=0x0000, attr=0x00005, limit=0x00020000, base=0x0000000000000000 [ 322.868032] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 322.876866] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 322.885761] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 322.894715] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 322.905056] GDTR: limit=0x00000000, base=0x0000000000000000 [ 322.913833] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 322.922659] IDTR: limit=0x00000000, base=0x0000000000000000 [ 322.931494] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 322.940124] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 322.946954] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 322.954654] Interruptibility = 00000000 ActivityState = 00000000 [ 322.961283] *** Host State *** [ 322.964597] RIP = 0xffffffff8117a490 RSP = 0xffff888080217998 [ 322.970756] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 322.977318] FSBase=00007f5d50c14700 GSBase=ffff8880aed00000 TRBase=fffffe0000003000 [ 322.985595] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 322.991691] CR0=0000000080050033 CR3=000000009e0f5000 CR4=00000000001426e0 [ 322.998904] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff868018e0 [ 323.005797] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 323.012806] *** Control State *** [ 323.016575] PinBased=0000003f CPUBased=b699edfa SecondaryExec=000000e2 [ 323.023726] EntryControls=0000d1ff ExitControls=002fefff 22:44:22 executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x60082) readv(r1, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/143, 0x8f}], 0x1) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) tkill(r0, 0x1000000000016) [ 323.029707] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 323.037691] VMEntry: intr_info=80000306 errcode=00000000 ilen=00000000 [ 323.045362] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 323.052688] reason=80000021 qualification=0000000000000000 [ 323.059529] IDTVectoring: info=00000000 errcode=00000000 [ 323.065630] TSC Offset = 0xffffff4fdd8ab4a3 [ 323.070715] EPT pointer = 0x000000008af0e01e [ 323.075773] Virtual processor ID = 0x0001 22:44:22 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{}, {0x0, 0x20000, 0x0, 0x5, 0xca}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 323.176742] *** Guest State *** [ 323.180428] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 323.192467] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 323.202280] CR3 = 0x00000000fffbc000 [ 323.206941] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 323.213885] RFLAGS=0x00010002 DR7 = 0x0000000000000400 [ 323.220788] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 323.228060] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 323.237069] DS: sel=0x0000, attr=0x00005, limit=0x00020000, base=0x0000000000000000 [ 323.245770] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 323.254385] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 323.264249] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 323.272781] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 323.281530] GDTR: limit=0x00000000, base=0x0000000000000000 [ 323.289777] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 323.298914] IDTR: limit=0x00000000, base=0x0000000000000000 [ 323.307503] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 323.316106] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 323.322984] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 323.331267] Interruptibility = 00000000 ActivityState = 00000000 [ 323.339302] *** Host State *** [ 323.343180] RIP = 0xffffffff8117a490 RSP = 0xffff8880820ef998 [ 323.349486] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 323.356576] FSBase=00007f5d50c14700 GSBase=ffff8880aec00000 TRBase=fffffe0000003000 [ 323.364877] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 22:44:22 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0xe0000200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 323.371212] CR0=0000000080050033 CR3=0000000096b53000 CR4=00000000001426f0 [ 323.378722] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff868018e0 [ 323.387575] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 323.394797] *** Control State *** [ 323.398610] PinBased=0000003f CPUBased=b699edfa SecondaryExec=000000e2 [ 323.405995] EntryControls=0000d1ff ExitControls=002fefff [ 323.411926] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 323.419210] VMEntry: intr_info=80000306 errcode=00000000 ilen=00000000 [ 323.432719] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 323.447147] reason=80000021 qualification=0000000000000000 [ 323.462326] IDTVectoring: info=00000000 errcode=00000000 [ 323.469316] TSC Offset = 0xffffff4f9bea0f2e [ 323.477966] EPT pointer = 0x0000000092fa801e 22:44:22 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{}, {0x0, 0x20000, 0x0, 0x5, 0xca}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 323.482948] Virtual processor ID = 0x0001 22:44:22 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_pts(r1, 0x4000000000000002) r4 = dup3(r3, r0, 0x0) ioctl$TCXONC(r4, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r4, 0x540a, 0x1) 22:44:22 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) [ 323.609290] *** Guest State *** [ 323.612987] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 323.622719] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 323.635828] CR3 = 0x00000000fffbc000 [ 323.639691] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 323.646009] RFLAGS=0x00010002 DR7 = 0x0000000000000400 [ 323.656443] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 323.663540] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 323.671544] IPVS: ftp: loaded support on port[0] = 21 [ 323.676578] DS: sel=0x0000, attr=0x00005, limit=0x00020000, base=0x0000000000000000 [ 323.686008] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 323.694387] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 323.703102] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 323.711405] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 323.719717] GDTR: limit=0x00000000, base=0x0000000000000000 [ 323.727925] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 323.736791] IDTR: limit=0x00000000, base=0x0000000000000000 [ 323.745286] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 323.753767] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 323.760483] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 323.768101] Interruptibility = 00000000 ActivityState = 00000000 [ 323.774531] *** Host State *** [ 323.777987] RIP = 0xffffffff8117a490 RSP = 0xffff888057f6f998 [ 323.784200] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 323.790824] FSBase=00007f5d50c14700 GSBase=ffff8880aec00000 TRBase=fffffe0000003000 [ 323.799066] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 323.805245] CR0=0000000080050033 CR3=000000005c613000 CR4=00000000001426f0 [ 323.813184] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff868018e0 [ 323.820346] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 323.826499] *** Control State *** [ 323.830163] PinBased=0000003f CPUBased=b699edfa SecondaryExec=000000e2 [ 323.837859] EntryControls=0000d1ff ExitControls=002fefff [ 323.843732] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 323.851051] VMEntry: intr_info=80000306 errcode=00000000 ilen=00000000 22:44:23 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{}, {0x0, 0x20000, 0x0, 0x5, 0xca}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:44:23 executing program 0: gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x60082) readv(r0, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/143, 0x8f}], 0x1) close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) tkill(0x0, 0x1000000000016) [ 323.858028] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 323.865009] reason=80000021 qualification=0000000000000000 [ 323.871531] IDTVectoring: info=00000000 errcode=00000000 [ 323.877336] TSC Offset = 0xffffff4f6241469f [ 323.881864] EPT pointer = 0x00000000873ca01e [ 323.886329] Virtual processor ID = 0x0001 [ 323.988318] *** Guest State *** [ 323.991924] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 324.001172] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 324.010983] CR3 = 0x00000000fffbc000 [ 324.016304] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 324.023887] RFLAGS=0x00010002 DR7 = 0x0000000000000400 [ 324.031161] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 324.037980] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 324.046342] DS: sel=0x0000, attr=0x00005, limit=0x00020000, base=0x0000000000000000 [ 324.054656] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 324.062906] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 324.071839] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 324.079925] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 324.089473] GDTR: limit=0x00000000, base=0x0000000000000000 [ 324.097815] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 324.106105] IDTR: limit=0x00000000, base=0x0000000000000000 [ 324.114350] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 324.122651] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 324.129195] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 324.137165] Interruptibility = 00000000 ActivityState = 00000000 [ 324.144067] *** Host State *** [ 324.147351] RIP = 0xffffffff8117a490 RSP = 0xffff8880a44c7998 [ 324.153645] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 324.160491] FSBase=00007f5d50c14700 GSBase=ffff8880aec00000 TRBase=fffffe0000003000 [ 324.168824] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 324.175052] CR0=0000000080050033 CR3=000000005c613000 CR4=00000000001426f0 [ 324.182438] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff868018e0 [ 324.189229] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 324.195560] *** Control State *** [ 324.199300] PinBased=0000003f CPUBased=b699edfa SecondaryExec=000000e2 [ 324.206921] EntryControls=0000d1ff ExitControls=002fefff [ 324.212645] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 324.219759] VMEntry: intr_info=80000306 errcode=00000000 ilen=00000000 [ 324.226633] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 324.233451] reason=80000021 qualification=0000000000000000 22:44:23 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0xe0000200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 324.240191] IDTVectoring: info=00000000 errcode=00000000 [ 324.245802] TSC Offset = 0xffffff4f2c6d39d1 [ 324.250380] EPT pointer = 0x00000000a4d2901e [ 324.254803] Virtual processor ID = 0x0001 22:44:23 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{}, {0x0, 0x20000, 0x0, 0x5, 0xca}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:44:23 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) [ 324.349761] *** Guest State *** [ 324.353724] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 324.382919] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 324.421557] CR3 = 0x00000000fffbc000 [ 324.425403] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 324.425415] RFLAGS=0x00010002 DR7 = 0x0000000000000400 [ 324.425427] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 324.425445] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 324.452658] DS: sel=0x0000, attr=0x00005, limit=0x00020000, base=0x0000000000000000 [ 324.468296] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 324.477215] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 324.490397] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 324.498677] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 324.498686] GDTR: limit=0x00000000, base=0x0000000000000000 [ 324.519270] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 324.528589] IDTR: limit=0x00000000, base=0x0000000000000000 [ 324.549009] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 324.564865] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 324.573790] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 324.583836] Interruptibility = 00000000 ActivityState = 00000000 [ 324.592640] *** Host State *** [ 324.595990] RIP = 0xffffffff8117a490 RSP = 0xffff888057ae7998 [ 324.602471] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 324.609503] FSBase=00007f5d50c14700 GSBase=ffff8880aed00000 TRBase=fffffe0000034000 [ 324.622509] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 324.628735] CR0=0000000080050033 CR3=000000008e990000 CR4=00000000001426e0 [ 324.636088] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff868018e0 [ 324.647073] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 324.653599] *** Control State *** [ 324.657234] PinBased=0000003f CPUBased=b699edfa SecondaryExec=000000e2 [ 324.668143] EntryControls=0000d1ff ExitControls=002fefff 22:44:23 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) 22:44:23 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) clone(0xe0000200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 22:44:23 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) [ 324.673847] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 324.686802] VMEntry: intr_info=80000306 errcode=00000000 ilen=00000000 [ 324.695059] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 22:44:23 executing program 0: gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x60082) readv(r0, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/143, 0x8f}], 0x1) close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) tkill(0x0, 0x1000000000016) 22:44:23 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) [ 324.724960] reason=80000021 qualification=0000000000000000 [ 324.744508] IDTVectoring: info=00000000 errcode=00000000 [ 324.753978] TSC Offset = 0xffffff4efb06747b [ 324.784916] EPT pointer = 0x00000000947f901e [ 324.789387] Virtual processor ID = 0x0001 22:44:24 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{}, {0x0, 0x20000, 0x0, 0x5, 0xca}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:44:24 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) [ 324.928946] *** Guest State *** [ 324.932939] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 324.942530] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 324.951676] CR3 = 0x00000000fffbc000 [ 324.955640] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 324.962745] RFLAGS=0x00010002 DR7 = 0x0000000000000400 [ 324.968756] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 324.976450] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 324.987173] DS: sel=0x0000, attr=0x00005, limit=0x00020000, base=0x0000000000000000 [ 324.995390] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 324.995401] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 324.995413] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 324.995424] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 324.995433] GDTR: limit=0x00000000, base=0x0000000000000000 [ 324.995490] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 324.995501] IDTR: limit=0x00000000, base=0x0000000000000000 [ 324.995510] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 324.995516] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 324.995522] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 324.995527] Interruptibility = 00000000 ActivityState = 00000000 [ 324.995529] *** Host State *** [ 324.995537] RIP = 0xffffffff8117a490 RSP = 0xffff888095947998 [ 324.995549] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 324.995557] FSBase=00007f5d50c14700 GSBase=ffff8880aed00000 TRBase=fffffe0000034000 [ 324.995564] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 324.995574] CR0=0000000080050033 CR3=00000000a429d000 CR4=00000000001426e0 [ 324.995587] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff868018e0 [ 325.011986] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 325.011989] *** Control State *** [ 325.011995] PinBased=0000003f CPUBased=b699edfa SecondaryExec=000000e2 [ 325.012000] EntryControls=0000d1ff ExitControls=002fefff [ 325.012008] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 325.012012] VMEntry: intr_info=80000306 errcode=00000000 ilen=00000000 [ 325.012017] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 325.012021] reason=80000021 qualification=0000000000000000 22:44:24 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{}, {0x0, 0x20000, 0x0, 0x5, 0xca}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:44:24 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0xe0000200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 325.012025] IDTVectoring: info=00000000 errcode=00000000 [ 325.012028] TSC Offset = 0xffffff4eab6d40be [ 325.012034] EPT pointer = 0x00000000a108401e [ 325.012040] Virtual processor ID = 0x0001 [ 325.293113] *** Guest State *** [ 325.296522] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 325.305856] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 325.315271] CR3 = 0x00000000fffbc000 [ 325.319051] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 325.327769] RFLAGS=0x00010002 DR7 = 0x0000000000000400 [ 325.333948] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 325.340917] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 325.349105] DS: sel=0x0000, attr=0x00005, limit=0x00020000, base=0x0000000000000000 [ 325.357933] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 325.366346] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 325.374548] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 325.384634] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 325.392833] GDTR: limit=0x00000000, base=0x0000000000000000 [ 325.392849] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 325.392864] IDTR: limit=0x00000000, base=0x0000000000000000 [ 325.392875] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 325.392881] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 325.392888] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 325.392894] Interruptibility = 00000000 ActivityState = 00000000 [ 325.392897] *** Host State *** [ 325.392904] RIP = 0xffffffff8117a490 RSP = 0xffff88806036f998 [ 325.392917] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 325.392924] FSBase=00007f5d50c14700 GSBase=ffff8880aed00000 TRBase=fffffe0000034000 [ 325.392932] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 325.392941] CR0=0000000080050033 CR3=000000009fa82000 CR4=00000000001426e0 [ 325.392950] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff868018e0 22:44:24 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) [ 325.392957] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 325.392960] *** Control State *** [ 325.392965] PinBased=0000003f CPUBased=b699edfa SecondaryExec=000000e2 [ 325.392969] EntryControls=0000d1ff ExitControls=002fefff [ 325.392978] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 325.392983] VMEntry: intr_info=80000306 errcode=00000000 ilen=00000000 [ 325.392988] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 325.392992] reason=80000021 qualification=0000000000000000 22:44:24 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)) listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{}, {0x0, 0x20000, 0x0, 0x5, 0xca}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:44:24 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) clone(0xe0000200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 325.393000] IDTVectoring: info=00000000 errcode=00000000 [ 325.417397] TSC Offset = 0xffffff4e798d5bd0 [ 325.417407] EPT pointer = 0x000000008beb701e [ 325.417414] Virtual processor ID = 0x0001 22:44:24 executing program 0: gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x60082) readv(r0, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/143, 0x8f}], 0x1) close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) tkill(0x0, 0x1000000000016) 22:44:24 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) [ 325.735883] *** Guest State *** [ 325.739227] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 325.751074] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 325.760758] CR3 = 0x00000000fffbc000 [ 325.765386] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 325.774552] RFLAGS=0x00010002 DR7 = 0x0000000000000400 [ 325.784954] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 325.792109] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 325.800350] DS: sel=0x0000, attr=0x00005, limit=0x00020000, base=0x0000000000000000 [ 325.808398] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 325.816709] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 325.824880] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 325.824893] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 325.824906] GDTR: limit=0x00000000, base=0x0000000000000000 [ 325.842553] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 325.857520] IDTR: limit=0x00000000, base=0x0000000000000000 [ 325.866496] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 325.874765] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 325.881597] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 325.889174] Interruptibility = 00000000 ActivityState = 00000000 [ 325.895642] *** Host State *** [ 325.898918] RIP = 0xffffffff8117a490 RSP = 0xffff8880561c7998 [ 325.905333] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 325.912152] FSBase=00007f5d50c14700 GSBase=ffff8880aec00000 TRBase=fffffe0000003000 [ 325.920381] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 325.926299] CR0=0000000080050033 CR3=0000000095b9e000 CR4=00000000001426f0 [ 325.926312] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff868018e0 [ 325.941479] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 325.947699] *** Control State *** [ 325.947707] PinBased=0000003f CPUBased=b699edfa SecondaryExec=000000e2 [ 325.947716] EntryControls=0000d1ff ExitControls=002fefff [ 325.958153] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 325.958161] VMEntry: intr_info=80000306 errcode=00000000 ilen=00000000 22:44:25 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)) listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{}, {0x0, 0x20000, 0x0, 0x5, 0xca}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 325.958167] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 325.958172] reason=80000021 qualification=0000000000000000 [ 325.958176] IDTVectoring: info=00000000 errcode=00000000 [ 325.958183] TSC Offset = 0xffffff4e3d49de9f [ 325.973555] EPT pointer = 0x000000005968901e [ 325.973564] Virtual processor ID = 0x0001 22:44:25 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0xe0000200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 326.085681] *** Guest State *** [ 326.089321] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 326.099960] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 326.134595] CR3 = 0x00000000fffbc000 [ 326.143972] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 326.156789] RFLAGS=0x00010002 DR7 = 0x0000000000000400 [ 326.174989] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 326.181841] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 326.189860] DS: sel=0x0000, attr=0x00005, limit=0x00020000, base=0x0000000000000000 [ 326.198043] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 326.206133] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 326.215100] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 326.223298] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 326.231372] GDTR: limit=0x00000000, base=0x0000000000000000 [ 326.239372] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 326.247489] IDTR: limit=0x00000000, base=0x0000000000000000 [ 326.255550] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 326.263636] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 326.270137] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 326.277653] Interruptibility = 00000000 ActivityState = 00000000 [ 326.283985] *** Host State *** [ 326.287190] RIP = 0xffffffff8117a490 RSP = 0xffff88805fdc7998 [ 326.293275] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 326.299707] FSBase=00007f5d50c14700 GSBase=ffff8880aed00000 TRBase=fffffe0000034000 [ 326.307770] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 326.313816] CR0=0000000080050033 CR3=0000000088456000 CR4=00000000001426e0 [ 326.321014] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff868018e0 [ 326.327698] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 326.333832] *** Control State *** [ 326.337300] PinBased=0000003f CPUBased=b699edfa SecondaryExec=000000e2 [ 326.344269] EntryControls=0000d1ff ExitControls=002fefff [ 326.350067] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 326.357310] VMEntry: intr_info=80000306 errcode=00000000 ilen=00000000 [ 326.364331] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 326.371373] reason=80000021 qualification=0000000000000000 [ 326.378019] IDTVectoring: info=00000000 errcode=00000000 22:44:25 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, 0x0, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) [ 326.383998] TSC Offset = 0xffffff4e0cfbf00a [ 326.399479] EPT pointer = 0x000000009309701e [ 326.405168] Virtual processor ID = 0x0001 22:44:25 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)) listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{}, {0x0, 0x20000, 0x0, 0x5, 0xca}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:44:25 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) clone(0xe0000200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 22:44:25 executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x60082) readv(r1, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/143, 0x8f}], 0x1) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) tkill(r0, 0x0) [ 326.556626] *** Guest State *** [ 326.560132] net_ratelimit: 20 callbacks suppressed [ 326.560138] protocol 88fb is buggy, dev hsr_slave_0 [ 326.568395] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 326.570642] protocol 88fb is buggy, dev hsr_slave_1 [ 326.586219] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 326.598417] CR3 = 0x00000000fffbc000 22:44:25 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) [ 326.602675] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 326.609433] RFLAGS=0x00010002 DR7 = 0x0000000000000400 [ 326.616656] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 326.625788] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 326.639050] DS: sel=0x0000, attr=0x00005, limit=0x00020000, base=0x0000000000000000 [ 326.662869] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 326.671244] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 326.679501] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 326.689020] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 326.697759] GDTR: limit=0x00000000, base=0x0000000000000000 [ 326.707764] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 326.716391] IDTR: limit=0x00000000, base=0x0000000000000000 [ 326.725228] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 326.734000] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 326.741085] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 326.749012] Interruptibility = 00000000 ActivityState = 00000000 [ 326.756026] *** Host State *** [ 326.759752] RIP = 0xffffffff8117a490 RSP = 0xffff888057ae7998 [ 326.766327] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 326.773569] FSBase=00007f5d50c14700 GSBase=ffff8880aed00000 TRBase=fffffe0000034000 [ 326.781975] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 326.788314] CR0=0000000080050033 CR3=000000009bd16000 CR4=00000000001426e0 [ 326.796101] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff868018e0 [ 326.803331] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 326.809829] *** Control State *** [ 326.814066] PinBased=0000003f CPUBased=b699edfa SecondaryExec=000000e2 [ 326.821189] EntryControls=0000d1ff ExitControls=002fefff [ 326.827050] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 326.834791] VMEntry: intr_info=80000306 errcode=00000000 ilen=00000000 [ 326.841994] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 326.849041] reason=80000021 qualification=0000000000000000 [ 326.856227] IDTVectoring: info=00000000 errcode=00000000 22:44:26 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) listxattr(0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{}, {0x0, 0x20000, 0x0, 0x5, 0xca}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 326.862165] TSC Offset = 0xffffff4dccbf1477 [ 326.866932] EPT pointer = 0x000000005739401e [ 326.872189] Virtual processor ID = 0x0001 [ 326.880138] protocol 88fb is buggy, dev hsr_slave_0 [ 326.885484] protocol 88fb is buggy, dev hsr_slave_1 22:44:26 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0xe0000200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 327.023451] *** Guest State *** [ 327.027086] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 327.037128] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 327.046555] protocol 88fb is buggy, dev hsr_slave_0 [ 327.046607] protocol 88fb is buggy, dev hsr_slave_1 [ 327.060380] CR3 = 0x00000000fffbc000 [ 327.064637] RSP = 0x00000000000000bf RIP = 0x0000000000001fff [ 327.071422] RFLAGS=0x00010046 DR7 = 0x0000000000000400 [ 327.078206] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 327.085702] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 327.094271] DS: sel=0x0000, attr=0x00005, limit=0x00020000, base=0x0000000000000000 [ 327.103144] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 327.111719] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 327.120869] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 327.129481] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 327.138178] GDTR: limit=0x00000000, base=0x0000000000000000 [ 327.147143] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 327.156177] IDTR: limit=0x00000000, base=0x0000000000000000 [ 327.164770] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 327.173766] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 327.180621] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 327.188520] Interruptibility = 00000000 ActivityState = 00000000 [ 327.195377] *** Host State *** [ 327.199060] RIP = 0xffffffff8117a490 RSP = 0xffff888057f6f998 [ 327.205606] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 327.212737] FSBase=00007f5d50c14700 GSBase=ffff8880aed00000 TRBase=fffffe0000034000 [ 327.221107] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 327.227838] CR0=0000000080050033 CR3=0000000095bb9000 CR4=00000000001426e0 [ 327.235486] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff868018e0 [ 327.242601] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 327.249020] *** Control State *** [ 327.252954] PinBased=0000003f CPUBased=b699edfa SecondaryExec=000000e2 [ 327.260180] EntryControls=0000d1ff ExitControls=002fefff 22:44:26 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, 0x0, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) [ 327.275794] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 327.285053] VMEntry: intr_info=80000306 errcode=00000000 ilen=00000000 [ 327.295937] VMExit: intr_info=00000000 errcode=00000000 ilen=00000002 [ 327.303466] reason=80000021 qualification=0000000000000000 [ 327.310877] IDTVectoring: info=00000000 errcode=00000000 [ 327.317364] TSC Offset = 0xffffff4d8c8663a1 22:44:26 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) clone(0xe0000200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 22:44:26 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) listxattr(0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{}, {0x0, 0x20000, 0x0, 0x5, 0xca}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 327.345613] EPT pointer = 0x000000005fa2401e [ 327.359816] Virtual processor ID = 0x0001 22:44:26 executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x60082) readv(r1, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/143, 0x8f}], 0x1) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) tkill(r0, 0x0) 22:44:26 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000000c0)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_pts(0xffffffffffffffff, 0x4000000000000002) r4 = dup3(r3, r0, 0x0) ioctl$TCXONC(r4, 0x540a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r4, 0x540a, 0x1) [ 327.440154] protocol 88fb is buggy, dev hsr_slave_0 [ 327.445461] protocol 88fb is buggy, dev hsr_slave_1 22:44:26 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000000c0)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_pts(0xffffffffffffffff, 0x4000000000000002) r4 = dup3(r3, r0, 0x0) ioctl$TCXONC(r4, 0x540a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r4, 0x540a, 0x1) 22:44:26 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000000c0)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_pts(0xffffffffffffffff, 0x4000000000000002) r4 = dup3(r3, r0, 0x0) ioctl$TCXONC(r4, 0x540a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r4, 0x540a, 0x1) [ 327.541830] *** Guest State *** [ 327.552486] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 327.562590] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 327.572138] CR3 = 0x00000000fffbc000 [ 327.576379] RSP = 0x00000000000000bf RIP = 0x0000000000001fff [ 327.584330] RFLAGS=0x00010046 DR7 = 0x0000000000000400 [ 327.592659] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 327.599849] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 327.610250] DS: sel=0x0000, attr=0x00005, limit=0x00020000, base=0x0000000000000000 [ 327.619052] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 327.627775] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 22:44:26 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_pts(r0, 0x4000000000000002) r4 = dup3(r3, 0xffffffffffffffff, 0x0) ioctl$TCXONC(r4, 0x540a, 0x0) write$binfmt_script(r0, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(0xffffffffffffffff, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r4, 0x540a, 0x1) [ 327.636563] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 327.645313] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 327.655182] GDTR: limit=0x00000000, base=0x0000000000000000 [ 327.663995] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 327.673752] IDTR: limit=0x00000000, base=0x0000000000000000 [ 327.682458] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 327.693047] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 327.700278] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 327.708592] Interruptibility = 00000000 ActivityState = 00000000 [ 327.723282] *** Host State *** [ 327.731640] RIP = 0xffffffff8117a490 RSP = 0xffff88805721f998 22:44:26 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_pts(r0, 0x4000000000000002) r4 = dup3(r3, 0xffffffffffffffff, 0x0) ioctl$TCXONC(r4, 0x540a, 0x0) write$binfmt_script(r0, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(0xffffffffffffffff, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r4, 0x540a, 0x1) [ 327.739426] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 327.746636] FSBase=00007f5d50c14700 GSBase=ffff8880aed00000 TRBase=fffffe0000034000 [ 327.755279] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 327.761992] CR0=0000000080050033 CR3=0000000054aa3000 CR4=00000000001426e0 [ 327.769545] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff868018e0 [ 327.777259] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 327.785862] *** Control State *** [ 327.791760] PinBased=0000003f CPUBased=b699edfa SecondaryExec=000000e2 [ 327.801858] EntryControls=0000d1ff ExitControls=002fefff [ 327.809614] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 327.817037] VMEntry: intr_info=80000306 errcode=00000000 ilen=00000000 [ 327.824015] VMExit: intr_info=00000000 errcode=00000000 ilen=00000002 [ 327.831441] reason=80000021 qualification=0000000000000000 [ 327.838139] IDTVectoring: info=00000000 errcode=00000000 22:44:27 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0xe0000200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 22:44:27 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) listxattr(0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{}, {0x0, 0x20000, 0x0, 0x5, 0xca}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:44:27 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_pts(r0, 0x4000000000000002) r4 = dup3(r3, 0xffffffffffffffff, 0x0) ioctl$TCXONC(r4, 0x540a, 0x0) write$binfmt_script(r0, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(0xffffffffffffffff, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r4, 0x540a, 0x1) [ 327.843815] protocol 88fb is buggy, dev hsr_slave_0 [ 327.843868] protocol 88fb is buggy, dev hsr_slave_1 [ 327.855879] TSC Offset = 0xffffff4d4579d706 [ 327.860780] EPT pointer = 0x000000009b3ab01e [ 327.867027] Virtual processor ID = 0x0001 [ 327.999280] *** Guest State *** [ 328.003341] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 328.013311] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 328.024721] CR3 = 0x00000000fffbc000 [ 328.028924] RSP = 0x00000000000000bf RIP = 0x0000000000001fff [ 328.035806] RFLAGS=0x00010046 DR7 = 0x0000000000000400 [ 328.043321] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 328.050865] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 328.059535] DS: sel=0x0000, attr=0x00005, limit=0x00020000, base=0x0000000000000000 [ 328.068515] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 328.077198] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 328.085606] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 328.093854] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 328.101985] GDTR: limit=0x00000000, base=0x0000000000000000 [ 328.110239] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 328.118488] IDTR: limit=0x00000000, base=0x0000000000000000 [ 328.126741] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 328.135287] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 328.141779] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 22:44:27 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, 0x0, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) [ 328.149281] Interruptibility = 00000000 ActivityState = 00000000 [ 328.155653] *** Host State *** [ 328.158950] RIP = 0xffffffff8117a490 RSP = 0xffff88806036f998 [ 328.165095] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 328.173835] FSBase=00007f5d50c14700 GSBase=ffff8880aed00000 TRBase=fffffe0000034000 [ 328.181745] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 328.187769] CR0=0000000080050033 CR3=0000000054aa3000 CR4=00000000001426e0 [ 328.202520] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff868018e0 [ 328.209289] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 328.215475] *** Control State *** [ 328.218969] PinBased=0000003f CPUBased=b699edfa SecondaryExec=000000e2 [ 328.225728] EntryControls=0000d1ff ExitControls=002fefff [ 328.231694] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 328.238841] VMEntry: intr_info=80000306 errcode=00000000 ilen=00000000 [ 328.246030] VMExit: intr_info=00000000 errcode=00000000 ilen=00000002 [ 328.252818] reason=80000021 qualification=0000000000000000 [ 328.259321] IDTVectoring: info=00000000 errcode=00000000 [ 328.264953] TSC Offset = 0xffffff4d075c25fc [ 328.269289] EPT pointer = 0x000000005367e01e [ 328.273829] Virtual processor ID = 0x0001 [ 328.295167] IPVS: ftp: loaded support on port[0] = 21 22:44:28 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) clone(0xe0000200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 22:44:28 executing program 4: r0 = syz_open_procfs(0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) 22:44:28 executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x60082) readv(r1, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/143, 0x8f}], 0x1) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) tkill(r0, 0x0) 22:44:28 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{}, {0x0, 0x20000, 0x0, 0x5, 0xca}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:44:28 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[], 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) 22:44:28 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0xe0000200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 22:44:28 executing program 4: r0 = syz_open_procfs(0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) 22:44:28 executing program 4: r0 = syz_open_procfs(0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) [ 329.204191] *** Guest State *** [ 329.213549] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 329.223744] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 329.233870] CR3 = 0x00000000fffbc000 [ 329.238788] RSP = 0x00000000000000fb RIP = 0x0000000000000000 [ 329.246369] RFLAGS=0x00010002 DR7 = 0x0000000000000400 [ 329.253376] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 329.262193] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 329.262207] DS: sel=0x0000, attr=0x00005, limit=0x00020000, base=0x0000000000000000 [ 329.262219] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 329.262229] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 329.262239] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 329.279424] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 329.298700] GDTR: limit=0x00000000, base=0x0000000000000000 [ 329.324873] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 329.334510] IDTR: limit=0x00000000, base=0x0000000000000000 [ 329.343167] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 22:44:28 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) [ 329.351831] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 329.358749] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 329.366781] Interruptibility = 00000000 ActivityState = 00000000 [ 329.373714] *** Host State *** [ 329.377220] RIP = 0xffffffff8117a490 RSP = 0xffff8880585d7998 [ 329.383677] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 329.390931] FSBase=00007f5d50c14700 GSBase=ffff8880aec00000 TRBase=fffffe0000003000 [ 329.399060] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 22:44:28 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) [ 329.405671] CR0=0000000080050033 CR3=000000005eb2d000 CR4=00000000001426f0 [ 329.415943] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff868018e0 [ 329.434389] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 329.441534] *** Control State *** [ 329.445286] PinBased=0000003f CPUBased=b699edfa SecondaryExec=000000e2 [ 329.452341] EntryControls=0000d1ff ExitControls=002fefff [ 329.458647] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 329.466661] VMEntry: intr_info=80000306 errcode=00000000 ilen=00000000 [ 329.473859] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 329.482771] reason=80000021 qualification=0000000000000000 [ 329.489707] IDTVectoring: info=00000000 errcode=00000000 [ 329.496015] TSC Offset = 0xffffff4c61a8ea16 22:44:28 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) [ 329.511797] EPT pointer = 0x000000009fb2801e [ 329.516396] Virtual processor ID = 0x0001 22:44:28 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{}, {0x0, 0x20000, 0x0, 0x5, 0xca}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 329.644434] *** Guest State *** [ 329.647939] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 329.666207] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 329.675962] CR3 = 0x00000000fffbc000 [ 329.679876] RSP = 0x00000000000000fb RIP = 0x0000000000000000 [ 329.686992] RFLAGS=0x00010002 DR7 = 0x0000000000000400 [ 329.693311] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 329.700837] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 329.709325] DS: sel=0x0000, attr=0x00005, limit=0x00020000, base=0x0000000000000000 [ 329.717880] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 329.726465] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 329.735059] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 329.743739] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 329.753811] GDTR: limit=0x00000000, base=0x0000000000000000 [ 329.762500] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 329.771031] IDTR: limit=0x00000000, base=0x0000000000000000 [ 329.780204] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 329.788356] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 329.796151] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 329.804278] Interruptibility = 00000000 ActivityState = 00000000 [ 329.810690] *** Host State *** [ 329.810700] RIP = 0xffffffff8117a490 RSP = 0xffff88806036f998 [ 329.810714] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 329.810722] FSBase=00007f5d50c14700 GSBase=ffff8880aec00000 TRBase=fffffe0000034000 [ 329.810729] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 329.810739] CR0=0000000080050033 CR3=0000000087548000 CR4=00000000001426f0 [ 329.810749] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff868018e0 [ 329.810756] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 329.810759] *** Control State *** [ 329.810764] PinBased=0000003f CPUBased=b699edfa SecondaryExec=000000e2 [ 329.810768] EntryControls=0000d1ff ExitControls=002fefff [ 329.810776] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 329.810782] VMEntry: intr_info=80000306 errcode=00000000 ilen=00000000 [ 329.810787] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 329.810792] reason=80000021 qualification=0000000000000000 [ 329.810797] IDTVectoring: info=00000000 errcode=00000000 [ 329.810801] TSC Offset = 0xffffff4c257fac97 [ 329.810806] EPT pointer = 0x00000000a47bf01e [ 329.810813] Virtual processor ID = 0x0001 22:44:29 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) clone(0xe0000200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 22:44:29 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) 22:44:29 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[], 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) 22:44:29 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{}, {0x0, 0x20000, 0x0, 0x5, 0xca}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:44:29 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{}, {0x0, 0x20000, 0x0, 0x5, 0xca}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:44:29 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone(0xe0000200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 330.087748] *** Guest State *** [ 330.112026] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 330.141580] *** Guest State *** [ 330.144916] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 330.156823] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 330.167458] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 330.182090] CR3 = 0x00000000fffbc000 [ 330.185982] RSP = 0x00000000000000fb RIP = 0x0000000000000000 [ 330.194329] CR3 = 0x00000000fffbc000 [ 330.198177] RFLAGS=0x00010002 DR7 = 0x0000000000000400 [ 330.207468] RSP = 0x00000000000000fb RIP = 0x0000000000000000 [ 330.216116] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 330.225510] RFLAGS=0x00010002 DR7 = 0x0000000000000400 [ 330.234128] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 330.243247] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 330.254035] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 330.264798] DS: sel=0x0000, attr=0x00005, limit=0x00020000, base=0x0000000000000000 [ 330.274936] DS: sel=0x0000, attr=0x00005, limit=0x00020000, base=0x0000000000000000 [ 330.275707] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 330.295829] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 330.304004] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 330.316809] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 330.324987] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 330.337547] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 330.345710] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 330.348997] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 330.353823] GDTR: limit=0x00000000, base=0x0000000000000000 [ 330.353836] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 330.353844] IDTR: limit=0x00000000, base=0x0000000000000000 [ 330.353856] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 330.353863] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 330.353870] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 330.353875] Interruptibility = 00000000 ActivityState = 00000000 [ 330.353883] *** Host State *** [ 330.353894] RIP = 0xffffffff8117a490 RSP = 0xffff8880530ff998 [ 330.362055] GDTR: limit=0x00000000, base=0x0000000000000000 [ 330.362067] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 330.385728] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 330.386695] IDTR: limit=0x00000000, base=0x0000000000000000 [ 330.411614] FSBase=00007f5d50c14700 GSBase=ffff8880aed00000 TRBase=fffffe0000034000 [ 330.415903] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 330.429189] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 330.433785] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 330.459645] CR0=0000000080050033 CR3=0000000093e33000 CR4=00000000001426e0 [ 330.465831] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 330.500175] Interruptibility = 00000000 ActivityState = 00000000 [ 330.507120] *** Host State *** [ 330.510892] RIP = 0xffffffff8117a490 RSP = 0xffff88806036f998 [ 330.517413] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 330.524674] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff868018e0 [ 330.524862] FSBase=00007fe81c83e700 GSBase=ffff8880aed00000 TRBase=fffffe0000003000 [ 330.540317] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 330.545273] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 330.547183] CR0=0000000080050033 CR3=000000008be9d000 CR4=00000000001426e0 [ 330.560610] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff868018e0 [ 330.566393] *** Control State *** [ 330.567929] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 330.576539] PinBased=0000003f CPUBased=b699edfa SecondaryExec=000000e2 [ 330.577946] *** Control State *** [ 330.588634] PinBased=0000003f CPUBased=b699edfa SecondaryExec=000000e2 [ 330.596542] EntryControls=0000d1ff ExitControls=002fefff [ 330.597688] EntryControls=0000d1ff ExitControls=002fefff [ 330.602753] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 330.615625] VMEntry: intr_info=80000306 errcode=00000000 ilen=00000000 [ 330.619123] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 330.622933] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 330.636652] reason=80000021 qualification=0000000000000000 [ 330.637377] VMEntry: intr_info=80000306 errcode=00000000 ilen=00000000 [ 330.643766] IDTVectoring: info=00000000 errcode=00000000 [ 330.656177] TSC Offset = 0xffffff4be95567c9 [ 330.661051] EPT pointer = 0x00000000a9b1001e 22:44:29 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{}, {0x0, 0x20000, 0x0, 0x5, 0xca}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 330.663851] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 330.666439] Virtual processor ID = 0x0001 [ 330.685615] reason=80000021 qualification=0000000000000000 [ 330.704313] IDTVectoring: info=00000000 errcode=00000000 [ 330.723138] TSC Offset = 0xffffff4be1927b88 [ 330.737757] EPT pointer = 0x000000005848901e [ 330.747976] Virtual processor ID = 0x0002 22:44:30 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{}, {0x0, 0x20000, 0x0, 0x5, 0xca}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:44:30 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) 22:44:30 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[], 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) 22:44:30 executing program 5: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0xe0000200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 330.899297] *** Guest State *** [ 330.911350] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 22:44:30 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone(0xe0000200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 330.964194] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 330.995655] *** Guest State *** [ 331.006168] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 331.017391] CR3 = 0x00000000fffbc000 [ 331.032562] RSP = 0x00000000000000fb RIP = 0x0000000000000000 [ 331.036785] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 331.039263] RFLAGS=0x00010002 DR7 = 0x0000000000000400 [ 331.055105] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 331.062975] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 331.069738] CR3 = 0x00000000fffbc000 [ 331.071901] DS: sel=0x0000, attr=0x00005, limit=0x00020000, base=0x0000000000000000 [ 331.079553] RSP = 0x00000000000000fb RIP = 0x0000000000000000 [ 331.083561] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 331.094219] RFLAGS=0x00010002 DR7 = 0x0000000000000400 [ 331.097786] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 331.112482] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 331.117804] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 331.122353] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 331.134591] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 331.136011] GDTR: limit=0x00000000, base=0x0000000000000000 [ 331.152469] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 331.158809] DS: sel=0x0000, attr=0x00005, limit=0x00020000, base=0x0000000000000000 [ 331.161279] IDTR: limit=0x00000000, base=0x0000000000000000 [ 331.171516] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 331.177210] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 331.193751] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 331.201055] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 331.204704] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 331.209419] Interruptibility = 00000000 ActivityState = 00000000 [ 331.223751] *** Host State *** [ 331.227631] RIP = 0xffffffff8117a490 RSP = 0xffff8880530ff998 [ 331.234211] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 331.235494] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 331.242104] FSBase=00007fe81c83e700 GSBase=ffff8880aec00000 TRBase=fffffe0000003000 [ 331.257104] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 331.259423] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 331.268036] CR0=0000000080050033 CR3=00000000a179e000 CR4=00000000001426f0 [ 331.278888] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff868018e0 [ 331.283759] GDTR: limit=0x00000000, base=0x0000000000000000 [ 331.291093] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 331.304722] *** Control State *** [ 331.305343] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 331.308894] PinBased=0000003f CPUBased=b699edfa SecondaryExec=000000e2 [ 331.323819] EntryControls=0000d1ff ExitControls=002fefff [ 331.329688] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 331.334508] IDTR: limit=0x00000000, base=0x0000000000000000 [ 331.337597] VMEntry: intr_info=80000306 errcode=00000000 ilen=00000000 [ 331.352579] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 331.359781] reason=80000021 qualification=0000000000000000 [ 331.360241] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 331.367093] IDTVectoring: info=00000000 errcode=00000000 [ 331.382219] TSC Offset = 0xffffff4b83a9fc00 [ 331.387398] EPT pointer = 0x0000000084c6301e [ 331.393058] Virtual processor ID = 0x0001 [ 331.394873] EFER = 0x0000000000000000 PAT = 0x0007040600070406 22:44:30 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{}, {0x0, 0x20000, 0x0, 0x5, 0xca}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 331.426661] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 331.436943] Interruptibility = 00000000 ActivityState = 00000000 [ 331.491564] *** Host State *** [ 331.506499] RIP = 0xffffffff8117a490 RSP = 0xffff888059c6f998 [ 331.529640] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 331.540841] *** Guest State *** [ 331.544181] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 331.547961] FSBase=00007f5d50c14700 GSBase=ffff8880aed00000 TRBase=fffffe0000003000 [ 331.566923] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 331.567669] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 331.580714] CR3 = 0x00000000fffbc000 [ 331.586704] CR0=0000000080050033 CR3=000000008864c000 CR4=00000000001426e0 [ 331.588374] RSP = 0x00000000000000fb RIP = 0x0000000000000000 [ 331.594318] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff868018e0 [ 331.600252] net_ratelimit: 20 callbacks suppressed [ 331.600258] protocol 88fb is buggy, dev hsr_slave_0 [ 331.611451] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 331.612167] protocol 88fb is buggy, dev hsr_slave_1 [ 331.628090] *** Control State *** [ 331.636488] PinBased=0000003f CPUBased=b699edfa SecondaryExec=000000e2 [ 331.645504] RFLAGS=0x00010002 DR7 = 0x0000000000000400 [ 331.648817] EntryControls=0000d1ff ExitControls=002fefff [ 331.657753] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 331.659694] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 331.670182] VMEntry: intr_info=80000306 errcode=00000000 ilen=00000000 [ 331.678868] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 331.684025] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 331.691417] reason=80000021 qualification=0000000000000000 [ 331.705397] DS: sel=0x0000, attr=0x00005, limit=0x00020000, base=0x0000000000000000 [ 331.706593] IDTVectoring: info=00000000 errcode=00000000 [ 331.719708] TSC Offset = 0xffffff4b6bcd7e92 [ 331.723441] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 331.728989] EPT pointer = 0x0000000082cae01e 22:44:30 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB], 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) [ 331.741071] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 331.760707] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 331.761152] Virtual processor ID = 0x0002 22:44:31 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) [ 331.797489] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 22:44:31 executing program 5: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0xe0000200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 22:44:31 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone(0xe0000200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 331.850185] GDTR: limit=0x00000000, base=0x0000000000000000 [ 331.879645] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 22:44:31 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{}, {0x0, 0x20000, 0x0, 0x5, 0xca}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 331.916637] IDTR: limit=0x00000000, base=0x0000000000000000 [ 331.952390] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 331.969831] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 331.976913] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 331.984935] Interruptibility = 00000000 ActivityState = 00000000 [ 331.991743] *** Host State *** [ 331.995461] RIP = 0xffffffff8117a490 RSP = 0xffff8880530ff998 [ 332.002092] protocol 88fb is buggy, dev hsr_slave_0 [ 332.002148] protocol 88fb is buggy, dev hsr_slave_1 [ 332.013383] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 332.021131] FSBase=00007fe81c83e700 GSBase=ffff8880aed00000 TRBase=fffffe0000034000 [ 332.029054] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 332.038850] *** Guest State *** [ 332.042387] CR0=0000000080050033 CR3=00000000a93b7000 CR4=00000000001426e0 [ 332.042399] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff868018e0 [ 332.042407] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 332.042410] *** Control State *** [ 332.042415] PinBased=0000003f CPUBased=b699edfa SecondaryExec=000000e2 [ 332.042419] EntryControls=0000d1ff ExitControls=002fefff [ 332.042427] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 332.042463] VMEntry: intr_info=80000306 errcode=00000000 ilen=00000000 [ 332.054227] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 332.071742] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 332.079082] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 332.099910] reason=80000021 qualification=0000000000000000 [ 332.110640] CR3 = 0x00000000fffbc000 [ 332.122247] IDTVectoring: info=00000000 errcode=00000000 [ 332.130750] RSP = 0x00000000000000fb RIP = 0x0000000000000000 [ 332.136290] TSC Offset = 0xffffff4b2190655b [ 332.145654] RFLAGS=0x00010002 DR7 = 0x0000000000000400 [ 332.146803] EPT pointer = 0x0000000095c1301e [ 332.152650] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 332.157920] Virtual processor ID = 0x0001 [ 332.168914] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 332.178374] DS: sel=0x0000, attr=0x00005, limit=0x00020000, base=0x0000000000000000 [ 332.187513] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 22:44:31 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000100)=0x13) [ 332.215260] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 332.233985] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 332.245568] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 332.262640] GDTR: limit=0x00000000, base=0x0000000000000000 [ 332.277485] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 332.286501] IDTR: limit=0x00000000, base=0x0000000000000000 [ 332.306012] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 332.318266] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 332.325800] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 332.325808] Interruptibility = 00000000 ActivityState = 00000000 [ 332.325812] *** Host State *** [ 332.325820] RIP = 0xffffffff8117a490 RSP = 0xffff88805fdc7998 [ 332.325835] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 332.325845] FSBase=00007f5d50c14700 GSBase=ffff8880aec00000 TRBase=fffffe0000003000 [ 332.325853] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 332.325863] CR0=0000000080050033 CR3=00000000903d9000 CR4=00000000001426f0 [ 332.325878] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff868018e0 [ 332.325886] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 332.325890] *** Control State *** [ 332.325895] PinBased=0000003f CPUBased=b699edfa SecondaryExec=000000e2 [ 332.325900] EntryControls=0000d1ff ExitControls=002fefff [ 332.325910] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 22:44:31 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)) syz_open_procfs(0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) truncate(0x0, 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) [ 332.325915] VMEntry: intr_info=80000306 errcode=00000000 ilen=00000000 [ 332.325921] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 332.325926] reason=80000021 qualification=0000000000000000 [ 332.325931] IDTVectoring: info=00000000 errcode=00000000 [ 332.325935] TSC Offset = 0xffffff4add06b4af [ 332.325941] EPT pointer = 0x000000009b68b01e [ 332.325948] Virtual processor ID = 0x0002 [ 332.403080] protocol 88fb is buggy, dev hsr_slave_0 [ 332.403135] protocol 88fb is buggy, dev hsr_slave_1 22:44:31 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{}, {0x0, 0x20000, 0x0, 0x5, 0xca}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 332.543720] audit: type=1804 audit(1575758671.733:268): pid=14768 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir958879901/syzkaller.zsdlqm/348/file0" dev="sda1" ino=17233 res=1 22:44:31 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{}, {0x0, 0x20000, 0x0, 0x5, 0xca}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 332.575043] audit: type=1804 audit(1575758671.763:269): pid=14768 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.0" name="/root/syzkaller-testdir958879901/syzkaller.zsdlqm/348/file0" dev="sda1" ino=17233 res=1 22:44:31 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB], 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) 22:44:31 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) [ 332.636084] *** Guest State *** [ 332.639592] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 332.650558] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 332.661291] CR3 = 0x00000000fffbc000 [ 332.674082] RSP = 0x00000000000000fb RIP = 0x0000000000000000 [ 332.684474] RFLAGS=0x00010002 DR7 = 0x0000000000000400 [ 332.706098] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 332.727556] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 332.747282] DS: sel=0x0000, attr=0x00005, limit=0x00020000, base=0x0000000000000000 [ 332.762235] IPVS: ftp: loaded support on port[0] = 21 [ 332.780010] *** Guest State *** [ 332.784074] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 22:44:32 executing program 5: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0xe0000200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 332.785237] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 332.799775] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 332.801266] protocol 88fb is buggy, dev hsr_slave_0 [ 332.812625] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 332.814558] protocol 88fb is buggy, dev hsr_slave_1 [ 332.825603] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 332.833574] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 332.836319] GDTR: limit=0x00000000, base=0x0000000000000000 [ 332.851852] CR3 = 0x00000000fffbc000 [ 332.853184] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 332.865080] IDTR: limit=0x00000000, base=0x0000000000000000 [ 332.878330] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 332.879431] RSP = 0x00000000000000fb RIP = 0x0000000000000000 [ 332.896860] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 332.899537] RFLAGS=0x00010002 DR7 = 0x0000000000000400 [ 332.903820] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 332.917419] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 332.917431] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 332.931191] Interruptibility = 00000000 ActivityState = 00000000 [ 332.937487] DS: sel=0x0000, attr=0x00005, limit=0x00020000, base=0x0000000000000000 [ 332.938871] *** Host State *** [ 332.947149] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 332.951437] RIP = 0xffffffff8117a490 RSP = 0xffff888051c57998 [ 332.962687] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 332.965065] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 332.974526] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 332.979995] FSBase=00007f5d50c14700 GSBase=ffff8880aec00000 TRBase=fffffe0000034000 [ 332.991730] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 332.996575] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 333.006366] GDTR: limit=0x00000000, base=0x0000000000000000 [ 333.010517] CR0=0000000080050033 CR3=000000005da80000 CR4=00000000001426f0 [ 333.022221] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 333.026015] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff868018e0 [ 333.035150] IDTR: limit=0x00000000, base=0x0000000000000000 [ 333.040739] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 333.055949] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 333.058687] *** Control State *** [ 333.065664] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 333.069575] PinBased=0000003f CPUBased=b699edfa SecondaryExec=000000e2 [ 333.079637] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 333.083593] EntryControls=0000d1ff ExitControls=002fefff [ 333.094742] Interruptibility = 00000000 ActivityState = 00000000 [ 333.096797] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 333.102983] *** Host State *** [ 333.116987] VMEntry: intr_info=80000306 errcode=00000000 ilen=00000000 [ 333.117745] RIP = 0xffffffff8117a490 RSP = 0xffff88805dcff998 [ 333.123889] protocol 88fb is buggy, dev hsr_slave_0 [ 333.123940] protocol 88fb is buggy, dev hsr_slave_1 [ 333.124434] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 333.137636] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 333.140451] reason=80000021 qualification=0000000000000000 [ 333.147390] FSBase=00007fe81c83e700 GSBase=ffff8880aec00000 TRBase=fffffe0000003000 [ 333.153899] IDTVectoring: info=00000000 errcode=00000000 [ 333.164601] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 333.168317] TSC Offset = 0xffffff4a8afb56bb [ 333.173952] CR0=0000000080050033 CR3=00000000912d3000 CR4=00000000001426f0 [ 333.180263] EPT pointer = 0x00000000a802201e [ 333.189296] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff868018e0 [ 333.192133] Virtual processor ID = 0x0001 [ 333.197142] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 333.214716] *** Control State *** [ 333.218285] PinBased=0000003f CPUBased=b699edfa SecondaryExec=000000e2 [ 333.225170] EntryControls=0000d1ff ExitControls=002fefff [ 333.231180] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 333.238244] VMEntry: intr_info=80000306 errcode=00000000 ilen=00000000 22:44:32 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000440)={{}, {0x0, 0x20000, 0x0, 0x5, 0xca}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:44:32 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)) syz_open_procfs(0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) [ 333.245193] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 333.251981] reason=80000021 qualification=0000000000000000 [ 333.258607] IDTVectoring: info=00000000 errcode=00000000 [ 333.264915] TSC Offset = 0xffffff4a78dc54bd [ 333.269406] EPT pointer = 0x00000000970cd01e [ 333.274021] Virtual processor ID = 0x0002 22:44:32 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000440)={{}, {0x0, 0x20000, 0x0, 0x5, 0xca}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 333.405576] audit: type=1804 audit(1575758672.583:270): pid=14796 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir958879901/syzkaller.zsdlqm/350/file0" dev="sda1" ino=17105 res=1 [ 333.434148] audit: type=1804 audit(1575758672.593:271): pid=14796 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.0" name="/root/syzkaller-testdir958879901/syzkaller.zsdlqm/350/file0" dev="sda1" ino=17105 res=1 22:44:32 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) clone(0xe0000200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 22:44:32 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000440)={{}, {0x0, 0x20000, 0x0, 0x5, 0xca}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:44:32 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB], 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) 22:44:32 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) 22:44:32 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000080)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') accept4$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) 22:44:33 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 333.797344] audit: type=1804 audit(1575758672.983:272): pid=14811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir958879901/syzkaller.zsdlqm/351/file0" dev="sda1" ino=17249 res=1 22:44:33 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 333.889940] audit: type=1804 audit(1575758672.983:273): pid=14811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.0" name="/root/syzkaller-testdir958879901/syzkaller.zsdlqm/351/file0" dev="sda1" ino=17249 res=1 22:44:33 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 22:44:33 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000080)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') accept4$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) 22:44:33 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:44:33 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 334.116672] audit: type=1804 audit(1575758673.303:274): pid=14832 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir958879901/syzkaller.zsdlqm/352/file0" dev="sda1" ino=17009 res=1 22:44:33 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 334.200732] audit: type=1804 audit(1575758673.303:275): pid=14832 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.0" name="/root/syzkaller-testdir958879901/syzkaller.zsdlqm/352/file0" dev="sda1" ino=17009 res=1 22:44:33 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) clone(0xe0000200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 22:44:33 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:44:33 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff3"], 0x11) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) 22:44:33 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) 22:44:33 executing program 5: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 22:44:33 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000080)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') accept4$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) 22:44:33 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{}, {0x0, 0x0, 0x0, 0x5, 0xca}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:44:33 executing program 5: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 334.720946] audit: type=1804 audit(1575758673.903:276): pid=14859 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir958879901/syzkaller.zsdlqm/353/file0" dev="sda1" ino=17281 res=1 22:44:34 executing program 5: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 334.790899] audit: type=1804 audit(1575758673.943:277): pid=14859 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.0" name="/root/syzkaller-testdir958879901/syzkaller.zsdlqm/353/file0" dev="sda1" ino=17281 res=1 [ 334.881634] *** Guest State *** [ 334.886996] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 334.897933] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 334.908570] CR3 = 0x00000000fffbc000 [ 334.919425] RSP = 0x00000000000000bf RIP = 0x00000000000000c2 22:44:34 executing program 5: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 334.957511] RFLAGS=0x00010006 DR7 = 0x0000000000000400 [ 334.985893] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 22:44:34 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = creat(0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') accept4$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) [ 335.018404] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 335.050574] DS: sel=0x0000, attr=0x00005, limit=0x00000000, base=0x0000000000000000 [ 335.058975] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 22:44:34 executing program 5: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 335.073001] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 335.083683] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 335.096986] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 335.115094] GDTR: limit=0x00000000, base=0x0000000000000000 [ 335.138487] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 335.165839] IDTR: limit=0x00000000, base=0x0000000000000000 [ 335.194142] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 335.206351] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 335.213670] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 335.222115] Interruptibility = 00000000 ActivityState = 00000000 [ 335.229378] *** Host State *** [ 335.233273] RIP = 0xffffffff8117a490 RSP = 0xffff88809424f998 [ 335.239856] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 335.260392] FSBase=00007f5d50c14700 GSBase=ffff8880aed00000 TRBase=fffffe0000034000 [ 335.278161] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 335.284624] CR0=0000000080050033 CR3=0000000053b21000 CR4=00000000001426e0 [ 335.292356] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff868018e0 [ 335.299358] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 335.305840] *** Control State *** [ 335.309597] PinBased=0000003f CPUBased=b699edfa SecondaryExec=000000e2 [ 335.317115] EntryControls=0000d1ff ExitControls=002fefff [ 335.323023] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 335.330401] VMEntry: intr_info=8000030d errcode=00000000 ilen=00000000 [ 335.337463] VMExit: intr_info=00000000 errcode=00000000 ilen=00000004 [ 335.344476] reason=80000021 qualification=0000000000000000 [ 335.351208] IDTVectoring: info=00000000 errcode=00000000 [ 335.356970] TSC Offset = 0xffffff4957cf94ff [ 335.361891] EPT pointer = 0x000000005fdaa01e [ 335.366692] Virtual processor ID = 0x0001 22:44:34 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) clone(0xe0000200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 22:44:34 executing program 5: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 22:44:34 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = creat(0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') accept4$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) 22:44:34 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{}, {0x0, 0x0, 0x0, 0x5, 0xca}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:44:34 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff3"], 0x11) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) 22:44:34 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) 22:44:34 executing program 5: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 335.655797] *** Guest State *** [ 335.659472] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 335.686931] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 335.715454] CR3 = 0x00000000fffbc000 [ 335.727371] RSP = 0x00000000000000bf RIP = 0x00000000000000c2 [ 335.741779] RFLAGS=0x00010006 DR7 = 0x0000000000000400 [ 335.755996] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 22:44:35 executing program 5: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 335.770923] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 335.789116] DS: sel=0x0000, attr=0x00005, limit=0x00000000, base=0x0000000000000000 [ 335.813735] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 335.846699] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 335.870615] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 335.879180] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 335.887999] GDTR: limit=0x00000000, base=0x0000000000000000 22:44:35 executing program 5: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 335.897347] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 335.910967] IDTR: limit=0x00000000, base=0x0000000000000000 [ 335.928058] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 335.937089] EFER = 0x0000000000000000 PAT = 0x0007040600070406 22:44:35 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = creat(0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') accept4$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) [ 335.944630] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 335.953713] Interruptibility = 00000000 ActivityState = 00000000 [ 335.962277] *** Host State *** [ 335.966249] RIP = 0xffffffff8117a490 RSP = 0xffff88805311f998 [ 335.973210] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 335.986595] FSBase=00007f5d50c14700 GSBase=ffff8880aec00000 TRBase=fffffe0000003000 22:44:35 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 336.025358] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 336.054176] CR0=0000000080050033 CR3=0000000097be8000 CR4=00000000001426f0 [ 336.064879] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff868018e0 [ 336.073126] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 336.080450] *** Control State *** [ 336.084956] PinBased=0000003f CPUBased=b699edfa SecondaryExec=000000e2 [ 336.092706] EntryControls=0000d1ff ExitControls=002fefff [ 336.099961] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 336.108166] VMEntry: intr_info=8000030d errcode=00000000 ilen=00000000 [ 336.115876] VMExit: intr_info=00000000 errcode=00000000 ilen=00000004 [ 336.132339] reason=80000021 qualification=0000000000000000 [ 336.153551] IDTVectoring: info=00000000 errcode=00000000 [ 336.170339] TSC Offset = 0xffffff48ee6d977d 22:44:35 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 336.183922] EPT pointer = 0x00000000a1add01e [ 336.197218] Virtual processor ID = 0x0001 22:44:35 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{}, {0x0, 0x0, 0x0, 0x5, 0xca}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:44:35 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = creat(0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') accept4$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) 22:44:35 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 22:44:35 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 22:44:35 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff3"], 0x11) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) 22:44:35 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) 22:44:35 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 336.571354] *** Guest State *** [ 336.574705] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 336.592911] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 336.612331] CR3 = 0x00000000fffbc000 22:44:35 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 22:44:35 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = open$dir(0x0, 0x0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') accept4$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) [ 336.643574] RSP = 0x00000000000000bf RIP = 0x00000000000000c2 [ 336.684018] RFLAGS=0x00010006 DR7 = 0x0000000000000400 [ 336.706755] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 22:44:35 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 336.732124] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 336.750173] DS: sel=0x0000, attr=0x00005, limit=0x00000000, base=0x0000000000000000 [ 336.776713] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 336.814217] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 22:44:36 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 22:44:36 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 336.855189] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 336.876448] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 336.886024] GDTR: limit=0x00000000, base=0x0000000000000000 [ 336.895441] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 336.905524] IDTR: limit=0x00000000, base=0x0000000000000000 [ 336.915493] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 336.960141] net_ratelimit: 20 callbacks suppressed [ 336.960147] protocol 88fb is buggy, dev hsr_slave_0 [ 336.965209] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 336.965218] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 336.965223] Interruptibility = 00000000 ActivityState = 00000000 [ 336.965226] *** Host State *** [ 336.965234] RIP = 0xffffffff8117a490 RSP = 0xffff8880561c7998 [ 336.966947] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 336.971125] protocol 88fb is buggy, dev hsr_slave_1 [ 336.983387] FSBase=00007f5d50c14700 GSBase=ffff8880aed00000 TRBase=fffffe0000034000 [ 337.050955] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 337.075798] CR0=0000000080050033 CR3=00000000952c3000 CR4=00000000001426e0 [ 337.088378] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff868018e0 [ 337.096122] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 337.110992] *** Control State *** [ 337.114628] PinBased=0000003f CPUBased=b699edfa SecondaryExec=000000e2 [ 337.121646] EntryControls=0000d1ff ExitControls=002fefff [ 337.129520] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 337.136756] VMEntry: intr_info=8000030d errcode=00000000 ilen=00000000 [ 337.143731] VMExit: intr_info=00000000 errcode=00000000 ilen=00000004 22:44:36 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{}, {0x0, 0x20000, 0x0, 0x0, 0xca}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:44:36 executing program 0: syz_mount_image$jfs(&(0x7f0000000300)='jfs\x00', &(0x7f0000000380)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={[{@errors_continue='errors=continue'}]}) 22:44:36 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 22:44:36 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 337.150760] reason=80000021 qualification=0000000000000000 [ 337.157180] IDTVectoring: info=00000000 errcode=00000000 [ 337.162718] TSC Offset = 0xffffff487210301e [ 337.167078] EPT pointer = 0x00000000959d501e [ 337.171809] Virtual processor ID = 0x0001 [ 337.290200] protocol 88fb is buggy, dev hsr_slave_0 [ 337.295731] protocol 88fb is buggy, dev hsr_slave_1 [ 337.322320] *** Guest State *** 22:44:36 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e"], 0x1a) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) 22:44:36 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 22:44:36 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 22:44:36 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) [ 337.358398] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 22:44:36 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000180)={0x0, 0x1ee, &(0x7f0000000240)=[{&(0x7f0000002800)=""/4082, 0x1000}], 0x6, 0x0, 0x6fa}, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x51e, 0x0, 0x0, 0x800e00517) shutdown(r0, 0x0) shutdown(0xffffffffffffffff, 0x0) recvfrom$inet(r1, 0x0, 0xfffffe75, 0x0, 0x0, 0x800e0050e) shutdown(r1, 0x0) [ 337.438572] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 337.447620] protocol 88fb is buggy, dev hsr_slave_0 [ 337.447674] protocol 88fb is buggy, dev hsr_slave_1 22:44:36 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 22:44:36 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 337.538126] CR3 = 0x00000000fffbc000 [ 337.551036] RSP = 0x00000000000000bf RIP = 0x00000000000000c2 [ 337.581100] RFLAGS=0x00010006 DR7 = 0x0000000000000400 [ 337.595111] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 337.602477] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 337.611723] DS: sel=0x0000, attr=0x00001, limit=0x00020000, base=0x0000000000000000 [ 337.620737] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 22:44:36 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 337.629835] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 337.641891] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 337.650443] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 337.658801] GDTR: limit=0x00000000, base=0x0000000000000000 [ 337.669798] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 337.699051] IDTR: limit=0x00000000, base=0x0000000000000000 [ 337.715336] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 337.731008] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 337.748949] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 337.757842] Interruptibility = 00000000 ActivityState = 00000000 [ 337.764666] *** Host State *** [ 337.769110] RIP = 0xffffffff8117a490 RSP = 0xffff88809f71f998 [ 337.780786] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 337.790203] FSBase=00007f5d50c14700 GSBase=ffff8880aed00000 TRBase=fffffe0000034000 [ 337.798042] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 337.819791] CR0=0000000080050033 CR3=00000000a95b2000 CR4=00000000001426e0 [ 337.827232] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff868018e0 [ 337.840156] protocol 88fb is buggy, dev hsr_slave_0 [ 337.845406] protocol 88fb is buggy, dev hsr_slave_1 [ 337.856108] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 337.862814] *** Control State *** [ 337.866292] PinBased=0000003f CPUBased=b699edfa SecondaryExec=000000e2 [ 337.873712] EntryControls=0000d1ff ExitControls=002fefff [ 337.879570] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 337.887144] VMEntry: intr_info=8000030d errcode=00000000 ilen=00000000 [ 337.894607] VMExit: intr_info=00000000 errcode=00000000 ilen=00000004 [ 337.901502] reason=80000021 qualification=0000000000000000 [ 337.908228] IDTVectoring: info=00000000 errcode=00000000 [ 337.914181] TSC Offset = 0xffffff480c89ead9 22:44:37 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{}, {0x0, 0x20000, 0x0, 0x0, 0xca}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:44:37 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x0, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 22:44:37 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000000c0)={0x7a, 0x0, [0x4b564d02, 0x0, 0xc0000103, 0xfffffffffffffffd], [0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11]}) 22:44:37 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 337.918871] EPT pointer = 0x0000000059a2401e [ 337.923582] Virtual processor ID = 0x0001 [ 338.088562] *** Guest State *** [ 338.094380] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 338.111775] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 338.120998] CR3 = 0x00000000fffbc000 [ 338.125146] RSP = 0x00000000000000bf RIP = 0x00000000000000c2 [ 338.139742] RFLAGS=0x00010006 DR7 = 0x0000000000000400 [ 338.146283] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 338.154298] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 338.165757] DS: sel=0x0000, attr=0x00001, limit=0x00020000, base=0x0000000000000000 [ 338.174283] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 338.182669] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 338.192458] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 338.200891] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 338.209045] GDTR: limit=0x00000000, base=0x0000000000000000 [ 338.218071] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 338.226170] IDTR: limit=0x00000000, base=0x0000000000000000 [ 338.226182] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 338.226189] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 338.226197] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 338.226206] Interruptibility = 00000000 ActivityState = 00000000 [ 338.243396] protocol 88fb is buggy, dev hsr_slave_0 [ 338.259092] protocol 88fb is buggy, dev hsr_slave_1 [ 338.275700] *** Host State *** 22:44:37 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 22:44:37 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f00000002c0)) 22:44:37 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x0, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 22:44:37 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) 22:44:37 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e"], 0x1a) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) [ 338.292696] RIP = 0xffffffff8117a490 RSP = 0xffff88805a837998 [ 338.300478] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 338.326545] FSBase=00007f5d50c14700 GSBase=ffff8880aed00000 TRBase=fffffe0000034000 22:44:37 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x0, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 338.361955] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 338.392216] CR0=0000000080050033 CR3=0000000098bfb000 CR4=00000000001426e0 22:44:37 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 338.415082] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff868018e0 [ 338.439438] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 338.452843] *** Control State *** [ 338.456439] PinBased=0000003f CPUBased=b699edfa SecondaryExec=000000e2 22:44:37 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f00000002c0)) [ 338.463473] EntryControls=0000d1ff ExitControls=002fefff [ 338.469074] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 338.484737] VMEntry: intr_info=8000030d errcode=00000000 ilen=00000000 [ 338.500803] VMExit: intr_info=00000000 errcode=00000000 ilen=00000004 [ 338.513415] reason=80000021 qualification=0000000000000000 [ 338.522632] IDTVectoring: info=00000000 errcode=00000000 [ 338.530176] TSC Offset = 0xffffff47a08d736a [ 338.557933] EPT pointer = 0x00000000977bd01e [ 338.575147] Virtual processor ID = 0x0001 22:44:37 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{}, {0x0, 0x20000, 0x0, 0x0, 0xca}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:44:37 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 22:44:37 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 22:44:37 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f00000002c0)) 22:44:37 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 338.743424] *** Guest State *** [ 338.746914] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 338.756250] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 338.765783] CR3 = 0x00000000fffbc000 [ 338.773392] RSP = 0x00000000000000bf RIP = 0x00000000000000c2 [ 338.787130] RFLAGS=0x00010006 DR7 = 0x0000000000000400 22:44:37 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 22:44:38 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f00000002c0)) [ 338.794979] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 338.825384] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 338.868788] DS: sel=0x0000, attr=0x00001, limit=0x00020000, base=0x0000000000000000 [ 338.892401] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 338.913405] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 338.936191] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 338.949353] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 338.958741] GDTR: limit=0x00000000, base=0x0000000000000000 [ 338.993648] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 339.008785] IDTR: limit=0x00000000, base=0x0000000000000000 [ 339.032730] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 339.046924] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 339.053862] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 339.065987] Interruptibility = 00000000 ActivityState = 00000000 [ 339.072763] *** Host State *** [ 339.076069] RIP = 0xffffffff8117a490 RSP = 0xffff8880816af998 [ 339.086500] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 339.093174] FSBase=00007f5d50c14700 GSBase=ffff8880aed00000 TRBase=fffffe0000034000 [ 339.105322] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 339.111450] CR0=0000000080050033 CR3=00000000a124b000 CR4=00000000001426e0 [ 339.118602] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff868018e0 [ 339.129805] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 339.136074] *** Control State *** [ 339.139630] PinBased=0000003f CPUBased=b699edfa SecondaryExec=000000e2 22:44:38 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) 22:44:38 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 22:44:38 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, &(0x7f00000002c0)) 22:44:38 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 22:44:38 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e"], 0x1a) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) [ 339.150619] EntryControls=0000d1ff ExitControls=002fefff [ 339.156240] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 339.177178] VMEntry: intr_info=8000030d errcode=00000000 ilen=00000000 [ 339.189146] VMExit: intr_info=00000000 errcode=00000000 ilen=00000004 [ 339.235708] reason=80000021 qualification=0000000000000000 [ 339.268392] IDTVectoring: info=00000000 errcode=00000000 [ 339.297348] TSC Offset = 0xffffff4745c01d0f [ 339.312227] EPT pointer = 0x0000000084cc501e [ 339.320809] Virtual processor ID = 0x0001 22:44:38 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{}, {0x0, 0x20000, 0x0, 0x5}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:44:38 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 22:44:38 executing program 3: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 22:44:38 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, &(0x7f00000002c0)) 22:44:38 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, &(0x7f00000002c0)) 22:44:38 executing program 3: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 22:44:38 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 339.567675] *** Guest State *** [ 339.586202] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 339.611481] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 339.636375] CR3 = 0x00000000fffbc000 [ 339.641372] RSP = 0x00000000000000bf RIP = 0x00000000000000c2 [ 339.650208] RFLAGS=0x00010006 DR7 = 0x0000000000000400 [ 339.658868] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 339.667263] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 339.684780] DS: sel=0x0000, attr=0x10000, limit=0x00020000, base=0x0000000000000000 [ 339.693521] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 339.701968] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 339.710408] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 339.718701] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 339.747036] GDTR: limit=0x00000000, base=0x0000000000000000 [ 339.775030] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 339.783640] IDTR: limit=0x00000000, base=0x0000000000000000 [ 339.796108] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 339.804562] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 339.816356] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 339.824119] Interruptibility = 00000000 ActivityState = 00000000 [ 339.835203] *** Host State *** [ 339.838718] RIP = 0xffffffff8117a490 RSP = 0xffff888091047998 [ 339.844987] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 339.856480] FSBase=00007f5d50c14700 GSBase=ffff8880aed00000 TRBase=fffffe0000034000 [ 339.865392] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 339.888864] CR0=0000000080050033 CR3=00000000983a2000 CR4=00000000001426e0 [ 339.902399] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff868018e0 [ 339.909411] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 339.918749] *** Control State *** [ 339.925252] PinBased=0000003f CPUBased=b699edfa SecondaryExec=000000e2 [ 339.935385] EntryControls=0000d1ff ExitControls=002fefff [ 339.942859] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 339.949996] VMEntry: intr_info=8000030d errcode=00000000 ilen=00000000 [ 339.959826] VMExit: intr_info=00000000 errcode=00000000 ilen=00000004 [ 339.968362] reason=80000021 qualification=0000000000000000 [ 339.977826] IDTVectoring: info=00000000 errcode=00000000 [ 339.985542] TSC Offset = 0xffffff46d5cb1d27 [ 339.990185] EPT pointer = 0x00000000a154b01e [ 339.994858] Virtual processor ID = 0x0001 22:44:39 executing program 3: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 22:44:39 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 22:44:39 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f00000002c0)) 22:44:39 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{}, {0x0, 0x20000, 0x0, 0x5}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:44:39 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e00100200"], 0x1e) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) 22:44:39 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) 22:44:39 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f00000002c0)) 22:44:39 executing program 5: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 22:44:39 executing program 3: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 340.239193] *** Guest State *** [ 340.252776] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 22:44:39 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f00000002c0)) 22:44:39 executing program 5: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 340.291348] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 340.325668] CR3 = 0x00000000fffbc000 [ 340.331739] RSP = 0x00000000000000bf RIP = 0x00000000000000c2 [ 340.344544] RFLAGS=0x00010006 DR7 = 0x0000000000000400 [ 340.369498] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 22:44:39 executing program 3: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 340.390242] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 22:44:39 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f00000002c0)) [ 340.417822] DS: sel=0x0000, attr=0x10000, limit=0x00020000, base=0x0000000000000000 [ 340.457201] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 22:44:39 executing program 5: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 340.468241] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 340.506479] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 22:44:39 executing program 3: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 340.537018] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 340.550364] GDTR: limit=0x00000000, base=0x0000000000000000 [ 340.572503] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 340.603139] IDTR: limit=0x00000000, base=0x0000000000000000 [ 340.661138] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 340.683338] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 340.694664] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 340.702497] Interruptibility = 00000000 ActivityState = 00000000 [ 340.708984] *** Host State *** [ 340.716238] RIP = 0xffffffff8117a490 RSP = 0xffff8880816af998 [ 340.722485] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 340.728996] FSBase=00007f5d50c14700 GSBase=ffff8880aed00000 TRBase=fffffe0000034000 [ 340.740276] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 340.746414] CR0=0000000080050033 CR3=00000000a5b98000 CR4=00000000001426e0 [ 340.754217] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff868018e0 [ 340.761192] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 340.767372] *** Control State *** [ 340.770972] PinBased=0000003f CPUBased=b699edfa SecondaryExec=000000e2 [ 340.777816] EntryControls=0000d1ff ExitControls=002fefff [ 340.790101] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 340.797190] VMEntry: intr_info=8000030d errcode=00000000 ilen=00000000 22:44:40 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f00000002c0)) [ 340.817687] VMExit: intr_info=00000000 errcode=00000000 ilen=00000004 [ 340.824626] reason=80000021 qualification=0000000000000000 [ 340.836235] IDTVectoring: info=00000000 errcode=00000000 [ 340.842131] TSC Offset = 0xffffff467a0a715a [ 340.846784] EPT pointer = 0x000000008969d01e [ 340.854802] Virtual processor ID = 0x0001 22:44:40 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e00100200"], 0x1e) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) 22:44:40 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) 22:44:40 executing program 3: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 22:44:40 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{}, {0x0, 0x20000, 0x0, 0x5}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:44:40 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f00000002c0)) 22:44:40 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f00000002c0)) 22:44:40 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f00000002c0)) 22:44:40 executing program 5: creat(&(0x7f0000070c40)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x280, 0xa) 22:44:40 executing program 3: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 22:44:40 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) [ 341.081692] *** Guest State *** [ 341.086983] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 341.086994] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 22:44:40 executing program 0: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f00000002c0)) 22:44:40 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'nr0\x01\x00', 0x4009}) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) socket$kcm(0x29, 0x5, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8923, &(0x7f0000000000)='nr0\x01:\xf2%\xa3\'>\xf8]\x81\n?\xfa\xff$\x00\x00\xbf\xef\xa9\xac\x03%\xf4D3A}?\a\x8b\x9c[\xdd\x06\xa4\n\xf4\x94\xa8>\xb1\xb1\xa2_&') [ 341.177810] CR3 = 0x00000000fffbc000 [ 341.182202] kauditd_printk_skb: 3 callbacks suppressed [ 341.182212] audit: type=1804 audit(1575758680.373:281): pid=15249 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir906020022/syzkaller.VTTICl/346/file0" dev="sda1" ino=17468 res=1 [ 341.189932] RSP = 0x00000000000000bf RIP = 0x00000000000000c2 [ 341.237497] audit: type=1804 audit(1575758680.373:282): pid=15249 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir906020022/syzkaller.VTTICl/346/file0" dev="sda1" ino=17468 res=1 [ 341.299278] RFLAGS=0x00010006 DR7 = 0x0000000000000400 [ 341.320167] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 341.333508] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 341.342487] DS: sel=0x0000, attr=0x10000, limit=0x00020000, base=0x0000000000000000 [ 341.363395] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 341.374005] ÿ$: renamed from nr0 [ 341.392244] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 341.403348] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 341.411534] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 341.419600] GDTR: limit=0x00000000, base=0x0000000000000000 [ 341.427754] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 341.436129] IDTR: limit=0x00000000, base=0x0000000000000000 [ 341.444446] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 341.452669] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 341.459165] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 341.466690] Interruptibility = 00000000 ActivityState = 00000000 [ 341.473001] *** Host State *** [ 341.476208] RIP = 0xffffffff8117a490 RSP = 0xffff88809a97f998 [ 341.476223] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 341.476231] FSBase=00007f5d50c14700 GSBase=ffff8880aed00000 TRBase=fffffe0000034000 [ 341.476239] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 341.476250] CR0=0000000080050033 CR3=0000000099899000 CR4=00000000001426e0 [ 341.476261] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff868018e0 [ 341.476269] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 341.476274] *** Control State *** [ 341.488901] PinBased=0000003f CPUBased=b699edfa SecondaryExec=000000e2 [ 341.488907] EntryControls=0000d1ff ExitControls=002fefff [ 341.488918] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 341.488924] VMEntry: intr_info=8000030d errcode=00000000 ilen=00000000 [ 341.488930] VMExit: intr_info=00000000 errcode=00000000 ilen=00000004 [ 341.488935] reason=80000021 qualification=0000000000000000 [ 341.488940] IDTVectoring: info=00000000 errcode=00000000 [ 341.488945] TSC Offset = 0xffffff46052d30db [ 341.488951] EPT pointer = 0x0000000096d9501e [ 341.488959] Virtual processor ID = 0x0001 [ 341.634843] ÿ$: renamed from nr0 22:44:41 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) 22:44:41 executing program 3: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 22:44:41 executing program 0: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f00000002c0)) 22:44:41 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e00100200"], 0x1e) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) 22:44:41 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{}, {0x0, 0x20000, 0x0, 0x5, 0xca}}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 22:44:41 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'nr0\x01\x00', 0x4009}) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) socket$kcm(0x29, 0x5, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8923, &(0x7f0000000000)='nr0\x01:\xf2%\xa3\'>\xf8]\x81\n?\xfa\xff$\x00\x00\xbf\xef\xa9\xac\x03%\xf4D3A}?\a\x8b\x9c[\xdd\x06\xa4\n\xf4\x94\xa8>\xb1\xb1\xa2_&') 22:44:41 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) 22:44:41 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 22:44:41 executing program 0: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f00000002c0)) [ 341.934474] ÿ$: renamed from nr0 22:44:41 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) 22:44:41 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'nr0\x01\x00', 0x4009}) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) socket$kcm(0x29, 0x5, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8923, &(0x7f0000000000)='nr0\x01:\xf2%\xa3\'>\xf8]\x81\n?\xfa\xff$\x00\x00\xbf\xef\xa9\xac\x03%\xf4D3A}?\a\x8b\x9c[\xdd\x06\xa4\n\xf4\x94\xa8>\xb1\xb1\xa2_&') 22:44:41 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 342.000136] net_ratelimit: 20 callbacks suppressed [ 342.000141] protocol 88fb is buggy, dev hsr_slave_0 [ 342.010517] protocol 88fb is buggy, dev hsr_slave_1 22:44:41 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{}, {0x0, 0x20000, 0x0, 0x5, 0xca}}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 22:44:41 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f00000002c0)) 22:44:41 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) [ 342.194751] ÿ$: renamed from nr0 [ 342.400230] protocol 88fb is buggy, dev hsr_slave_0 [ 342.405395] protocol 88fb is buggy, dev hsr_slave_1 22:44:41 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2"], 0x20) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) 22:44:41 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 22:44:41 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f00000002c0)) 22:44:41 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{}, {0x0, 0x20000, 0x0, 0x5, 0xca}}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 22:44:41 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(0xffffffffffffffff, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) 22:44:41 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'nr0\x01\x00', 0x4009}) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) socket$kcm(0x29, 0x5, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8923, &(0x7f0000000000)='nr0\x01:\xf2%\xa3\'>\xf8]\x81\n?\xfa\xff$\x00\x00\xbf\xef\xa9\xac\x03%\xf4D3A}?\a\x8b\x9c[\xdd\x06\xa4\n\xf4\x94\xa8>\xb1\xb1\xa2_&') 22:44:41 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f00000002c0)) 22:44:41 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 342.772091] ÿ$: renamed from nr0 22:44:42 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f00000002c0)) [ 342.800119] protocol 88fb is buggy, dev hsr_slave_0 [ 342.805342] protocol 88fb is buggy, dev hsr_slave_1 22:44:42 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f00000002c0)) 22:44:42 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 22:44:42 executing program 5: bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x200697053577d314}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xaf, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0xc0) r0 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r1, r0, 0x0, 0x1, &(0x7f0000000040)='\x00'}, 0x30) perf_event_open(&(0x7f0000000600)={0x163618db5fc35032, 0x70, 0x4, 0x0, 0x2, 0x9, 0x0, 0x4, 0xa0029, 0x6, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3f, 0x4, @perf_bp={&(0x7f00000005c0)}, 0x6cd4b8168eb0ead0, 0xbd, 0x12d, 0xf, 0x2, 0xff}, r1, 0xc, 0xffffffffffffffff, 0x1) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='/group.sta\x9f\xd4t\x00+\x96FR\bR\t\x12\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0W\xdfuE\xfe\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6J\x81W!\xf0\\\xa1O\x9f\x93\x19C\xceQCV\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1fM\xeba_\xa9\xcd\x10\xcd\x0e~\xc6\xed\xb6\x82\xf6\xee\x9aK\xdd\x86\xf8\x0f\x15Y-\xb8A1\x1bb\xff\xf0\xd2M\xf7)\xaa\x8a\x18\xb9_\x83>\xeb\xfc\xc18^\x1d\xb3Y\xdc#\xde\xdb\x89\x90L\x99o\x02\xb6\x98e\xc6b\xce\xb7\x99k3&\xaf\v\xc6\x80\xff\xdb\xb7\x0e\xb4K\xf8\x17\xba\xf8\xee\fe\xed]\x93\x13\xbc\xf5\xe2<\xa2\xaf\x83\xa3\xaabc\x95\x00\t:\xcc\xe1\t]\x84\x90\x17l\xd3\xa7M\xdb\x02J\x90\xe8\xe8\xb3\xc9\xf6\xea\xb2\xdeI\xe4\x0f\xd4\xca(\xcd\xfa\xb2\xb8@\xca\x17u\x02Rb\xad\xd0\xf7\x9bz#\xb8\x1d\x88\xf6?3,\x89\xb1-p\x8a\r\xdb\xd6,\xa4\x01y\x1bc\xb7\x19\xcey\xb5\xae\xc4\xe3\xc4\xe9=\x1e\x8c\xec\xfe\x05b\x7f`Y k\xc4\xa8 \xc3\x9b\v\xbbE\x8c\xb8\xe6\x8a\xa0s\b\xcb\xbb\xfa\xde\xf0\n`\x8az<\f\xf1\xbe\x85\xd1Wk\x17\xbc1q\x8b\x93Y|\x9e\xe2\xc9Ms/A\x98\xf2\x88\n\x92?7\xb1\xe0\xee\xe8yo\xb7\xb2p\xc5O~\x87\x17F\b\xb5\xd6\xdc\xe4u:$>\xd1\xaf\x1a\xcb\x18\x8a\x0e$\xbd\x94N\xc84}_\x06\x11\xd2\xdd7\xe0\b\x0f\xd0\xb0WZ\xfc\xb1\xc3\tS\x13\a6\xc0\xbc\vG\xe4p\x1b\xee\x89_=\xb8\x12\xddpk\x860\x03\xfd\xde\x0f\x9c\xc2\xe5.\xfe\xaf\x8f\xe2\x16\x8c\xdbS\xe6\xc26\xde\xf4I\x9f\x003P\xb5\x9fg\x82!\xf2\x82 \xc1Os\xd7C\\\xad\xb3n}t\xba|\x10\x05,rk\xd1\t|\x1e\x00\x9e\xfa\"\x85\xdd\xb7O\a\xfc\x14\xa8\x00\x1f6M\xb00\xbd\xb7\xd6\xa8\xffe\xb2\xcb\'', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000000)=0x41800) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040), 0x1, 0x0, 0x2aa, 0x20000001}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\xf6\xff\xff\xff\xff\xff\xff\xff\x00\xe9\xd5\x00', 0x200091}) socketpair(0x1, 0x1, 0x0, &(0x7f00000004c0)) sendmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000000c0)=@sco={0x1f, {0x8, 0x8, 0x20, 0x7, 0x1f, 0x80}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000140)="c4a24f1b7315b60bf1e326677a0b7561dbac57a423dc2a7c3c0c1335fd5251352322e94f326c951df36067eb94e96ae279526b30f9", 0x35}, {&(0x7f0000000200)="930715e8ad3399bc66f40503ba9d790db81cadda19f3faee94ed6b4b88ca92563837b5533e65e2146b3c4a44814bec4505174dd9aab36e23683b3a7b64e947d0126751a15cec60ed536c3523baf56fda5222262c6ad4c3707a7160", 0x5b}, {&(0x7f0000000300)="1976e8d3970c98281369a20b9d2916621311b26b871328f0c1b4bedd57bff834377ef8766625b487384e4ccbeae4be717dafe186dc706f360195726d7e2efb9e8e432d181673588b3fee6b600f74404006521998d764100ca5b5606946285f2c125ecfbe19fc27100059f8c36908d698e06b88759d46921053042f1005acade7d45f2252c78382dc88652f43f720f3d7257490ec252884b857a88d030614d29e471706028663658d7f2cc5deea28932049560ecc47c3ee6595f79974aab1b33264d374cedafb3b49f7ffcc694abcb87f2f219d09fa43c6e26292e7fcd59647c4ca1184577043345a4c93ff64", 0xec}, {&(0x7f0000000400)="f731d70312542429517dc966fd20f286cdd195db7ba470b52c6b4d7ca2c633eefa75a896f36573b74387e77be3f80827ac6540b151e9c7ce9ecffaf9ee57e18db17afbfbfec448e2b3c1f95317ff58162d", 0x51}], 0x4, &(0x7f0000000500)=[{0xb0, 0x1c, 0x8, "d8f17924d93308a290fc23e249b07fb206daa623108afa3d73e6fa0bdd869a7e9d3017ac363696570bd95bbf44607fc99ea2d9d3ac637098679570862e3f048b456631b0962e7ede3f4e31bcd7a32b4e35f35175cbb90050e35972fce2470022e10fc8af10409a5a9ae98f1ec76a3d55b79b355507b1abd2ab230e6d99e3fb6c2db03ef895181886b4d04b0802dde1be71eb42042d9f3cc5e56a"}], 0xb0}, 0x4010) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000002c0), 0x4) [ 343.200256] protocol 88fb is buggy, dev hsr_slave_0 [ 343.205412] protocol 88fb is buggy, dev hsr_slave_1 22:44:42 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2"], 0x20) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) 22:44:42 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r1, &(0x7f00000005c0)=ANY=[], 0xfffffcaa) r2 = socket$alg(0x26, 0x5, 0x0) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000000580)={0x8, "c0c814a55b6300d28afc61ac7dd1ffb869b761e8e53ee36e4be89e9fea175523e4468dec44bf8b5473c7a5062b4ede67dcb24cb9484ccfff2b3a70befc56e8ab2eee3483f5bf78c16beac035b700eb84e2216f268d02b717d2046c273814475b412437f7dc08a13a55d3c02132999dfd9fe80b750eff4d7c1da975b3835602728ae09e72527fcee19377e29c6c19e1ccce0f75e0e54001e3e83e473fa3d37eca8be1b3de565571e0e84f310c11fa8616068113b038aaa5c69967699fc2aa41c6f26fc22cf68e3577242c9b4ca20fab9de5885e0648fbd7af089b05f38f152d2f8144461608733c567b6dc5d2a07022c3764565c85abcfd99dd7a85e58939278235d50e8b321be7dbaa5141e097c28364fad2f713d666ca94f4e429687fcabb72aceeaf8abe5b506d98dc393b6e97492d785ead0ca2953f92c4d2b2c9f616e3d98b36be55a923fc5892413f7a3b615cec89b52e0ecdcee0aa5af72bcbb91b4bade7435dd8b529feaf13f8b48fcaca5952235d2e909f8831d8ca05a0daa3f6c581f388e0c1879b41fe63ef3d122bd0c5acd4fb07b96797918791075ae7383bb1bbdea574b31301ff37ecc45671ee2e7fc55bf6244025d1fd82dca56a42a23aa826a0b1e102bd87893ddc05649304eb1866c796e46e0d57f552bd572891ef892918bb2e7f2c6bcf68f388ea0c50f48c06de1b46b1434cdf25ca1288ebabe2a33d1c6effb77f91ef75471e93952caeda8ac2b2677e46d62b8366922d093832bccb949e177b4417864812d22972d81d89158288b5318d017329d4e8f66273abf74c434f318ebf32c7629342a85336387231b1e579d57cff0b125bef9dddf0fc33f71cb59d5a8972cda06ba6bba4a89cb8d3b465492c431698984998b2979ea61fed3d99b049724f2bdda5a0700ccb28825da1343f41290e569a6d38d4ae3968147cf39b097efd78e058fc71523c12e724bf93dc4ecc02b5cb18d13b59ec8f85368ac1ea93ed0149c60c53569dc69cdb3f37470eab26ef010b03a7e651b9e8e9065da347660836eddb3988c9a0f394aad055f727310f646d6cb35131d02aaf24735792bfce250798bebf0d1a4495fca568b9449e81afef2937b50faf873257d7efa07d31759474d50ca2a7922e79ab47dd59b11dfd1ec43fef3551aed81d01ee4ab997c6cecc39013dcaa442aec803e4cebbc288b4f9e87b30613f0ec88ddc6f60f56787f4040897e6e6bdac317d74b27f97f2efadb031f03c61954fd0232373582b7fa315d3eb9f67053126d2ed0636f04d669c47bdeb078fbda177533902e20b5ce9d8f395ea4c0aaf2cae774fe99bc40105a9ca184bcb598ab2f49c1df62d32d1a6d73a26812cb47a2ccaf0e9b759df89ad1e18238d897b9fd658f6786a92a0c12bd0ee6dad8a430a67962363e5b9afb3329e4f1f6fcd7e63cb8f24872bcf5b8c349d9ce423666ca39f16884219dea338b388e40f4ad996419cb3858637364d8e5af67f846d77b2749115131a3642ef56681315e4a2cbca5e60febabf693570f515e09c2a8994a8e2be3cba28118ef429d4de781118182607dd2c2d5aaba621ea29c140338bd8f1787fd2a3f43bb7fa22a8ce053adb331a4c78eab569af317e14360a6bf1c8b7394f34bfc1a941ac88dab334d5a2d45fc83bee28884698fd82339c972a06efb369220049ca89727513bd4262ad6f94f55f659ec98b684b1d92e1b6a303548a196cc5316e9845baaf01e737ef047d3d1ac4fe13de618e8fd6471c225e688b73b866213f4765c1a1ecf041f66a11177b0425b0423c455dccfa35a34f3b1c4c9850267bd41dcc366f4f8fef6982699e9aee7f3edff90217c84f6865234676e65911e5e99739792161766e959d061d6e86797b595ae3cffc043da0929dce1b4bd27e04532800f14f69398a681d46f00197f547fa138e676a4c84e586e9a2037faad7d7342221c229ff13606688ab70305dc28d01270604fbcb2b5777541e637a10e7d6c2dfa76461b18c8b303234282f31b7ed8afd0cdcc3978c6520a182000ea312296c7d9df08c2a67b944bc519113822014a831c8d6a7f8d26a7a443666b6077bdc1c11cf47001bcbb484d163543445c77a02140191bbb813da818b4dc3ef1ca420f624e5cb67c48024aeb8691b549202750899938067a3ad49da19e9fffc6486b3525fba8b2ff991fb3b4c1a536818f2dad96f713ac264a22136c6a3a9eacb4f69ab08cfe2b971a7d916833c6a0370d4b0bc428db2e4b4013899668b73caf9c983e2f07e46b4b5b4f0d231edee8b1951e1d0e34c881d1fc5c6be05b92b13680398e7109bd18048f0bd980fceb24e59411873e7a8a7f95f4da2ba5c082fdda710361e163a213a3dbb82c08a69020545da4636c09a67cd962182a011cf5eb1c3d999abc7b834ee518bb53afe19941927ca190699abf79c334c52e206fc851deb7398947ad5bd125ef3f51349497142e921c85506c739f6319ae0eb8e3c551ceb7e16afc2d6aad36841ed8eb560ef984ee5e00f1ead2c646546b3c145e3700b07fc257551641cf3dcb76a8b3cc75994f2c3eb521cea22d64c8b72b2de506fde8185b70b4707b7f571668a5925ca21e605904d7c896a5d7290b9c4fc75ecc7ddbbd7f6f003a74f53d1a5432e0377a3efce1e7ac61e36dc13aeea57400d4d3986db3fccb6edaf83f86daeb42f416f58c502e74178e013b399d0b155e0df86b40b5f3f2ab0ad61c90870cee340c07977b55622699101e5372677dd4e208fa6b5d4834a2d6f37b2ead107218aa0e702d1f6a60bd4ad3a2e22807237129fdc02993ef1fffe3c285bd4f7b093b2da8d772ce2df7874bf9b7fd0893eb66a4931acc38129bfe4a8fc6b28ea83bcca1220b66c86d4d90914bb9e9a425fce618f11b66f93aa78515eac0f3956cb1e8b6f12d7f6f22c1ca5563e280b15c64732aec2a37d6010cee0fd2263ea3ea2011043153284b4a5fc87cc0dd8c36f084ce715a6e9ba3e8b2586726255d122f2b5677d6590405ae031df8f83840ef3011a7f5d18037407758270d980aa65d5a4aa26a35a61b65178b6183b282771e89a8fe47bd3ea5a23146b924a47c3cc2540a9c8d91d4a8924e010fb6d3e60457e0aa86749cc3444707fda055a0f489aecda68af7f0d7d31cf25641a10bcc0d00996cddf9059121639fa3ff2e5490bae6b702fcf226d8e50f27f0973e5e4cf543445524d0fe3bd55d3f215978bfabcba0d44c076f5b333b2095c70f6a5426338bf0c065ddce27f6730606d84d1ccef8cebcd15085fa8a5d0975dc47eeb09a4ab6da21d01916c97f4e266c4b01f2bfb3b6a08bb5a7cf834e56782d824e7c55b591cd883ed9e806a4f7033bbab49a2b8ab2cb0f6da9d76968208236b35a51f8eba3769a676ad60d69c475706a630f3a078ebaa6ba5bc25719867cb61d48cc3a381b261165c04f3c93f37d72fc15f43df1de34e24e80a46f5d15fb362e71cb4a5365dde04a53dc5e42745fbd601ff148db416244dd76ac16f24138ef9a02491eb5b48d731a8bdcd46040d0ff11a07c040b83db84bfd21ffb1d818203cb7d3f8fca47f1dc510afa8219ab031aaba2147aed7c50228930e895a72abf55ca6997131e231ea92e0059b680735548adf2d572c3540e096a644deb3750e3b341bbeffee70ff22e0b4e56142e4c1965c01a646dd9b5b0055f88f08987ad45adb844b9ffc84792073048c28bcb60f2666802052ee45dcd9a2950d55ecf0234a3dcf67e83cfa0bfb1285eb54e6292d8075c9e1b459e48556f416898557c9c864fc5de459feb53e33dd1a6860a2d1a836ab5ff6efaee123b3715a7137787ee4345efbce38074e262f363a8ff400345c8539d44a7286c7291246810bce063f0877db6585842380b530a4aaef6e36779a95fed220cef6c1fff2fdd5031f83987dc3282d432f322852cc9dc6d00c59d5ed83b386ff97c521e528e59f2df932467ac02d17f8818c2de26d69725f42cecaf186fab7b6e10b1ebd9a9a12ed83cd382d9a6f9a9bed2736cb0ec0260057f5ec704d2e1a64caad59e02ff2022174b23564cb0942e6769b12e0ae4d65dc4c5e6b6ceaf2667e085909c93a9768b7bfdac612801c0bc3848bad51e2367f788cbd1c5091ce0e9c567528c72003712e91247d87f1ff60d3865fc687a35886822079392f8d151b89e09469bef98e59139c460a53805a93245148cbb9a6a010dadc87e9b1a0e0a89e87e433ff1c0ad4b125760858c8badff4d82cbd31cf88f3e2e16a4e960e1e0b5825fc0f2b21d660cf60069d43fb6a8a96c44fa922164f02c9cd5ebb6fad848871224d157777b5a70dc6deb988506bd03aa4ce2200e9ce23641221784250c22d2c8635a3512f45d433cf66e158eb261f48a23d54f5ef4358df3487da471eb5775bdba565ee170be126b2300d0dad050212606f2d77a63fa2ab430e62670e852b89944e611509415bee36bf0961c8918bd8b0eb8af45b1a9d0420c7101a9c5f4a63efb9cc8de7897b5e2b02cb5885ad8d0d8ac7754ba8d4e9d37175e614e3f3a6a7b122bbc6dd9ce78f1b9a4e940a1160bb85650d8932fe1a82d0525630ba017be5129625a45c3cae66c7cdaa33ee704791db81ef2e11a2f528974fa388cd929c934dbdb21425e6117839ab33b2926b036457db3a43083c3ec17231aed4ee5b607a45a5735c9470c03a424b43efcea953c078717344aeb1449c0dfa3a3ec224b542c16cf735466bdaf26b522aef1db547b14f07ebd4f5da34426a46007757be47ed3f643c47f2c4467762cd049d6f4cf8a78d04f8318bdedcee80871e91c0330499d88254555c456d9bde8a892394267eac15c230cf7e7ba19ebc01b1905c80476de3cea8258f6d0820d159f4aa8a37fb378b2685da4e0e89d253187219869f1157bbe4a8a43eabf65e86a6d9b21e25d91c43c3036914427833ed87073886719069148e2e47219bb5da5d9664d64dc5c4ff71c0e808dadbb53a23e41e3c02fd0c9e0704490f3283d1864d15d795882e6522f31445556cab6832f273dac0c7aef4e3f8c09a34d1624fdb087d852f2e827fb2c3105f1afda54b9dc12cfde3cf7747daa5ac70904e82636a13155303f9a1198d6e7f9dc7be394ebc5db9e8380e290e6cae5f320caa56aa94490789fce2e2540b3de8865396f58e14d61d3cb122f7bd1af5a27c6fe733eba3cc39106efc906ea967fb833e2480aa80bd56ccd9e5c25304e2b8135f1453af70059e599cb67bc8eaaa38c39768e74d3da8aba0135f0192d7ddf0149ce62f353b0360251f1f88b272c6e85b4ee4e0563a6de80de83749af6e6aa4d80cab7031aff3f7e8d0c9114940549f828a62be9fd6a16db001369728b4b93d4ecf91563ae03def3ca4e9900a97657c4ff1e41c5742fb3329ba882ed61645aedb22f2543b83cd4007e5d228697a48064acc32ece41f2d5ead3f31a9689249e8b4bb57ac0b136b6c60ec531708235b94db823344aafbb9b79e21959635664b2193c3add0b28767906b7ba4118e6548e9a23b49e9181dc6f7dc7857425c9ab1b1451bc4572fd060190d0b5a76b8368b68e72a212bd0f89d0778d293b1d32f155f30c9aafe7215d2e746ea8f2c73a30bcd8c093a489519b60616b15afe69074ee77fb65caf5faf0aad49106057a91fdcd622a07ac21eb5c221f2e65323228af41b3eb894517c34c4f60ba20fb6f6c4309a7357884c0eeeb0a4874550107f2d0ffdc412f86bdf712f96183b3932cfb4da3f179cde1a288df9af09c243fae8c67b0d208d9cdb7adde8d5e548e0624b19da4818ef656b88280a", 0x1000}, 0x10000005c) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000c80)={0x8, "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", 0x1000}, 0x12d9) ioctl$PPPIOCGUNIT(0xffffffffffffffff, 0x80047456, 0x0) r4 = getpid() sched_setattr(r4, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$P9_RLCREATE(r3, 0x0, 0xffffffffffffff43) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) write(r6, &(0x7f0000000340), 0x4139569a) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000200)={0x5, &(0x7f00000001c0)=[{0x0, 0x9, 0xf7, 0x7fffffff}, {0x1ff, 0x3, 0x0, 0x1}, {0x1, 0x6, 0xe, 0x5}, {0x8, 0x0, 0x7}, {0x7, 0x0, 0x5, 0xfffffffa}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) fadvise64(r3, 0x0, 0x92c7, 0x4) bind$alg(r2, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58) r7 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) splice(r0, 0x0, r7, 0x0, 0x80000001, 0x0) 22:44:42 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 22:44:42 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f00000002c0)) 22:44:42 executing program 5: bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x200697053577d314}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xaf, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0xc0) r0 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r1, r0, 0x0, 0x1, &(0x7f0000000040)='\x00'}, 0x30) perf_event_open(&(0x7f0000000600)={0x163618db5fc35032, 0x70, 0x4, 0x0, 0x2, 0x9, 0x0, 0x4, 0xa0029, 0x6, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3f, 0x4, @perf_bp={&(0x7f00000005c0)}, 0x6cd4b8168eb0ead0, 0xbd, 0x12d, 0xf, 0x2, 0xff}, r1, 0xc, 0xffffffffffffffff, 0x1) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='/group.sta\x9f\xd4t\x00+\x96FR\bR\t\x12\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0W\xdfuE\xfe\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6J\x81W!\xf0\\\xa1O\x9f\x93\x19C\xceQCV\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1fM\xeba_\xa9\xcd\x10\xcd\x0e~\xc6\xed\xb6\x82\xf6\xee\x9aK\xdd\x86\xf8\x0f\x15Y-\xb8A1\x1bb\xff\xf0\xd2M\xf7)\xaa\x8a\x18\xb9_\x83>\xeb\xfc\xc18^\x1d\xb3Y\xdc#\xde\xdb\x89\x90L\x99o\x02\xb6\x98e\xc6b\xce\xb7\x99k3&\xaf\v\xc6\x80\xff\xdb\xb7\x0e\xb4K\xf8\x17\xba\xf8\xee\fe\xed]\x93\x13\xbc\xf5\xe2<\xa2\xaf\x83\xa3\xaabc\x95\x00\t:\xcc\xe1\t]\x84\x90\x17l\xd3\xa7M\xdb\x02J\x90\xe8\xe8\xb3\xc9\xf6\xea\xb2\xdeI\xe4\x0f\xd4\xca(\xcd\xfa\xb2\xb8@\xca\x17u\x02Rb\xad\xd0\xf7\x9bz#\xb8\x1d\x88\xf6?3,\x89\xb1-p\x8a\r\xdb\xd6,\xa4\x01y\x1bc\xb7\x19\xcey\xb5\xae\xc4\xe3\xc4\xe9=\x1e\x8c\xec\xfe\x05b\x7f`Y k\xc4\xa8 \xc3\x9b\v\xbbE\x8c\xb8\xe6\x8a\xa0s\b\xcb\xbb\xfa\xde\xf0\n`\x8az<\f\xf1\xbe\x85\xd1Wk\x17\xbc1q\x8b\x93Y|\x9e\xe2\xc9Ms/A\x98\xf2\x88\n\x92?7\xb1\xe0\xee\xe8yo\xb7\xb2p\xc5O~\x87\x17F\b\xb5\xd6\xdc\xe4u:$>\xd1\xaf\x1a\xcb\x18\x8a\x0e$\xbd\x94N\xc84}_\x06\x11\xd2\xdd7\xe0\b\x0f\xd0\xb0WZ\xfc\xb1\xc3\tS\x13\a6\xc0\xbc\vG\xe4p\x1b\xee\x89_=\xb8\x12\xddpk\x860\x03\xfd\xde\x0f\x9c\xc2\xe5.\xfe\xaf\x8f\xe2\x16\x8c\xdbS\xe6\xc26\xde\xf4I\x9f\x003P\xb5\x9fg\x82!\xf2\x82 \xc1Os\xd7C\\\xad\xb3n}t\xba|\x10\x05,rk\xd1\t|\x1e\x00\x9e\xfa\"\x85\xdd\xb7O\a\xfc\x14\xa8\x00\x1f6M\xb00\xbd\xb7\xd6\xa8\xffe\xb2\xcb\'', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000000)=0x41800) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040), 0x1, 0x0, 0x2aa, 0x20000001}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\xf6\xff\xff\xff\xff\xff\xff\xff\x00\xe9\xd5\x00', 0x200091}) socketpair(0x1, 0x1, 0x0, &(0x7f00000004c0)) sendmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000000c0)=@sco={0x1f, {0x8, 0x8, 0x20, 0x7, 0x1f, 0x80}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000140)="c4a24f1b7315b60bf1e326677a0b7561dbac57a423dc2a7c3c0c1335fd5251352322e94f326c951df36067eb94e96ae279526b30f9", 0x35}, {&(0x7f0000000200)="930715e8ad3399bc66f40503ba9d790db81cadda19f3faee94ed6b4b88ca92563837b5533e65e2146b3c4a44814bec4505174dd9aab36e23683b3a7b64e947d0126751a15cec60ed536c3523baf56fda5222262c6ad4c3707a7160", 0x5b}, {&(0x7f0000000300)="1976e8d3970c98281369a20b9d2916621311b26b871328f0c1b4bedd57bff834377ef8766625b487384e4ccbeae4be717dafe186dc706f360195726d7e2efb9e8e432d181673588b3fee6b600f74404006521998d764100ca5b5606946285f2c125ecfbe19fc27100059f8c36908d698e06b88759d46921053042f1005acade7d45f2252c78382dc88652f43f720f3d7257490ec252884b857a88d030614d29e471706028663658d7f2cc5deea28932049560ecc47c3ee6595f79974aab1b33264d374cedafb3b49f7ffcc694abcb87f2f219d09fa43c6e26292e7fcd59647c4ca1184577043345a4c93ff64", 0xec}, {&(0x7f0000000400)="f731d70312542429517dc966fd20f286cdd195db7ba470b52c6b4d7ca2c633eefa75a896f36573b74387e77be3f80827ac6540b151e9c7ce9ecffaf9ee57e18db17afbfbfec448e2b3c1f95317ff58162d", 0x51}], 0x4, &(0x7f0000000500)=[{0xb0, 0x1c, 0x8, "d8f17924d93308a290fc23e249b07fb206daa623108afa3d73e6fa0bdd869a7e9d3017ac363696570bd95bbf44607fc99ea2d9d3ac637098679570862e3f048b456631b0962e7ede3f4e31bcd7a32b4e35f35175cbb90050e35972fce2470022e10fc8af10409a5a9ae98f1ec76a3d55b79b355507b1abd2ab230e6d99e3fb6c2db03ef895181886b4d04b0802dde1be71eb42042d9f3cc5e56a"}], 0xb0}, 0x4010) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000002c0), 0x4) 22:44:42 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(0xffffffffffffffff, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) [ 343.520174] protocol 88fb is buggy, dev hsr_slave_0 [ 343.525403] protocol 88fb is buggy, dev hsr_slave_1 22:44:42 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f00000002c0)) 22:44:42 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 22:44:42 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f00000002c0)) 22:44:42 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 22:44:42 executing program 5: bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x200697053577d314}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xaf, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0xc0) r0 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r1, r0, 0x0, 0x1, &(0x7f0000000040)='\x00'}, 0x30) perf_event_open(&(0x7f0000000600)={0x163618db5fc35032, 0x70, 0x4, 0x0, 0x2, 0x9, 0x0, 0x4, 0xa0029, 0x6, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3f, 0x4, @perf_bp={&(0x7f00000005c0)}, 0x6cd4b8168eb0ead0, 0xbd, 0x12d, 0xf, 0x2, 0xff}, r1, 0xc, 0xffffffffffffffff, 0x1) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='/group.sta\x9f\xd4t\x00+\x96FR\bR\t\x12\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0W\xdfuE\xfe\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6J\x81W!\xf0\\\xa1O\x9f\x93\x19C\xceQCV\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1fM\xeba_\xa9\xcd\x10\xcd\x0e~\xc6\xed\xb6\x82\xf6\xee\x9aK\xdd\x86\xf8\x0f\x15Y-\xb8A1\x1bb\xff\xf0\xd2M\xf7)\xaa\x8a\x18\xb9_\x83>\xeb\xfc\xc18^\x1d\xb3Y\xdc#\xde\xdb\x89\x90L\x99o\x02\xb6\x98e\xc6b\xce\xb7\x99k3&\xaf\v\xc6\x80\xff\xdb\xb7\x0e\xb4K\xf8\x17\xba\xf8\xee\fe\xed]\x93\x13\xbc\xf5\xe2<\xa2\xaf\x83\xa3\xaabc\x95\x00\t:\xcc\xe1\t]\x84\x90\x17l\xd3\xa7M\xdb\x02J\x90\xe8\xe8\xb3\xc9\xf6\xea\xb2\xdeI\xe4\x0f\xd4\xca(\xcd\xfa\xb2\xb8@\xca\x17u\x02Rb\xad\xd0\xf7\x9bz#\xb8\x1d\x88\xf6?3,\x89\xb1-p\x8a\r\xdb\xd6,\xa4\x01y\x1bc\xb7\x19\xcey\xb5\xae\xc4\xe3\xc4\xe9=\x1e\x8c\xec\xfe\x05b\x7f`Y k\xc4\xa8 \xc3\x9b\v\xbbE\x8c\xb8\xe6\x8a\xa0s\b\xcb\xbb\xfa\xde\xf0\n`\x8az<\f\xf1\xbe\x85\xd1Wk\x17\xbc1q\x8b\x93Y|\x9e\xe2\xc9Ms/A\x98\xf2\x88\n\x92?7\xb1\xe0\xee\xe8yo\xb7\xb2p\xc5O~\x87\x17F\b\xb5\xd6\xdc\xe4u:$>\xd1\xaf\x1a\xcb\x18\x8a\x0e$\xbd\x94N\xc84}_\x06\x11\xd2\xdd7\xe0\b\x0f\xd0\xb0WZ\xfc\xb1\xc3\tS\x13\a6\xc0\xbc\vG\xe4p\x1b\xee\x89_=\xb8\x12\xddpk\x860\x03\xfd\xde\x0f\x9c\xc2\xe5.\xfe\xaf\x8f\xe2\x16\x8c\xdbS\xe6\xc26\xde\xf4I\x9f\x003P\xb5\x9fg\x82!\xf2\x82 \xc1Os\xd7C\\\xad\xb3n}t\xba|\x10\x05,rk\xd1\t|\x1e\x00\x9e\xfa\"\x85\xdd\xb7O\a\xfc\x14\xa8\x00\x1f6M\xb00\xbd\xb7\xd6\xa8\xffe\xb2\xcb\'', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000000)=0x41800) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040), 0x1, 0x0, 0x2aa, 0x20000001}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\xf6\xff\xff\xff\xff\xff\xff\xff\x00\xe9\xd5\x00', 0x200091}) socketpair(0x1, 0x1, 0x0, &(0x7f00000004c0)) sendmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000000c0)=@sco={0x1f, {0x8, 0x8, 0x20, 0x7, 0x1f, 0x80}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000140)="c4a24f1b7315b60bf1e326677a0b7561dbac57a423dc2a7c3c0c1335fd5251352322e94f326c951df36067eb94e96ae279526b30f9", 0x35}, {&(0x7f0000000200)="930715e8ad3399bc66f40503ba9d790db81cadda19f3faee94ed6b4b88ca92563837b5533e65e2146b3c4a44814bec4505174dd9aab36e23683b3a7b64e947d0126751a15cec60ed536c3523baf56fda5222262c6ad4c3707a7160", 0x5b}, {&(0x7f0000000300)="1976e8d3970c98281369a20b9d2916621311b26b871328f0c1b4bedd57bff834377ef8766625b487384e4ccbeae4be717dafe186dc706f360195726d7e2efb9e8e432d181673588b3fee6b600f74404006521998d764100ca5b5606946285f2c125ecfbe19fc27100059f8c36908d698e06b88759d46921053042f1005acade7d45f2252c78382dc88652f43f720f3d7257490ec252884b857a88d030614d29e471706028663658d7f2cc5deea28932049560ecc47c3ee6595f79974aab1b33264d374cedafb3b49f7ffcc694abcb87f2f219d09fa43c6e26292e7fcd59647c4ca1184577043345a4c93ff64", 0xec}, {&(0x7f0000000400)="f731d70312542429517dc966fd20f286cdd195db7ba470b52c6b4d7ca2c633eefa75a896f36573b74387e77be3f80827ac6540b151e9c7ce9ecffaf9ee57e18db17afbfbfec448e2b3c1f95317ff58162d", 0x51}], 0x4, &(0x7f0000000500)=[{0xb0, 0x1c, 0x8, "d8f17924d93308a290fc23e249b07fb206daa623108afa3d73e6fa0bdd869a7e9d3017ac363696570bd95bbf44607fc99ea2d9d3ac637098679570862e3f048b456631b0962e7ede3f4e31bcd7a32b4e35f35175cbb90050e35972fce2470022e10fc8af10409a5a9ae98f1ec76a3d55b79b355507b1abd2ab230e6d99e3fb6c2db03ef895181886b4d04b0802dde1be71eb42042d9f3cc5e56a"}], 0xb0}, 0x4010) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000002c0), 0x4) 22:44:43 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, &(0x7f00000002c0)) 22:44:43 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2"], 0x20) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) 22:44:43 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 22:44:43 executing program 5: bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x200697053577d314}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xaf, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0xc0) r0 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r1, r0, 0x0, 0x1, &(0x7f0000000040)='\x00'}, 0x30) perf_event_open(&(0x7f0000000600)={0x163618db5fc35032, 0x70, 0x4, 0x0, 0x2, 0x9, 0x0, 0x4, 0xa0029, 0x6, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3f, 0x4, @perf_bp={&(0x7f00000005c0)}, 0x6cd4b8168eb0ead0, 0xbd, 0x12d, 0xf, 0x2, 0xff}, r1, 0xc, 0xffffffffffffffff, 0x1) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='/group.sta\x9f\xd4t\x00+\x96FR\bR\t\x12\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0W\xdfuE\xfe\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6J\x81W!\xf0\\\xa1O\x9f\x93\x19C\xceQCV\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1fM\xeba_\xa9\xcd\x10\xcd\x0e~\xc6\xed\xb6\x82\xf6\xee\x9aK\xdd\x86\xf8\x0f\x15Y-\xb8A1\x1bb\xff\xf0\xd2M\xf7)\xaa\x8a\x18\xb9_\x83>\xeb\xfc\xc18^\x1d\xb3Y\xdc#\xde\xdb\x89\x90L\x99o\x02\xb6\x98e\xc6b\xce\xb7\x99k3&\xaf\v\xc6\x80\xff\xdb\xb7\x0e\xb4K\xf8\x17\xba\xf8\xee\fe\xed]\x93\x13\xbc\xf5\xe2<\xa2\xaf\x83\xa3\xaabc\x95\x00\t:\xcc\xe1\t]\x84\x90\x17l\xd3\xa7M\xdb\x02J\x90\xe8\xe8\xb3\xc9\xf6\xea\xb2\xdeI\xe4\x0f\xd4\xca(\xcd\xfa\xb2\xb8@\xca\x17u\x02Rb\xad\xd0\xf7\x9bz#\xb8\x1d\x88\xf6?3,\x89\xb1-p\x8a\r\xdb\xd6,\xa4\x01y\x1bc\xb7\x19\xcey\xb5\xae\xc4\xe3\xc4\xe9=\x1e\x8c\xec\xfe\x05b\x7f`Y k\xc4\xa8 \xc3\x9b\v\xbbE\x8c\xb8\xe6\x8a\xa0s\b\xcb\xbb\xfa\xde\xf0\n`\x8az<\f\xf1\xbe\x85\xd1Wk\x17\xbc1q\x8b\x93Y|\x9e\xe2\xc9Ms/A\x98\xf2\x88\n\x92?7\xb1\xe0\xee\xe8yo\xb7\xb2p\xc5O~\x87\x17F\b\xb5\xd6\xdc\xe4u:$>\xd1\xaf\x1a\xcb\x18\x8a\x0e$\xbd\x94N\xc84}_\x06\x11\xd2\xdd7\xe0\b\x0f\xd0\xb0WZ\xfc\xb1\xc3\tS\x13\a6\xc0\xbc\vG\xe4p\x1b\xee\x89_=\xb8\x12\xddpk\x860\x03\xfd\xde\x0f\x9c\xc2\xe5.\xfe\xaf\x8f\xe2\x16\x8c\xdbS\xe6\xc26\xde\xf4I\x9f\x003P\xb5\x9fg\x82!\xf2\x82 \xc1Os\xd7C\\\xad\xb3n}t\xba|\x10\x05,rk\xd1\t|\x1e\x00\x9e\xfa\"\x85\xdd\xb7O\a\xfc\x14\xa8\x00\x1f6M\xb00\xbd\xb7\xd6\xa8\xffe\xb2\xcb\'', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000000)=0x41800) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040), 0x1, 0x0, 0x2aa, 0x20000001}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\xf6\xff\xff\xff\xff\xff\xff\xff\x00\xe9\xd5\x00', 0x200091}) socketpair(0x1, 0x1, 0x0, &(0x7f00000004c0)) sendmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000000c0)=@sco={0x1f, {0x8, 0x8, 0x20, 0x7, 0x1f, 0x80}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000140)="c4a24f1b7315b60bf1e326677a0b7561dbac57a423dc2a7c3c0c1335fd5251352322e94f326c951df36067eb94e96ae279526b30f9", 0x35}, {&(0x7f0000000200)="930715e8ad3399bc66f40503ba9d790db81cadda19f3faee94ed6b4b88ca92563837b5533e65e2146b3c4a44814bec4505174dd9aab36e23683b3a7b64e947d0126751a15cec60ed536c3523baf56fda5222262c6ad4c3707a7160", 0x5b}, {&(0x7f0000000300)="1976e8d3970c98281369a20b9d2916621311b26b871328f0c1b4bedd57bff834377ef8766625b487384e4ccbeae4be717dafe186dc706f360195726d7e2efb9e8e432d181673588b3fee6b600f74404006521998d764100ca5b5606946285f2c125ecfbe19fc27100059f8c36908d698e06b88759d46921053042f1005acade7d45f2252c78382dc88652f43f720f3d7257490ec252884b857a88d030614d29e471706028663658d7f2cc5deea28932049560ecc47c3ee6595f79974aab1b33264d374cedafb3b49f7ffcc694abcb87f2f219d09fa43c6e26292e7fcd59647c4ca1184577043345a4c93ff64", 0xec}, {&(0x7f0000000400)="f731d70312542429517dc966fd20f286cdd195db7ba470b52c6b4d7ca2c633eefa75a896f36573b74387e77be3f80827ac6540b151e9c7ce9ecffaf9ee57e18db17afbfbfec448e2b3c1f95317ff58162d", 0x51}], 0x4, &(0x7f0000000500)=[{0xb0, 0x1c, 0x8, "d8f17924d93308a290fc23e249b07fb206daa623108afa3d73e6fa0bdd869a7e9d3017ac363696570bd95bbf44607fc99ea2d9d3ac637098679570862e3f048b456631b0962e7ede3f4e31bcd7a32b4e35f35175cbb90050e35972fce2470022e10fc8af10409a5a9ae98f1ec76a3d55b79b355507b1abd2ab230e6d99e3fb6c2db03ef895181886b4d04b0802dde1be71eb42042d9f3cc5e56a"}], 0xb0}, 0x4010) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000002c0), 0x4) 22:44:43 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, &(0x7f00000002c0)) 22:44:43 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r1, &(0x7f00000005c0)=ANY=[], 0xfffffcaa) r2 = socket$alg(0x26, 0x5, 0x0) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000000580)={0x8, "c0c814a55b6300d28afc61ac7dd1ffb869b761e8e53ee36e4be89e9fea175523e4468dec44bf8b5473c7a5062b4ede67dcb24cb9484ccfff2b3a70befc56e8ab2eee3483f5bf78c16beac035b700eb84e2216f268d02b717d2046c273814475b412437f7dc08a13a55d3c02132999dfd9fe80b750eff4d7c1da975b3835602728ae09e72527fcee19377e29c6c19e1ccce0f75e0e54001e3e83e473fa3d37eca8be1b3de565571e0e84f310c11fa8616068113b038aaa5c69967699fc2aa41c6f26fc22cf68e3577242c9b4ca20fab9de5885e0648fbd7af089b05f38f152d2f8144461608733c567b6dc5d2a07022c3764565c85abcfd99dd7a85e58939278235d50e8b321be7dbaa5141e097c28364fad2f713d666ca94f4e429687fcabb72aceeaf8abe5b506d98dc393b6e97492d785ead0ca2953f92c4d2b2c9f616e3d98b36be55a923fc5892413f7a3b615cec89b52e0ecdcee0aa5af72bcbb91b4bade7435dd8b529feaf13f8b48fcaca5952235d2e909f8831d8ca05a0daa3f6c581f388e0c1879b41fe63ef3d122bd0c5acd4fb07b96797918791075ae7383bb1bbdea574b31301ff37ecc45671ee2e7fc55bf6244025d1fd82dca56a42a23aa826a0b1e102bd87893ddc05649304eb1866c796e46e0d57f552bd572891ef892918bb2e7f2c6bcf68f388ea0c50f48c06de1b46b1434cdf25ca1288ebabe2a33d1c6effb77f91ef75471e93952caeda8ac2b2677e46d62b8366922d093832bccb949e177b4417864812d22972d81d89158288b5318d017329d4e8f66273abf74c434f318ebf32c7629342a85336387231b1e579d57cff0b125bef9dddf0fc33f71cb59d5a8972cda06ba6bba4a89cb8d3b465492c431698984998b2979ea61fed3d99b049724f2bdda5a0700ccb28825da1343f41290e569a6d38d4ae3968147cf39b097efd78e058fc71523c12e724bf93dc4ecc02b5cb18d13b59ec8f85368ac1ea93ed0149c60c53569dc69cdb3f37470eab26ef010b03a7e651b9e8e9065da347660836eddb3988c9a0f394aad055f727310f646d6cb35131d02aaf24735792bfce250798bebf0d1a4495fca568b9449e81afef2937b50faf873257d7efa07d31759474d50ca2a7922e79ab47dd59b11dfd1ec43fef3551aed81d01ee4ab997c6cecc39013dcaa442aec803e4cebbc288b4f9e87b30613f0ec88ddc6f60f56787f4040897e6e6bdac317d74b27f97f2efadb031f03c61954fd0232373582b7fa315d3eb9f67053126d2ed0636f04d669c47bdeb078fbda177533902e20b5ce9d8f395ea4c0aaf2cae774fe99bc40105a9ca184bcb598ab2f49c1df62d32d1a6d73a26812cb47a2ccaf0e9b759df89ad1e18238d897b9fd658f6786a92a0c12bd0ee6dad8a430a67962363e5b9afb3329e4f1f6fcd7e63cb8f24872bcf5b8c349d9ce423666ca39f16884219dea338b388e40f4ad996419cb3858637364d8e5af67f846d77b2749115131a3642ef56681315e4a2cbca5e60febabf693570f515e09c2a8994a8e2be3cba28118ef429d4de781118182607dd2c2d5aaba621ea29c140338bd8f1787fd2a3f43bb7fa22a8ce053adb331a4c78eab569af317e14360a6bf1c8b7394f34bfc1a941ac88dab334d5a2d45fc83bee28884698fd82339c972a06efb369220049ca89727513bd4262ad6f94f55f659ec98b684b1d92e1b6a303548a196cc5316e9845baaf01e737ef047d3d1ac4fe13de618e8fd6471c225e688b73b866213f4765c1a1ecf041f66a11177b0425b0423c455dccfa35a34f3b1c4c9850267bd41dcc366f4f8fef6982699e9aee7f3edff90217c84f6865234676e65911e5e99739792161766e959d061d6e86797b595ae3cffc043da0929dce1b4bd27e04532800f14f69398a681d46f00197f547fa138e676a4c84e586e9a2037faad7d7342221c229ff13606688ab70305dc28d01270604fbcb2b5777541e637a10e7d6c2dfa76461b18c8b303234282f31b7ed8afd0cdcc3978c6520a182000ea312296c7d9df08c2a67b944bc519113822014a831c8d6a7f8d26a7a443666b6077bdc1c11cf47001bcbb484d163543445c77a02140191bbb813da818b4dc3ef1ca420f624e5cb67c48024aeb8691b549202750899938067a3ad49da19e9fffc6486b3525fba8b2ff991fb3b4c1a536818f2dad96f713ac264a22136c6a3a9eacb4f69ab08cfe2b971a7d916833c6a0370d4b0bc428db2e4b4013899668b73caf9c983e2f07e46b4b5b4f0d231edee8b1951e1d0e34c881d1fc5c6be05b92b13680398e7109bd18048f0bd980fceb24e59411873e7a8a7f95f4da2ba5c082fdda710361e163a213a3dbb82c08a69020545da4636c09a67cd962182a011cf5eb1c3d999abc7b834ee518bb53afe19941927ca190699abf79c334c52e206fc851deb7398947ad5bd125ef3f51349497142e921c85506c739f6319ae0eb8e3c551ceb7e16afc2d6aad36841ed8eb560ef984ee5e00f1ead2c646546b3c145e3700b07fc257551641cf3dcb76a8b3cc75994f2c3eb521cea22d64c8b72b2de506fde8185b70b4707b7f571668a5925ca21e605904d7c896a5d7290b9c4fc75ecc7ddbbd7f6f003a74f53d1a5432e0377a3efce1e7ac61e36dc13aeea57400d4d3986db3fccb6edaf83f86daeb42f416f58c502e74178e013b399d0b155e0df86b40b5f3f2ab0ad61c90870cee340c07977b55622699101e5372677dd4e208fa6b5d4834a2d6f37b2ead107218aa0e702d1f6a60bd4ad3a2e22807237129fdc02993ef1fffe3c285bd4f7b093b2da8d772ce2df7874bf9b7fd0893eb66a4931acc38129bfe4a8fc6b28ea83bcca1220b66c86d4d90914bb9e9a425fce618f11b66f93aa78515eac0f3956cb1e8b6f12d7f6f22c1ca5563e280b15c64732aec2a37d6010cee0fd2263ea3ea2011043153284b4a5fc87cc0dd8c36f084ce715a6e9ba3e8b2586726255d122f2b5677d6590405ae031df8f83840ef3011a7f5d18037407758270d980aa65d5a4aa26a35a61b65178b6183b282771e89a8fe47bd3ea5a23146b924a47c3cc2540a9c8d91d4a8924e010fb6d3e60457e0aa86749cc3444707fda055a0f489aecda68af7f0d7d31cf25641a10bcc0d00996cddf9059121639fa3ff2e5490bae6b702fcf226d8e50f27f0973e5e4cf543445524d0fe3bd55d3f215978bfabcba0d44c076f5b333b2095c70f6a5426338bf0c065ddce27f6730606d84d1ccef8cebcd15085fa8a5d0975dc47eeb09a4ab6da21d01916c97f4e266c4b01f2bfb3b6a08bb5a7cf834e56782d824e7c55b591cd883ed9e806a4f7033bbab49a2b8ab2cb0f6da9d76968208236b35a51f8eba3769a676ad60d69c475706a630f3a078ebaa6ba5bc25719867cb61d48cc3a381b261165c04f3c93f37d72fc15f43df1de34e24e80a46f5d15fb362e71cb4a5365dde04a53dc5e42745fbd601ff148db416244dd76ac16f24138ef9a02491eb5b48d731a8bdcd46040d0ff11a07c040b83db84bfd21ffb1d818203cb7d3f8fca47f1dc510afa8219ab031aaba2147aed7c50228930e895a72abf55ca6997131e231ea92e0059b680735548adf2d572c3540e096a644deb3750e3b341bbeffee70ff22e0b4e56142e4c1965c01a646dd9b5b0055f88f08987ad45adb844b9ffc84792073048c28bcb60f2666802052ee45dcd9a2950d55ecf0234a3dcf67e83cfa0bfb1285eb54e6292d8075c9e1b459e48556f416898557c9c864fc5de459feb53e33dd1a6860a2d1a836ab5ff6efaee123b3715a7137787ee4345efbce38074e262f363a8ff400345c8539d44a7286c7291246810bce063f0877db6585842380b530a4aaef6e36779a95fed220cef6c1fff2fdd5031f83987dc3282d432f322852cc9dc6d00c59d5ed83b386ff97c521e528e59f2df932467ac02d17f8818c2de26d69725f42cecaf186fab7b6e10b1ebd9a9a12ed83cd382d9a6f9a9bed2736cb0ec0260057f5ec704d2e1a64caad59e02ff2022174b23564cb0942e6769b12e0ae4d65dc4c5e6b6ceaf2667e085909c93a9768b7bfdac612801c0bc3848bad51e2367f788cbd1c5091ce0e9c567528c72003712e91247d87f1ff60d3865fc687a35886822079392f8d151b89e09469bef98e59139c460a53805a93245148cbb9a6a010dadc87e9b1a0e0a89e87e433ff1c0ad4b125760858c8badff4d82cbd31cf88f3e2e16a4e960e1e0b5825fc0f2b21d660cf60069d43fb6a8a96c44fa922164f02c9cd5ebb6fad848871224d157777b5a70dc6deb988506bd03aa4ce2200e9ce23641221784250c22d2c8635a3512f45d433cf66e158eb261f48a23d54f5ef4358df3487da471eb5775bdba565ee170be126b2300d0dad050212606f2d77a63fa2ab430e62670e852b89944e611509415bee36bf0961c8918bd8b0eb8af45b1a9d0420c7101a9c5f4a63efb9cc8de7897b5e2b02cb5885ad8d0d8ac7754ba8d4e9d37175e614e3f3a6a7b122bbc6dd9ce78f1b9a4e940a1160bb85650d8932fe1a82d0525630ba017be5129625a45c3cae66c7cdaa33ee704791db81ef2e11a2f528974fa388cd929c934dbdb21425e6117839ab33b2926b036457db3a43083c3ec17231aed4ee5b607a45a5735c9470c03a424b43efcea953c078717344aeb1449c0dfa3a3ec224b542c16cf735466bdaf26b522aef1db547b14f07ebd4f5da34426a46007757be47ed3f643c47f2c4467762cd049d6f4cf8a78d04f8318bdedcee80871e91c0330499d88254555c456d9bde8a892394267eac15c230cf7e7ba19ebc01b1905c80476de3cea8258f6d0820d159f4aa8a37fb378b2685da4e0e89d253187219869f1157bbe4a8a43eabf65e86a6d9b21e25d91c43c3036914427833ed87073886719069148e2e47219bb5da5d9664d64dc5c4ff71c0e808dadbb53a23e41e3c02fd0c9e0704490f3283d1864d15d795882e6522f31445556cab6832f273dac0c7aef4e3f8c09a34d1624fdb087d852f2e827fb2c3105f1afda54b9dc12cfde3cf7747daa5ac70904e82636a13155303f9a1198d6e7f9dc7be394ebc5db9e8380e290e6cae5f320caa56aa94490789fce2e2540b3de8865396f58e14d61d3cb122f7bd1af5a27c6fe733eba3cc39106efc906ea967fb833e2480aa80bd56ccd9e5c25304e2b8135f1453af70059e599cb67bc8eaaa38c39768e74d3da8aba0135f0192d7ddf0149ce62f353b0360251f1f88b272c6e85b4ee4e0563a6de80de83749af6e6aa4d80cab7031aff3f7e8d0c9114940549f828a62be9fd6a16db001369728b4b93d4ecf91563ae03def3ca4e9900a97657c4ff1e41c5742fb3329ba882ed61645aedb22f2543b83cd4007e5d228697a48064acc32ece41f2d5ead3f31a9689249e8b4bb57ac0b136b6c60ec531708235b94db823344aafbb9b79e21959635664b2193c3add0b28767906b7ba4118e6548e9a23b49e9181dc6f7dc7857425c9ab1b1451bc4572fd060190d0b5a76b8368b68e72a212bd0f89d0778d293b1d32f155f30c9aafe7215d2e746ea8f2c73a30bcd8c093a489519b60616b15afe69074ee77fb65caf5faf0aad49106057a91fdcd622a07ac21eb5c221f2e65323228af41b3eb894517c34c4f60ba20fb6f6c4309a7357884c0eeeb0a4874550107f2d0ffdc412f86bdf712f96183b3932cfb4da3f179cde1a288df9af09c243fae8c67b0d208d9cdb7adde8d5e548e0624b19da4818ef656b88280a", 0x1000}, 0x10000005c) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000c80)={0x8, "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", 0x1000}, 0x12d9) ioctl$PPPIOCGUNIT(0xffffffffffffffff, 0x80047456, 0x0) r4 = getpid() sched_setattr(r4, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$P9_RLCREATE(r3, 0x0, 0xffffffffffffff43) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) write(r6, &(0x7f0000000340), 0x4139569a) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000200)={0x5, &(0x7f00000001c0)=[{0x0, 0x9, 0xf7, 0x7fffffff}, {0x1ff, 0x3, 0x0, 0x1}, {0x1, 0x6, 0xe, 0x5}, {0x8, 0x0, 0x7}, {0x7, 0x0, 0x5, 0xfffffffa}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) fadvise64(r3, 0x0, 0x92c7, 0x4) bind$alg(r2, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58) r7 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) splice(r0, 0x0, r7, 0x0, 0x80000001, 0x0) 22:44:43 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(0xffffffffffffffff, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) 22:44:43 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x0, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 22:44:43 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, &(0x7f00000002c0)) 22:44:43 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r1, &(0x7f00000005c0)=ANY=[], 0xfffffcaa) r2 = socket$alg(0x26, 0x5, 0x0) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000000580)={0x8, "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", 0x1000}, 0x10000005c) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000c80)={0x8, "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", 0x1000}, 0x12d9) ioctl$PPPIOCGUNIT(0xffffffffffffffff, 0x80047456, 0x0) r4 = getpid() sched_setattr(r4, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$P9_RLCREATE(r3, 0x0, 0xffffffffffffff43) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) write(r6, &(0x7f0000000340), 0x4139569a) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000200)={0x5, &(0x7f00000001c0)=[{0x0, 0x9, 0xf7, 0x7fffffff}, {0x1ff, 0x3, 0x0, 0x1}, {0x1, 0x6, 0xe, 0x5}, {0x8, 0x0, 0x7}, {0x7, 0x0, 0x5, 0xfffffffa}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) fadvise64(r3, 0x0, 0x92c7, 0x4) bind$alg(r2, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58) r7 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) splice(r0, 0x0, r7, 0x0, 0x80000001, 0x0) 22:44:43 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x0, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 22:44:43 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCMSET(r0, 0x5418, 0x0) 22:44:44 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x0, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 22:44:44 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd"], 0x21) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) 22:44:44 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCMSET(r0, 0x5418, 0x0) 22:44:44 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) 22:44:44 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 22:44:44 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCMSET(r0, 0x5418, 0x0) 22:44:44 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r1, &(0x7f00000005c0)=ANY=[], 0xfffffcaa) r2 = socket$alg(0x26, 0x5, 0x0) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000000580)={0x8, "c0c814a55b6300d28afc61ac7dd1ffb869b761e8e53ee36e4be89e9fea175523e4468dec44bf8b5473c7a5062b4ede67dcb24cb9484ccfff2b3a70befc56e8ab2eee3483f5bf78c16beac035b700eb84e2216f268d02b717d2046c273814475b412437f7dc08a13a55d3c02132999dfd9fe80b750eff4d7c1da975b3835602728ae09e72527fcee19377e29c6c19e1ccce0f75e0e54001e3e83e473fa3d37eca8be1b3de565571e0e84f310c11fa8616068113b038aaa5c69967699fc2aa41c6f26fc22cf68e3577242c9b4ca20fab9de5885e0648fbd7af089b05f38f152d2f8144461608733c567b6dc5d2a07022c3764565c85abcfd99dd7a85e58939278235d50e8b321be7dbaa5141e097c28364fad2f713d666ca94f4e429687fcabb72aceeaf8abe5b506d98dc393b6e97492d785ead0ca2953f92c4d2b2c9f616e3d98b36be55a923fc5892413f7a3b615cec89b52e0ecdcee0aa5af72bcbb91b4bade7435dd8b529feaf13f8b48fcaca5952235d2e909f8831d8ca05a0daa3f6c581f388e0c1879b41fe63ef3d122bd0c5acd4fb07b96797918791075ae7383bb1bbdea574b31301ff37ecc45671ee2e7fc55bf6244025d1fd82dca56a42a23aa826a0b1e102bd87893ddc05649304eb1866c796e46e0d57f552bd572891ef892918bb2e7f2c6bcf68f388ea0c50f48c06de1b46b1434cdf25ca1288ebabe2a33d1c6effb77f91ef75471e93952caeda8ac2b2677e46d62b8366922d093832bccb949e177b4417864812d22972d81d89158288b5318d017329d4e8f66273abf74c434f318ebf32c7629342a85336387231b1e579d57cff0b125bef9dddf0fc33f71cb59d5a8972cda06ba6bba4a89cb8d3b465492c431698984998b2979ea61fed3d99b049724f2bdda5a0700ccb28825da1343f41290e569a6d38d4ae3968147cf39b097efd78e058fc71523c12e724bf93dc4ecc02b5cb18d13b59ec8f85368ac1ea93ed0149c60c53569dc69cdb3f37470eab26ef010b03a7e651b9e8e9065da347660836eddb3988c9a0f394aad055f727310f646d6cb35131d02aaf24735792bfce250798bebf0d1a4495fca568b9449e81afef2937b50faf873257d7efa07d31759474d50ca2a7922e79ab47dd59b11dfd1ec43fef3551aed81d01ee4ab997c6cecc39013dcaa442aec803e4cebbc288b4f9e87b30613f0ec88ddc6f60f56787f4040897e6e6bdac317d74b27f97f2efadb031f03c61954fd0232373582b7fa315d3eb9f67053126d2ed0636f04d669c47bdeb078fbda177533902e20b5ce9d8f395ea4c0aaf2cae774fe99bc40105a9ca184bcb598ab2f49c1df62d32d1a6d73a26812cb47a2ccaf0e9b759df89ad1e18238d897b9fd658f6786a92a0c12bd0ee6dad8a430a67962363e5b9afb3329e4f1f6fcd7e63cb8f24872bcf5b8c349d9ce423666ca39f16884219dea338b388e40f4ad996419cb3858637364d8e5af67f846d77b2749115131a3642ef56681315e4a2cbca5e60febabf693570f515e09c2a8994a8e2be3cba28118ef429d4de781118182607dd2c2d5aaba621ea29c140338bd8f1787fd2a3f43bb7fa22a8ce053adb331a4c78eab569af317e14360a6bf1c8b7394f34bfc1a941ac88dab334d5a2d45fc83bee28884698fd82339c972a06efb369220049ca89727513bd4262ad6f94f55f659ec98b684b1d92e1b6a303548a196cc5316e9845baaf01e737ef047d3d1ac4fe13de618e8fd6471c225e688b73b866213f4765c1a1ecf041f66a11177b0425b0423c455dccfa35a34f3b1c4c9850267bd41dcc366f4f8fef6982699e9aee7f3edff90217c84f6865234676e65911e5e99739792161766e959d061d6e86797b595ae3cffc043da0929dce1b4bd27e04532800f14f69398a681d46f00197f547fa138e676a4c84e586e9a2037faad7d7342221c229ff13606688ab70305dc28d01270604fbcb2b5777541e637a10e7d6c2dfa76461b18c8b303234282f31b7ed8afd0cdcc3978c6520a182000ea312296c7d9df08c2a67b944bc519113822014a831c8d6a7f8d26a7a443666b6077bdc1c11cf47001bcbb484d163543445c77a02140191bbb813da818b4dc3ef1ca420f624e5cb67c48024aeb8691b549202750899938067a3ad49da19e9fffc6486b3525fba8b2ff991fb3b4c1a536818f2dad96f713ac264a22136c6a3a9eacb4f69ab08cfe2b971a7d916833c6a0370d4b0bc428db2e4b4013899668b73caf9c983e2f07e46b4b5b4f0d231edee8b1951e1d0e34c881d1fc5c6be05b92b13680398e7109bd18048f0bd980fceb24e59411873e7a8a7f95f4da2ba5c082fdda710361e163a213a3dbb82c08a69020545da4636c09a67cd962182a011cf5eb1c3d999abc7b834ee518bb53afe19941927ca190699abf79c334c52e206fc851deb7398947ad5bd125ef3f51349497142e921c85506c739f6319ae0eb8e3c551ceb7e16afc2d6aad36841ed8eb560ef984ee5e00f1ead2c646546b3c145e3700b07fc257551641cf3dcb76a8b3cc75994f2c3eb521cea22d64c8b72b2de506fde8185b70b4707b7f571668a5925ca21e605904d7c896a5d7290b9c4fc75ecc7ddbbd7f6f003a74f53d1a5432e0377a3efce1e7ac61e36dc13aeea57400d4d3986db3fccb6edaf83f86daeb42f416f58c502e74178e013b399d0b155e0df86b40b5f3f2ab0ad61c90870cee340c07977b55622699101e5372677dd4e208fa6b5d4834a2d6f37b2ead107218aa0e702d1f6a60bd4ad3a2e22807237129fdc02993ef1fffe3c285bd4f7b093b2da8d772ce2df7874bf9b7fd0893eb66a4931acc38129bfe4a8fc6b28ea83bcca1220b66c86d4d90914bb9e9a425fce618f11b66f93aa78515eac0f3956cb1e8b6f12d7f6f22c1ca5563e280b15c64732aec2a37d6010cee0fd2263ea3ea2011043153284b4a5fc87cc0dd8c36f084ce715a6e9ba3e8b2586726255d122f2b5677d6590405ae031df8f83840ef3011a7f5d18037407758270d980aa65d5a4aa26a35a61b65178b6183b282771e89a8fe47bd3ea5a23146b924a47c3cc2540a9c8d91d4a8924e010fb6d3e60457e0aa86749cc3444707fda055a0f489aecda68af7f0d7d31cf25641a10bcc0d00996cddf9059121639fa3ff2e5490bae6b702fcf226d8e50f27f0973e5e4cf543445524d0fe3bd55d3f215978bfabcba0d44c076f5b333b2095c70f6a5426338bf0c065ddce27f6730606d84d1ccef8cebcd15085fa8a5d0975dc47eeb09a4ab6da21d01916c97f4e266c4b01f2bfb3b6a08bb5a7cf834e56782d824e7c55b591cd883ed9e806a4f7033bbab49a2b8ab2cb0f6da9d76968208236b35a51f8eba3769a676ad60d69c475706a630f3a078ebaa6ba5bc25719867cb61d48cc3a381b261165c04f3c93f37d72fc15f43df1de34e24e80a46f5d15fb362e71cb4a5365dde04a53dc5e42745fbd601ff148db416244dd76ac16f24138ef9a02491eb5b48d731a8bdcd46040d0ff11a07c040b83db84bfd21ffb1d818203cb7d3f8fca47f1dc510afa8219ab031aaba2147aed7c50228930e895a72abf55ca6997131e231ea92e0059b680735548adf2d572c3540e096a644deb3750e3b341bbeffee70ff22e0b4e56142e4c1965c01a646dd9b5b0055f88f08987ad45adb844b9ffc84792073048c28bcb60f2666802052ee45dcd9a2950d55ecf0234a3dcf67e83cfa0bfb1285eb54e6292d8075c9e1b459e48556f416898557c9c864fc5de459feb53e33dd1a6860a2d1a836ab5ff6efaee123b3715a7137787ee4345efbce38074e262f363a8ff400345c8539d44a7286c7291246810bce063f0877db6585842380b530a4aaef6e36779a95fed220cef6c1fff2fdd5031f83987dc3282d432f322852cc9dc6d00c59d5ed83b386ff97c521e528e59f2df932467ac02d17f8818c2de26d69725f42cecaf186fab7b6e10b1ebd9a9a12ed83cd382d9a6f9a9bed2736cb0ec0260057f5ec704d2e1a64caad59e02ff2022174b23564cb0942e6769b12e0ae4d65dc4c5e6b6ceaf2667e085909c93a9768b7bfdac612801c0bc3848bad51e2367f788cbd1c5091ce0e9c567528c72003712e91247d87f1ff60d3865fc687a35886822079392f8d151b89e09469bef98e59139c460a53805a93245148cbb9a6a010dadc87e9b1a0e0a89e87e433ff1c0ad4b125760858c8badff4d82cbd31cf88f3e2e16a4e960e1e0b5825fc0f2b21d660cf60069d43fb6a8a96c44fa922164f02c9cd5ebb6fad848871224d157777b5a70dc6deb988506bd03aa4ce2200e9ce23641221784250c22d2c8635a3512f45d433cf66e158eb261f48a23d54f5ef4358df3487da471eb5775bdba565ee170be126b2300d0dad050212606f2d77a63fa2ab430e62670e852b89944e611509415bee36bf0961c8918bd8b0eb8af45b1a9d0420c7101a9c5f4a63efb9cc8de7897b5e2b02cb5885ad8d0d8ac7754ba8d4e9d37175e614e3f3a6a7b122bbc6dd9ce78f1b9a4e940a1160bb85650d8932fe1a82d0525630ba017be5129625a45c3cae66c7cdaa33ee704791db81ef2e11a2f528974fa388cd929c934dbdb21425e6117839ab33b2926b036457db3a43083c3ec17231aed4ee5b607a45a5735c9470c03a424b43efcea953c078717344aeb1449c0dfa3a3ec224b542c16cf735466bdaf26b522aef1db547b14f07ebd4f5da34426a46007757be47ed3f643c47f2c4467762cd049d6f4cf8a78d04f8318bdedcee80871e91c0330499d88254555c456d9bde8a892394267eac15c230cf7e7ba19ebc01b1905c80476de3cea8258f6d0820d159f4aa8a37fb378b2685da4e0e89d253187219869f1157bbe4a8a43eabf65e86a6d9b21e25d91c43c3036914427833ed87073886719069148e2e47219bb5da5d9664d64dc5c4ff71c0e808dadbb53a23e41e3c02fd0c9e0704490f3283d1864d15d795882e6522f31445556cab6832f273dac0c7aef4e3f8c09a34d1624fdb087d852f2e827fb2c3105f1afda54b9dc12cfde3cf7747daa5ac70904e82636a13155303f9a1198d6e7f9dc7be394ebc5db9e8380e290e6cae5f320caa56aa94490789fce2e2540b3de8865396f58e14d61d3cb122f7bd1af5a27c6fe733eba3cc39106efc906ea967fb833e2480aa80bd56ccd9e5c25304e2b8135f1453af70059e599cb67bc8eaaa38c39768e74d3da8aba0135f0192d7ddf0149ce62f353b0360251f1f88b272c6e85b4ee4e0563a6de80de83749af6e6aa4d80cab7031aff3f7e8d0c9114940549f828a62be9fd6a16db001369728b4b93d4ecf91563ae03def3ca4e9900a97657c4ff1e41c5742fb3329ba882ed61645aedb22f2543b83cd4007e5d228697a48064acc32ece41f2d5ead3f31a9689249e8b4bb57ac0b136b6c60ec531708235b94db823344aafbb9b79e21959635664b2193c3add0b28767906b7ba4118e6548e9a23b49e9181dc6f7dc7857425c9ab1b1451bc4572fd060190d0b5a76b8368b68e72a212bd0f89d0778d293b1d32f155f30c9aafe7215d2e746ea8f2c73a30bcd8c093a489519b60616b15afe69074ee77fb65caf5faf0aad49106057a91fdcd622a07ac21eb5c221f2e65323228af41b3eb894517c34c4f60ba20fb6f6c4309a7357884c0eeeb0a4874550107f2d0ffdc412f86bdf712f96183b3932cfb4da3f179cde1a288df9af09c243fae8c67b0d208d9cdb7adde8d5e548e0624b19da4818ef656b88280a", 0x1000}, 0x10000005c) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000c80)={0x8, "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", 0x1000}, 0x12d9) ioctl$PPPIOCGUNIT(0xffffffffffffffff, 0x80047456, 0x0) r4 = getpid() sched_setattr(r4, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$P9_RLCREATE(r3, 0x0, 0xffffffffffffff43) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) write(r6, &(0x7f0000000340), 0x4139569a) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000200)={0x5, &(0x7f00000001c0)=[{0x0, 0x9, 0xf7, 0x7fffffff}, {0x1ff, 0x3, 0x0, 0x1}, {0x1, 0x6, 0xe, 0x5}, {0x8, 0x0, 0x7}, {0x7, 0x0, 0x5, 0xfffffffa}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) fadvise64(r3, 0x0, 0x92c7, 0x4) bind$alg(r2, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58) r7 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) splice(r0, 0x0, r7, 0x0, 0x80000001, 0x0) 22:44:44 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r1, &(0x7f00000005c0)=ANY=[], 0xfffffcaa) r2 = socket$alg(0x26, 0x5, 0x0) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000000580)={0x8, "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", 0x1000}, 0x10000005c) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000c80)={0x8, "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", 0x1000}, 0x12d9) ioctl$PPPIOCGUNIT(0xffffffffffffffff, 0x80047456, 0x0) r4 = getpid() sched_setattr(r4, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$P9_RLCREATE(r3, 0x0, 0xffffffffffffff43) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) write(r6, &(0x7f0000000340), 0x4139569a) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000200)={0x5, &(0x7f00000001c0)=[{0x0, 0x9, 0xf7, 0x7fffffff}, {0x1ff, 0x3, 0x0, 0x1}, {0x1, 0x6, 0xe, 0x5}, {0x8, 0x0, 0x7}, {0x7, 0x0, 0x5, 0xfffffffa}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) fadvise64(r3, 0x0, 0x92c7, 0x4) bind$alg(r2, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58) r7 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) splice(r0, 0x0, r7, 0x0, 0x80000001, 0x0) 22:44:44 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 22:44:44 executing program 0: socket$inet(0x2, 0x3, 0x8) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f00000002c0)=0x81) 22:44:44 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 22:44:44 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) read(r0, &(0x7f0000000080)=""/93, 0x5d) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xbf9d, 0x0, 0x0, 0x800e0053e) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, 0x0, 0x0) shutdown(r0, 0x0) r2 = socket$inet6_tcp(0x1c, 0x1, 0x0) r3 = dup2(r2, r2) poll(&(0x7f0000000040)=[{r3, 0xc0}], 0x1, 0xbc) shutdown(r1, 0x0) 22:44:44 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 22:44:45 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 22:44:45 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd"], 0x21) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) 22:44:45 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) 22:44:45 executing program 0: dup(0xffffffffffffffff) shutdown(0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xccf3, 0x0, 0x0, 0x800e0067e) shutdown(r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000024c0)=""/8, 0x8}], 0x7}, 0x40002) shutdown(r1, 0x0) 22:44:45 executing program 1: 22:44:45 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 22:44:45 executing program 5: symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000040)='./file0\x00') fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) socket$packet(0x11, 0x0, 0x300) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) pipe(0x0) socket$packet(0x11, 0x0, 0x300) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) pipe(0x0) socket$packet(0x11, 0x0, 0x300) 22:44:45 executing program 3: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 22:44:45 executing program 5: symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000040)='./file0\x00') fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) socket$packet(0x11, 0x0, 0x300) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) pipe(0x0) socket$packet(0x11, 0x0, 0x300) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) pipe(0x0) socket$packet(0x11, 0x0, 0x300) 22:44:45 executing program 3: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 22:44:46 executing program 1: symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000040)='./file0\x00') fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) socket$packet(0x11, 0x0, 0x300) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) pipe(0x0) socket$packet(0x11, 0x0, 0x300) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) pipe(0x0) socket$packet(0x11, 0x0, 0x300) 22:44:46 executing program 5: symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000040)='./file0\x00') fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) socket$packet(0x11, 0x0, 0x300) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) pipe(0x0) socket$packet(0x11, 0x0, 0x300) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) pipe(0x0) socket$packet(0x11, 0x0, 0x300) 22:44:46 executing program 3: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 22:44:46 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd"], 0x21) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) 22:44:46 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) 22:44:46 executing program 0: 22:44:46 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 22:44:46 executing program 1: symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000040)='./file0\x00') fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) socket$packet(0x11, 0x0, 0x300) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) pipe(0x0) socket$packet(0x11, 0x0, 0x300) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) pipe(0x0) socket$packet(0x11, 0x0, 0x300) 22:44:46 executing program 5: symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000040)='./file0\x00') fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) socket$packet(0x11, 0x0, 0x300) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) pipe(0x0) socket$packet(0x11, 0x0, 0x300) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) pipe(0x0) socket$packet(0x11, 0x0, 0x300) 22:44:46 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 22:44:46 executing program 0: 22:44:46 executing program 1: symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000040)='./file0\x00') fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) socket$packet(0x11, 0x0, 0x300) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) pipe(0x0) socket$packet(0x11, 0x0, 0x300) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) pipe(0x0) socket$packet(0x11, 0x0, 0x300) 22:44:46 executing program 5: symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000040)='./file0\x00') fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) socket$packet(0x11, 0x0, 0x300) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) pipe(0x0) socket$packet(0x11, 0x0, 0x300) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) pipe(0x0) [ 347.360121] net_ratelimit: 20 callbacks suppressed [ 347.360126] protocol 88fb is buggy, dev hsr_slave_0 [ 347.370272] protocol 88fb is buggy, dev hsr_slave_1 22:44:46 executing program 0: 22:44:46 executing program 1: symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000040)='./file0\x00') fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) socket$packet(0x11, 0x0, 0x300) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) pipe(0x0) socket$packet(0x11, 0x0, 0x300) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) pipe(0x0) [ 347.690154] protocol 88fb is buggy, dev hsr_slave_0 [ 347.695473] protocol 88fb is buggy, dev hsr_slave_1 [ 347.840131] protocol 88fb is buggy, dev hsr_slave_0 [ 347.845306] protocol 88fb is buggy, dev hsr_slave_1 22:44:47 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 22:44:47 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r3 = syz_open_pts(r1, 0x4000000000000002) r4 = dup3(r3, r0, 0x0) ioctl$TCXONC(r4, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r4, 0x540a, 0x1) 22:44:47 executing program 5: symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000040)='./file0\x00') fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) socket$packet(0x11, 0x0, 0x300) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) pipe(0x0) socket$packet(0x11, 0x0, 0x300) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) 22:44:47 executing program 0: 22:44:47 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(0xffffffffffffffff, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) 22:44:47 executing program 1: symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000040)='./file0\x00') fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) socket$packet(0x11, 0x0, 0x300) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) pipe(0x0) socket$packet(0x11, 0x0, 0x300) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) 22:44:47 executing program 0: 22:44:47 executing program 5: symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000040)='./file0\x00') fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) socket$packet(0x11, 0x0, 0x300) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) pipe(0x0) socket$packet(0x11, 0x0, 0x300) 22:44:47 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 22:44:47 executing program 1: symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000040)='./file0\x00') fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) socket$packet(0x11, 0x0, 0x300) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) pipe(0x0) socket$packet(0x11, 0x0, 0x300) 22:44:47 executing program 0: 22:44:47 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(0xffffffffffffffff, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) 22:44:47 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 348.240168] protocol 88fb is buggy, dev hsr_slave_0 [ 348.245321] protocol 88fb is buggy, dev hsr_slave_1 [ 348.640227] protocol 88fb is buggy, dev hsr_slave_0 [ 348.645360] protocol 88fb is buggy, dev hsr_slave_1 22:44:48 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r3 = syz_open_pts(r1, 0x4000000000000002) r4 = dup3(r3, r0, 0x0) ioctl$TCXONC(r4, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r4, 0x540a, 0x1) 22:44:48 executing program 5: symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000040)='./file0\x00') fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) socket$packet(0x11, 0x0, 0x300) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) pipe(0x0) 22:44:48 executing program 0: 22:44:48 executing program 1: symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000040)='./file0\x00') fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) socket$packet(0x11, 0x0, 0x300) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) pipe(0x0) 22:44:48 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(0xffffffffffffffff, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) 22:44:48 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 22:44:48 executing program 5: symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000040)='./file0\x00') fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) socket$packet(0x11, 0x0, 0x300) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) 22:44:48 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, 0x0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x1) 22:44:48 executing program 0: 22:44:48 executing program 1: symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000040)='./file0\x00') fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) socket$packet(0x11, 0x0, 0x300) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) 22:44:48 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 22:44:48 executing program 0: 22:44:48 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r3 = syz_open_pts(r1, 0x4000000000000002) r4 = dup3(r3, r0, 0x0) ioctl$TCXONC(r4, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r4, 0x540a, 0x1) 22:44:48 executing program 0: 22:44:48 executing program 1: symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000040)='./file0\x00') fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) socket$packet(0x11, 0x0, 0x300) 22:44:48 executing program 5: symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000040)='./file0\x00') fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) socket$packet(0x11, 0x0, 0x300) 22:44:48 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, 0x0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x1) 22:44:48 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 22:44:49 executing program 0: 22:44:49 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 22:44:49 executing program 0: 22:44:49 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, 0x0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x1) 22:44:49 executing program 1: symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000040)='./file0\x00') fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) 22:44:49 executing program 5: symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000040)='./file0\x00') fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) 22:44:49 executing program 0: 22:44:49 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 22:44:49 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x1) 22:44:49 executing program 1: symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000040)='./file0\x00') fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) 22:44:49 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) 22:44:49 executing program 5: symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000040)='./file0\x00') fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) 22:44:49 executing program 0: 22:44:49 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 22:44:49 executing program 1: symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000040)='./file0\x00') fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 22:44:50 executing program 5: symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000040)='./file0\x00') fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 22:44:50 executing program 0: 22:44:50 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 22:44:50 executing program 5: symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000040)='./file0\x00') 22:44:50 executing program 0: 22:44:50 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x1) 22:44:50 executing program 1: symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000040)='./file0\x00') 22:44:50 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) 22:44:50 executing program 0: 22:44:50 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 22:44:50 executing program 5: symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) unlink(&(0x7f0000000040)='./file0\x00') 22:44:50 executing program 0: 22:44:50 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 22:44:50 executing program 5: symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) unlink(&(0x7f0000000040)='./file0\x00') 22:44:50 executing program 0: 22:44:50 executing program 1: symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 22:44:50 executing program 0: 22:44:51 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 22:44:51 executing program 5: symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') unlink(&(0x7f0000000040)='./file0\x00') 22:44:51 executing program 0: 22:44:51 executing program 1: symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) 22:44:51 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x1) 22:44:51 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) [ 352.400153] net_ratelimit: 20 callbacks suppressed [ 352.400159] protocol 88fb is buggy, dev hsr_slave_0 [ 352.410344] protocol 88fb is buggy, dev hsr_slave_1 22:44:51 executing program 0: 22:44:51 executing program 5: unlink(&(0x7f0000000040)='./file0\x00') 22:44:51 executing program 1: symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 22:44:51 executing program 3: 22:44:51 executing program 0: mkdir(&(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/', 0x0) r0 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0x1c, 0x1, 0x0) r2 = dup2(r1, r1) poll(&(0x7f0000000200)=[{r1, 0x10a}], 0x1, 0x0) poll(&(0x7f0000000040)=[{r2, 0xc0}, {}], 0x2, 0xbc) socket$inet6_tcp(0x1c, 0x1, 0x0) poll(0x0, 0x0, 0x0) poll(&(0x7f0000000040), 0x0, 0xbc) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x9b7f75e08bb5a579) mkdirat(r0, &(0x7f0000000000)='./file1\x00', 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) poll(&(0x7f0000000000)=[{r3, 0xfffffffffffffffd}], 0x1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0xcfb3abb5, 0x0, 0x0, 0x800e00a4f) poll(&(0x7f00000000c0)=[{}, {}], 0x7, 0x1ff) shutdown(r4, 0x0) unlinkat(r0, &(0x7f0000000200)='./file2\x00', 0x0) 22:44:51 executing program 5: unlink(&(0x7f0000000040)='./file0\x00') 22:44:51 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r1, &(0x7f00000005c0)=ANY=[], 0xfffffcaa) r2 = socket$alg(0x26, 0x5, 0x0) r3 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCGUNIT(0xffffffffffffffff, 0x80047456, 0x0) r4 = getpid() sched_setattr(r4, &(0x7f0000000040)={0x30}, 0x0) write$P9_RLCREATE(r3, 0x0, 0xffffffffffffff43) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x4139569a) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000200)={0x3, &(0x7f00000001c0)=[{0x7, 0x9, 0xf7, 0x7fffffff}, {0x1ff, 0x3, 0x0, 0x1}, {0x1, 0x6, 0xe, 0x5}]}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x92c7, 0x0) bind$alg(r2, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58) r6 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) splice(r0, 0x0, r6, 0x0, 0x80000001, 0x0) 22:44:51 executing program 1: symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') 22:44:51 executing program 5: unlink(&(0x7f0000000040)='./file0\x00') 22:44:51 executing program 5: symlink(0x0, &(0x7f00000002c0)='./file0\x00') unlink(&(0x7f0000000040)='./file0\x00') [ 352.800179] protocol 88fb is buggy, dev hsr_slave_0 [ 352.805384] protocol 88fb is buggy, dev hsr_slave_1 [ 353.200115] protocol 88fb is buggy, dev hsr_slave_0 [ 353.205441] protocol 88fb is buggy, dev hsr_slave_1 22:44:52 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x0) 22:44:52 executing program 1: symlink(0x0, &(0x7f00000002c0)='./file0\x00') 22:44:52 executing program 5: symlink(0x0, &(0x7f00000002c0)='./file0\x00') unlink(&(0x7f0000000040)='./file0\x00') 22:44:52 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(0xffffffffffffffff, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) 22:44:52 executing program 1: symlink(0x0, &(0x7f00000002c0)='./file0\x00') 22:44:52 executing program 5: symlink(0x0, &(0x7f00000002c0)='./file0\x00') unlink(&(0x7f0000000040)='./file0\x00') 22:44:52 executing program 0: perf_event_open(&(0x7f0000940000)={0x2, 0x5e, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000140)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, @tcp={{0x0, 0x4e20, 0x42424242, 0x41424344, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, {[@exp_smc={0xfe, 0x67}, @fastopen={0x22, 0x2}, @fastopen={0x22, 0xb, "a1737821de2e430154"}, @mptcp=@syn={0x1e, 0xc}, @exp_smc={0xfe, 0x6}, @md5sig={0x13, 0xfffffffffffffd47, "a1b22f0c6a126e8682a3b948d3ffba4d"}, @sack={0x5, 0xfe3d}]}}}}}}}, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) io_setup(0x0, 0x0) syz_open_procfs(0x0, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) 22:44:52 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(0xffffffffffffffff, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) 22:44:52 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)="9c", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000007ac0)={0x0, 0x0, &(0x7f0000007a40)=[{&(0x7f0000007700)="93", 0x1}], 0x1}, 0x0) close(r0) 22:44:52 executing program 1: symlink(0x0, &(0x7f00000002c0)='./file0\x00') 22:44:52 executing program 5: symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0) unlink(&(0x7f0000000040)='./file0\x00') 22:44:52 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(0xffffffffffffffff, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) [ 353.600123] protocol 88fb is buggy, dev hsr_slave_0 [ 353.605432] protocol 88fb is buggy, dev hsr_slave_1 [ 353.920170] protocol 88fb is buggy, dev hsr_slave_0 [ 353.925404] protocol 88fb is buggy, dev hsr_slave_1 22:44:53 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x0) 22:44:53 executing program 5: symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0) unlink(&(0x7f0000000040)='./file0\x00') 22:44:53 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)="9c", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000007ac0)={0x0, 0x0, &(0x7f0000007a40)=[{&(0x7f0000007700)="93", 0x1}], 0x1}, 0x0) close(r0) 22:44:53 executing program 1: symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0) 22:44:53 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="edff00f23201ce646ba1a34578d3abdf1e15566701800100000000006722b4ec23b5d1d5"], 0x1}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) fstat(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getuid() socket(0x0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) setgid(0x0) setregid(0x0, 0x0) getegid() socket(0x0, 0x0, 0x0) 22:44:53 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x0) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) 22:44:53 executing program 5: symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0) unlink(&(0x7f0000000040)='./file0\x00') 22:44:53 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)="9c", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000007ac0)={0x0, 0x0, &(0x7f0000007a40)=[{&(0x7f0000007700)="93", 0x1}], 0x1}, 0x0) close(r0) 22:44:53 executing program 1: symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0) 22:44:53 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x0) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) 22:44:53 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)="9c", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000007ac0)={0x0, 0x0, &(0x7f0000007a40)=[{&(0x7f0000007700)="93", 0x1}], 0x1}, 0x0) close(r0) 22:44:53 executing program 5: symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') unlink(0x0) 22:44:54 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x0) 22:44:54 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x0) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) 22:44:54 executing program 1: symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0) 22:44:54 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)="9c", 0x1}], 0x1}, 0x0) close(r0) 22:44:54 executing program 5: symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') unlink(0x0) 22:44:54 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x1) 22:44:54 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)="9c", 0x1}], 0x1}, 0x0) close(r0) 22:44:54 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_open_pts(r1, 0x4000000000000002) r4 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$TCXONC(r4, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r4, 0x540a, 0x1) 22:44:54 executing program 5: symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') unlink(0x0) 22:44:54 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)="9c", 0x1}], 0x1}, 0x0) close(r0) 22:44:54 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_open_pts(r1, 0x4000000000000002) r4 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$TCXONC(r4, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r4, 0x540a, 0x1) 22:44:54 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)="9c", 0x1}], 0x1}, 0x0) close(r0) 22:44:55 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg(r0, &(0x7f0000007ac0)={0x0, 0x0, &(0x7f0000007a40)=[{&(0x7f0000007700)="93", 0x1}], 0x1}, 0x0) close(r0) 22:44:55 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 22:44:55 executing program 1: symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000040)='./file0\x00') fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) socket$packet(0x11, 0x0, 0x300) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) pipe(0x0) socket$packet(0x11, 0x0, 0x300) 22:44:55 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_open_pts(r1, 0x4000000000000002) r4 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$TCXONC(r4, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r4, 0x540a, 0x1) 22:44:55 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 22:44:55 executing program 2: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 22:44:55 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg(r0, &(0x7f0000007ac0)={0x0, 0x0, &(0x7f0000007a40)=[{&(0x7f0000007700)="93", 0x1}], 0x1}, 0x0) close(r0) 22:44:55 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCMSET(r0, 0x5418, 0x0) 22:44:55 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, 0xffffffffffffffff, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) 22:44:55 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, &(0x7f00000002c0)) 22:44:55 executing program 2: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 22:44:55 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg(r0, &(0x7f0000007ac0)={0x0, 0x0, &(0x7f0000007a40)=[{&(0x7f0000007700)="93", 0x1}], 0x1}, 0x0) close(r0) 22:44:55 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f00000002c0)) 22:44:55 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, 0xffffffffffffffff, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) 22:44:55 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCMSET(r0, 0x5418, 0x0) 22:44:55 executing program 3: sendmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)="9c", 0x1}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000007ac0)={0x0, 0x0, &(0x7f0000007a40)=[{&(0x7f0000007700)="93", 0x1}], 0x1}, 0x0) close(0xffffffffffffffff) 22:44:55 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{}, {0x0, 0x20000, 0x0, 0x5}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:44:55 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f00000002c0)) 22:44:55 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f00000002c0)) 22:44:55 executing program 3: sendmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)="9c", 0x1}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000007ac0)={0x0, 0x0, &(0x7f0000007a40)=[{&(0x7f0000007700)="93", 0x1}], 0x1}, 0x0) close(0xffffffffffffffff) 22:44:55 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f00000002c0)) 22:44:55 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{}, {0x0, 0x20000, 0x0, 0x5}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:44:55 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, 0xffffffffffffffff, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) [ 356.516449] *** Guest State *** [ 356.528345] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 22:44:55 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = open$dir(0x0, 0x0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') accept4$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) [ 356.581037] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 22:44:55 executing program 3: sendmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)="9c", 0x1}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000007ac0)={0x0, 0x0, &(0x7f0000007a40)=[{&(0x7f0000007700)="93", 0x1}], 0x1}, 0x0) close(0xffffffffffffffff) [ 356.635251] CR3 = 0x00000000fffbc000 [ 356.644099] RSP = 0x00000000000000bf RIP = 0x00000000000000c2 [ 356.682209] RFLAGS=0x00010006 DR7 = 0x0000000000000400 [ 356.702709] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 356.716534] *** Guest State *** 22:44:55 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) 22:44:55 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r2, 0x0, 0xedc0) [ 356.727109] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 22:44:56 executing program 3: r0 = socket$kcm(0x29, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)="9c", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000007ac0)={0x0, 0x0, &(0x7f0000007a40)=[{&(0x7f0000007700)="93", 0x1}], 0x1}, 0x0) close(r0) [ 356.759333] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 356.789134] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 356.805957] DS: sel=0x0000, attr=0x10000, limit=0x00020000, base=0x0000000000000000 [ 356.836738] CR3 = 0x00000000fffbc000 [ 356.856308] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 356.864154] RSP = 0x00000000000000bf RIP = 0x00000000000000c2 [ 356.873504] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 356.889963] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 356.899199] RFLAGS=0x00010006 DR7 = 0x0000000000000400 [ 356.908919] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 356.914421] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 356.918050] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 356.932182] GDTR: limit=0x00000000, base=0x0000000000000000 [ 356.932950] DS: sel=0x0000, attr=0x10000, limit=0x00020000, base=0x0000000000000000 [ 356.944357] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 356.949813] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 356.957007] IDTR: limit=0x00000000, base=0x0000000000000000 [ 356.967146] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 356.979081] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 356.982772] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 356.990742] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 356.999046] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 357.009226] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 357.018076] GDTR: limit=0x00000000, base=0x0000000000000000 [ 357.031392] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 357.038595] Interruptibility = 00000000 ActivityState = 00000000 [ 357.046666] *** Host State *** [ 357.048041] IDTR: limit=0x00000000, base=0x0000000000000000 [ 357.049989] RIP = 0xffffffff8117a490 RSP = 0xffff8880550ef998 [ 357.064121] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 357.064129] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 357.064137] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 357.064143] Interruptibility = 00000000 ActivityState = 00000000 [ 357.064146] *** Host State *** [ 357.064154] RIP = 0xffffffff8117a490 RSP = 0xffff888053c67998 [ 357.064167] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 357.064175] FSBase=00007f38654bf700 GSBase=ffff8880aec00000 TRBase=fffffe0000003000 [ 357.064182] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 357.064191] CR0=0000000080050033 CR3=000000009e992000 CR4=00000000001426f0 [ 357.077464] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 357.079218] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff868018e0 [ 357.086992] FSBase=00007fe81c83e700 GSBase=ffff8880aed00000 TRBase=fffffe0000034000 [ 357.093206] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 357.100790] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 357.102708] *** Control State *** [ 357.109071] CR0=0000000080050033 CR3=0000000053cd5000 CR4=00000000001426e0 [ 357.119083] PinBased=0000003f CPUBased=b699edfa SecondaryExec=000000e2 [ 357.129204] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff868018e0 [ 357.133432] EntryControls=0000d1ff ExitControls=002fefff [ 357.138611] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 357.145609] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 357.157527] *** Control State *** [ 357.159885] VMEntry: intr_info=8000030d errcode=00000000 ilen=00000000 [ 357.165758] PinBased=0000003f CPUBased=b699edfa SecondaryExec=000000e2 [ 357.170203] VMExit: intr_info=00000000 errcode=00000000 ilen=00000004 [ 357.180363] EntryControls=0000d1ff ExitControls=002fefff [ 357.183385] reason=80000021 qualification=0000000000000000 [ 357.189789] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 357.189795] VMEntry: intr_info=8000030d errcode=00000000 ilen=00000000 [ 357.189799] VMExit: intr_info=00000000 errcode=00000000 ilen=00000004 [ 357.189810] reason=80000021 qualification=0000000000000000 [ 357.195781] IDTVectoring: info=00000000 errcode=00000000 [ 357.202171] IDTVectoring: info=00000000 errcode=00000000 [ 357.214530] TSC Offset = 0xffffff3da7fe5b6c 22:44:56 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') accept4$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) 22:44:56 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(0x0, 0x40002, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') accept4$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) 22:44:56 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') accept4$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) 22:44:56 executing program 3: r0 = socket$kcm(0x29, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)="9c", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000007ac0)={0x0, 0x0, &(0x7f0000007a40)=[{&(0x7f0000007700)="93", 0x1}], 0x1}, 0x0) close(r0) [ 357.219652] TSC Offset = 0xffffff3dc33e5534 [ 357.226853] EPT pointer = 0x00000000a0a8b01e [ 357.233341] EPT pointer = 0x000000008069201e [ 357.243379] Virtual processor ID = 0x0002 [ 357.258475] Virtual processor ID = 0x0001 22:44:56 executing program 3: r0 = socket$kcm(0x29, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)="9c", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000007ac0)={0x0, 0x0, &(0x7f0000007a40)=[{&(0x7f0000007700)="93", 0x1}], 0x1}, 0x0) close(r0) 22:44:56 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') accept4$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) [ 357.400583] audit: type=1804 audit(1575758696.583:283): pid=16074 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir103906316/syzkaller.9k5RKz/178/file0" dev="sda1" ino=17578 res=1 22:44:56 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') accept4$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) 22:44:56 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x20, 0x0, 0x0, 0x5a1b1340cf40f849, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') accept4$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) 22:44:56 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)="9c", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000007ac0)={0x0, 0x0, &(0x7f0000007a40)=[{&(0x7f0000007700)="93", 0x1}], 0x1}, 0x0) close(r0) 22:44:56 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) [ 357.581659] audit: type=1804 audit(1575758696.603:284): pid=16074 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.1" name="/root/syzkaller-testdir103906316/syzkaller.9k5RKz/178/file0" dev="sda1" ino=17578 res=1 22:44:56 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r0, 0x1000008912, &(0x7f00000001c0)) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r2, 0x0, 0xedc0) 22:44:57 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)="9c", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000007ac0)={0x0, 0x0, &(0x7f0000007a40)=[{&(0x7f0000007700)="93", 0x1}], 0x1}, 0x0) close(r0) [ 357.760125] net_ratelimit: 20 callbacks suppressed [ 357.760131] protocol 88fb is buggy, dev hsr_slave_0 [ 357.770456] protocol 88fb is buggy, dev hsr_slave_1 [ 357.771840] audit: type=1804 audit(1575758696.633:285): pid=16076 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir550511319/syzkaller.U6oSbp/382/file0" dev="sda1" ino=17579 res=1 22:44:57 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') accept4$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) 22:44:57 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)="9c", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000007ac0)={0x0, 0x0, &(0x7f0000007a40)=[{&(0x7f0000007700)="93", 0x1}], 0x1}, 0x0) close(r0) 22:44:57 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r0, 0x1000008912, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r2, 0x0, 0xedc0) [ 357.972799] audit: type=1804 audit(1575758696.643:286): pid=16076 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.2" name="/root/syzkaller-testdir550511319/syzkaller.U6oSbp/382/file0" dev="sda1" ino=17579 res=1 22:44:57 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 22:44:57 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x0) sendmsg(r0, &(0x7f0000007ac0)={0x0, 0x0, &(0x7f0000007a40)=[{&(0x7f0000007700)="93", 0x1}], 0x1}, 0x0) close(r0) [ 358.080212] protocol 88fb is buggy, dev hsr_slave_0 [ 358.085767] protocol 88fb is buggy, dev hsr_slave_1 [ 358.117021] audit: type=1804 audit(1575758696.863:287): pid=16090 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir103906316/syzkaller.9k5RKz/179/file0" dev="sda1" ino=17558 res=1 22:44:57 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x0) sendmsg(r0, &(0x7f0000007ac0)={0x0, 0x0, &(0x7f0000007a40)=[{&(0x7f0000007700)="93", 0x1}], 0x1}, 0x0) close(r0) 22:44:57 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x20, 0x0, 0x0, 0x5a1b1340cf40f849, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') accept4$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(0xffffffffffffffff, r0, 0x0, 0x7fffffff) 22:44:57 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x53adc69e) ioctl$KVM_ENABLE_CAP_CPU(r4, 0x4008ae89, &(0x7f00000000c0)={0x7a, 0x0, [0x4b564d02, 0x3]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 358.239874] audit: type=1804 audit(1575758696.873:288): pid=16090 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.1" name="/root/syzkaller-testdir103906316/syzkaller.9k5RKz/179/file0" dev="sda1" ino=17558 res=1 [ 358.266873] protocol 88fb is buggy, dev hsr_slave_0 [ 358.266923] protocol 88fb is buggy, dev hsr_slave_1 22:44:57 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x0) sendmsg(r0, &(0x7f0000007ac0)={0x0, 0x0, &(0x7f0000007a40)=[{&(0x7f0000007700)="93", 0x1}], 0x1}, 0x0) close(r0) [ 358.393223] audit: type=1804 audit(1575758697.033:289): pid=16096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir958879901/syzkaller.zsdlqm/425/file0" dev="sda1" ino=17580 res=1 [ 358.434775] audit: type=1804 audit(1575758697.043:290): pid=16096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.0" name="/root/syzkaller-testdir958879901/syzkaller.zsdlqm/425/file0" dev="sda1" ino=17580 res=1 22:44:57 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) 22:44:57 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) sendmsg(r0, &(0x7f0000007ac0)={0x0, 0x0, &(0x7f0000007a40)=[{&(0x7f0000007700)="93", 0x1}], 0x1}, 0x0) close(r0) 22:44:57 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x20, 0x0, 0x0, 0x5a1b1340cf40f849, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') accept4$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffff) [ 358.640162] protocol 88fb is buggy, dev hsr_slave_0 [ 358.645504] protocol 88fb is buggy, dev hsr_slave_1 [ 358.696427] audit: type=1804 audit(1575758697.353:291): pid=16113 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir550511319/syzkaller.U6oSbp/383/file0" dev="sda1" ino=17412 res=1 22:44:57 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') accept4$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) 22:44:57 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r0, 0x0, &(0x7f00000001c0)="0805b5055e0bcfe8474071") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r2, 0x0, 0xedc0) 22:44:57 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r0, 0x0, &(0x7f00000001c0)="0805b5055e0bcfe8474071") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r2, 0x0, 0xedc0) 22:44:57 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) sendmsg(r0, &(0x7f0000007ac0)={0x0, 0x0, &(0x7f0000007a40)=[{&(0x7f0000007700)="93", 0x1}], 0x1}, 0x0) close(r0) 22:44:58 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r2, 0x0, 0xedc0) [ 358.752906] audit: type=1804 audit(1575758697.373:292): pid=16113 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.2" name="/root/syzkaller-testdir550511319/syzkaller.U6oSbp/383/file0" dev="sda1" ino=17412 res=1 22:44:58 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) sendmsg(r0, &(0x7f0000007ac0)={0x0, 0x0, &(0x7f0000007a40)=[{&(0x7f0000007700)="93", 0x1}], 0x1}, 0x0) close(r0) 22:44:58 executing program 0: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=@newlink={0x28, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKMODE={0x8}]}, 0x28}}, 0x0) 22:44:58 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000340)}, 0x0) sendmsg(r0, &(0x7f0000007ac0)={0x0, 0x0, &(0x7f0000007a40)=[{&(0x7f0000007700)="93", 0x1}], 0x1}, 0x0) close(r0) 22:44:58 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socketpair$unix(0x1, 0x1, 0x0, 0x0) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x53adc69e) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x7a, 0x0, [0x4b564d02, 0x3]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 359.040187] protocol 88fb is buggy, dev hsr_slave_0 [ 359.046765] protocol 88fb is buggy, dev hsr_slave_1 22:44:58 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socketpair$unix(0x1, 0x1, 0x0, 0x0) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x53adc69e) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x7a, 0x0, [0x4b564d02, 0x3]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:44:58 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000340)}, 0x0) sendmsg(r0, &(0x7f0000007ac0)={0x0, 0x0, &(0x7f0000007a40)=[{&(0x7f0000007700)="93", 0x1}], 0x1}, 0x0) close(r0) 22:44:58 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x20, 0x0, 0x0, 0x5a1b1340cf40f849, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)) socket$inet_udplite(0x2, 0x2, 0x88) accept4$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) 22:44:58 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x53adc69e) ioctl$KVM_ENABLE_CAP_CPU(r4, 0x4008ae89, &(0x7f00000000c0)={0x7a, 0x0, [0x4b564d02, 0x3]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 22:44:58 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) 22:44:58 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x20, 0x0, 0x0, 0x5a1b1340cf40f849, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)) socket$inet_udplite(0x2, 0x2, 0x88) accept4$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) 22:44:58 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000340)}, 0x0) sendmsg(r0, &(0x7f0000007ac0)={0x0, 0x0, &(0x7f0000007a40)=[{&(0x7f0000007700)="93", 0x1}], 0x1}, 0x0) close(r0) 22:44:58 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000340)=[{0x0}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000007ac0)={0x0, 0x0, &(0x7f0000007a40)=[{&(0x7f0000007700)="93", 0x1}], 0x1}, 0x0) close(r0) 22:44:58 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x20, 0x0, 0x0, 0x5a1b1340cf40f849, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)) socket$inet_udplite(0x2, 0x2, 0x88) accept4$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) 22:44:58 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) open(0x0, 0x40002, 0x0) creat(0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, 0x0, 0xedc0) 22:44:59 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000340)=[{0x0}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000007ac0)={0x0, 0x0, &(0x7f0000007a40)=[{&(0x7f0000007700)="93", 0x1}], 0x1}, 0x0) close(r0) 22:44:59 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) open(0x0, 0x40002, 0x0) creat(0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, 0x0, 0xedc0) 22:44:59 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) open(0x0, 0x40002, 0x0) creat(0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, 0x0, 0xedc0) 22:44:59 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000340)=[{0x0}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000007ac0)={0x0, 0x0, &(0x7f0000007a40)=[{&(0x7f0000007700)="93", 0x1}], 0x1}, 0x0) close(r0) 22:44:59 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) open(0x0, 0x40002, 0x0) creat(0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, 0x0, 0xedc0) 22:44:59 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000007ac0)={0x0, 0x0, &(0x7f0000007a40)=[{&(0x7f0000007700)="93", 0x1}], 0x1}, 0x0) close(r0) 22:44:59 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) 22:44:59 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x20, 0x0, 0x0, 0x5a1b1340cf40f849, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)) socket$inet_udplite(0x2, 0x2, 0x88) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') accept4$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) 22:44:59 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000007ac0)={0x0, 0x0, &(0x7f0000007a40)=[{&(0x7f0000007700)="93", 0x1}], 0x1}, 0x0) close(r0) 22:44:59 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x20, 0x0, 0x0, 0x5a1b1340cf40f849, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)) socket$inet_udplite(0x2, 0x2, 0x88) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') accept4$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) 22:44:59 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x20, 0x0, 0x0, 0x5a1b1340cf40f849, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)) socket$inet_udplite(0x2, 0x2, 0x88) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r3, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) accept4$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) 22:44:59 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000007ac0)={0x0, 0x0, &(0x7f0000007a40)=[{&(0x7f0000007700)="93", 0x1}], 0x1}, 0x0) close(r0) 22:44:59 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) open(0x0, 0x40002, 0x0) creat(0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') socket$inet6(0xa, 0x80003, 0x6b) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, 0x0, 0xedc0) 22:44:59 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)="9c", 0x1}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000007ac0)={0x0, 0x0, &(0x7f0000007a40)=[{&(0x7f0000007700)="93", 0x1}], 0x1}, 0x0) close(r0) 22:44:59 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) open(0x0, 0x40002, 0x0) creat(0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') socket$inet6(0xa, 0x80003, 0x6b) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, 0x0, 0xedc0) 22:44:59 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)="9c", 0x1}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000007ac0)={0x0, 0x0, &(0x7f0000007a40)=[{&(0x7f0000007700)="93", 0x1}], 0x1}, 0x0) close(r0) 22:45:00 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)="9c", 0x1}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000007ac0)={0x0, 0x0, &(0x7f0000007a40)=[{&(0x7f0000007700)="93", 0x1}], 0x1}, 0x0) close(r0) 22:45:00 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x20, 0x0, 0x0, 0x5a1b1340cf40f849, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)) socket$inet_udplite(0x2, 0x2, 0x88) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r3, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) sendmsg$IPVS_CMD_DEL_DEST(r3, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000800)=ANY=[@ANYBLOB="ac010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x1ac}, 0x1, 0x0, 0x0, 0x80}, 0x28080) accept4$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) 22:45:00 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x20, 0x0, 0x0, 0x5a1b1340cf40f849, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)) socket$inet_udplite(0x2, 0x2, 0x88) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r3, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) sendmsg$IPVS_CMD_DEL_DEST(r3, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000800)=ANY=[@ANYBLOB="ac010000", @ANYRES16=0x0, @ANYBLOB="00022abd7000fbdbdf250700000008000600010400000800040006000000080006000500000050010100080002006c00000014000300e0000002000000000000000000000000080005000400000008000b00736970000800050002000000080009005f0000000c00070020000000200000000c0006006e6f6e65000000000c0007000200000013c1113eec0006006468009b74015e5150799f4544374e860ac54f4b4db189832eed85e8acf74ee2ce418e2a23a01e48a9f9e646918adcbc02f9ba7b1327f4d62955757983ec5778bd20fc476e3d97dbe181b4006f7370469f09f5e0a11151efc89e22fde01267cb81911eb409860412a9c397b738fbbe3ecf45395d38f6ccb47b1dd3ccf7c6d5a1bfab14d8e66a7341ad6c5f66dca66c55bad5c9438a74209664c4063b408bcb13af79066ef290e0f1e28c448a091c1f0a634c9feb17399020702abd5121fb8f8dcd2992003cb3e9078ef03c7c3a2d38c2f4a374226f82b998ea0030000100080009006800000008000b007369700008000600666f00000c00070034000000080000000800020000000000721fc35e6021714274178434f9edabffec00cd91f18f57a92b02f0fce2f4bb72158f9bc72080a937bfe2ba053cf4391ed8498c07c47c061d27934ab2d14d3754eb777d7f302169d4c32dbbc1931e03285d47d3811e362e9c01d62542228d08f8befca960172c8462509f0586b7af9a5a4e34bfd1a6de0bfc9ef15bf5f49e7e5e4b05f8b7ec9ec791f161942e8ccf"], 0x1ac}, 0x1, 0x0, 0x0, 0x80}, 0x28080) accept4$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) 22:45:00 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)="9c", 0x1}], 0x1}, 0x0) sendmsg(r0, 0x0, 0x0) close(r0) 22:45:00 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) open(0x0, 0x40002, 0x0) creat(0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') socket$inet6(0xa, 0x80003, 0x6b) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, 0x0, 0xedc0) 22:45:00 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) 22:45:00 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x20, 0x0, 0x0, 0x5a1b1340cf40f849, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r4, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) sendmsg$IPVS_CMD_DEL_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000800)=ANY=[@ANYBLOB="ac010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x1ac}, 0x1, 0x0, 0x0, 0x80}, 0x28080) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000000)={0x2, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @dev}, {0x2, 0x0, @rand_addr=0xfffffffe}, 0x593b9214c4d8fd1c}) accept4$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) 22:45:00 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x20, 0x0, 0x0, 0x5a1b1340cf40f849, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r4, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) sendmsg$IPVS_CMD_DEL_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000800)=ANY=[@ANYBLOB="ac010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x1ac}, 0x1, 0x0, 0x0, 0x80}, 0x28080) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000000)={0x2, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @dev}, {0x2, 0x0, @rand_addr=0xfffffffe}, 0x593b9214c4d8fd1c}) accept4$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) 22:45:00 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)="9c", 0x1}], 0x1}, 0x0) sendmsg(r0, 0x0, 0x0) close(r0) 22:45:00 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x20, 0x0, 0x0, 0x5a1b1340cf40f849, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r4, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) sendmsg$IPVS_CMD_DEL_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000800)=ANY=[@ANYBLOB="ac010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x1ac}, 0x1, 0x0, 0x0, 0x80}, 0x28080) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000000)={0x2, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @dev}, {0x2, 0x0, @rand_addr=0xfffffffe}, 0x593b9214c4d8fd1c}) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) accept4$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) 22:45:00 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)="9c", 0x1}], 0x1}, 0x0) sendmsg(r0, 0x0, 0x0) close(r0) 22:45:00 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)="9c", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000007ac0)={0x0, 0x0, 0x0}, 0x0) close(r0) 22:45:01 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)="9c", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000007ac0)={0x0, 0x0, 0x0}, 0x0) close(r0) 22:45:01 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x53adc69e) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x7a, 0x0, [0x4b564d02, 0x3]}) 22:45:01 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x20, 0x0, 0x0, 0x5a1b1340cf40f849, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r4, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) sendmsg$IPVS_CMD_DEL_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000800)=ANY=[@ANYBLOB="ac010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x1ac}, 0x1, 0x0, 0x0, 0x80}, 0x28080) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000000)={0x2, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @dev}, {0x2, 0x0, @rand_addr=0xfffffffe}, 0x593b9214c4d8fd1c}) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) accept4$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) 22:45:01 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)="9c", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000007ac0)={0x0, 0x0, 0x0}, 0x0) close(r0) 22:45:01 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)="9c", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000007ac0)={0x0, 0x0, &(0x7f0000007a40)}, 0x0) close(r0) 22:45:01 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x20, 0x0, 0x0, 0x5a1b1340cf40f849, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r4, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) sendmsg$IPVS_CMD_DEL_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000800)=ANY=[@ANYBLOB="ac010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x1ac}, 0x1, 0x0, 0x0, 0x80}, 0x28080) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000000)={0x2, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @dev}, {0x2, 0x0, @rand_addr=0xfffffffe}, 0x593b9214c4d8fd1c}) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) r5 = socket(0x10, 0x80002, 0x0) accept4$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) 22:45:01 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, 0x0, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) 22:45:01 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)="9c", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000007ac0)={0x0, 0x0, &(0x7f0000007a40)}, 0x0) close(r0) 22:45:01 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x20, 0x0, 0x0, 0x5a1b1340cf40f849, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r4, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) sendmsg$IPVS_CMD_DEL_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000800)=ANY=[@ANYBLOB="ac010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x1ac}, 0x1, 0x0, 0x0, 0x80}, 0x28080) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000000)={0x2, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @dev}, {0x2, 0x0, @rand_addr=0xfffffffe}, 0x593b9214c4d8fd1c}) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) r5 = socket(0x10, 0x80002, 0x0) accept4$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) 22:45:01 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x20, 0x0, 0x0, 0x5a1b1340cf40f849, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r4, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) sendmsg$IPVS_CMD_DEL_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000800)=ANY=[@ANYBLOB="ac010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x1ac}, 0x1, 0x0, 0x0, 0x80}, 0x28080) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000000)={0x2, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @dev}, {0x2, 0x0, @rand_addr=0xfffffffe}, 0x593b9214c4d8fd1c}) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) r5 = socket(0x10, 0x80002, 0x0) accept4$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) 22:45:01 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)="9c", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000007ac0)={0x0, 0x0, &(0x7f0000007a40)}, 0x0) close(r0) 22:45:01 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)="9c", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000007ac0)={0x0, 0x0, &(0x7f0000007a40)=[{0x0}], 0x1}, 0x0) close(r0) 22:45:01 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x20, 0x0, 0x0, 0x5a1b1340cf40f849, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r4, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) sendmsg$IPVS_CMD_DEL_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000800)=ANY=[@ANYBLOB="ac010000", @ANYRES16=0x0, @ANYBLOB="00022abd7000fbdbdf250700000008000600010400000800040006000000080006000500000050010100080002006c00000014000300e0000002000000000000000000000000080005000400000008000b00736970000800050002000000080009005f0000000c00070020000000200000000c0006006e6f6e65000000000c0007000200000013c1113eec0006006468009b74015e5150799f4544374e860ac54f4b4db189832eed85e8acf74ee2ce418e2a23a01e48a9f9e646918adcbc02f9ba7b1327f4d62955757983ec5778bd20fc476e3d97dbe181b4006f7370469f09f5e0a11151efc89e22fde01267cb81911eb409860412a9c397b738fbbe3ecf45395d38f6ccb47b1dd3ccf7c6d5a1bfab14d8e66a7341ad6c5f66dca66c55bad5c9438a74209664c4063b408bcb13af79066ef290e0f1e28c448a091c1f0a634c9feb17399020702abd5121fb8f8dcd2992003cb3e9078ef03c7c3a2d38c2f4a374226f82b998ea0030000100080009006800000008000b007369700008000600666f00000c00070034000000080000000800020000000000721fc35e6021714274178434f9edabffec00cd91f18f57a92b02f0fce2f4bb72158f9bc72080a937bfe2ba053cf4391ed8498c07c47c061d27934ab2d14d3754eb777d7f302169d4c32dbbc1931e03285d47d3811e362e9c01d62542228d08f8befca960172c8462509f0586b7af9a5a4e34bfd1a6de0bfc9ef15bf5f49e7e5e4b05f8b7ec9ec791f161942e8ccf"], 0x1ac}, 0x1, 0x0, 0x0, 0x80}, 0x28080) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000000)={0x2, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @dev}, {0x2, 0x0, @rand_addr=0xfffffffe}, 0x593b9214c4d8fd1c}) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) r5 = socket(0x10, 0x80002, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) accept4$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) [ 362.539956] kauditd_printk_skb: 30 callbacks suppressed [ 362.539967] audit: type=1804 audit(1575758701.723:323): pid=16348 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir103906316/syzkaller.9k5RKz/190/file0" dev="sda1" ino=17382 res=1 22:45:01 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)="9c", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000007ac0)={0x0, 0x0, &(0x7f0000007a40)=[{0x0}], 0x1}, 0x0) close(r0) [ 362.711654] audit: type=1804 audit(1575758701.763:324): pid=16348 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.1" name="/root/syzkaller-testdir103906316/syzkaller.9k5RKz/190/file0" dev="sda1" ino=17382 res=1 22:45:01 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x20, 0x0, 0x0, 0x5a1b1340cf40f849, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r4, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) sendmsg$IPVS_CMD_DEL_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000800)=ANY=[@ANYBLOB="ac010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x1ac}, 0x1, 0x0, 0x0, 0x80}, 0x28080) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000000)={0x2, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @dev}, {0x2, 0x0, @rand_addr=0xfffffffe}, 0x593b9214c4d8fd1c}) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) r5 = socket(0x10, 0x80002, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) accept4$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) 22:45:01 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)="9c", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000007ac0)={0x0, 0x0, &(0x7f0000007a40)=[{0x0}], 0x1}, 0x0) close(r0) [ 362.800436] net_ratelimit: 20 callbacks suppressed [ 362.800453] protocol 88fb is buggy, dev hsr_slave_0 [ 362.811054] protocol 88fb is buggy, dev hsr_slave_1 22:45:02 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)="9c", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000007ac0)={0x0, 0x0, &(0x7f0000007a40)=[{&(0x7f0000007700)}], 0x1}, 0x0) close(r0) 22:45:02 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x20, 0x0, 0x0, 0x5a1b1340cf40f849, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r4, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) sendmsg$IPVS_CMD_DEL_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000800)=ANY=[@ANYBLOB="ac010000", @ANYRES16=0x0, @ANYBLOB="00022abd7000fbdbdf250700000008000600010400000800040006000000080006000500000050010100080002006c00000014000300e0000002000000000000000000000000080005000400000008000b00736970000800050002000000080009005f0000000c00070020000000200000000c0006006e6f6e65000000000c0007000200000013c1113eec0006006468009b74015e5150799f4544374e860ac54f4b4db189832eed85e8acf74ee2ce418e2a23a01e48a9f9e646918adcbc02f9ba7b1327f4d62955757983ec5778bd20fc476e3d97dbe181b4006f7370469f09f5e0a11151efc89e22fde01267cb81911eb409860412a9c397b738fbbe3ecf45395d38f6ccb47b1dd3ccf7c6d5a1bfab14d8e66a7341ad6c5f66dca66c55bad5c9438a74209664c4063b408bcb13af79066ef290e0f1e28c448a091c1f0a634c9feb17399020702abd5121fb8f8dcd2992003cb3e9078ef03c7c3a2d38c2f4a374226f82b998ea0030000100080009006800000008000b007369700008000600666f00000c00070034000000080000000800020000000000721fc35e6021714274178434f9edabffec00cd91f18f57a92b02f0fce2f4bb72158f9bc72080a937bfe2ba053cf4391ed8498c07c47c061d27934ab2d14d3754eb777d7f302169d4c32dbbc1931e03285d47d3811e362e9c01d62542228d08f8befca960172c8462509f0586b7af9a5a4e34bfd1a6de0bfc9ef15bf5f49e7e5e4b05f8b7ec9ec791f161942e8ccf"], 0x1ac}, 0x1, 0x0, 0x0, 0x80}, 0x28080) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000000)={0x2, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @dev}, {0x2, 0x0, @rand_addr=0xfffffffe}, 0x593b9214c4d8fd1c}) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) socket(0x10, 0x80002, 0x0) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) write(r5, &(0x7f0000000140)="2442a5cec1923abe517d6d06bf624e3c30706775203c80aefa35", 0x1a) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) [ 362.952172] audit: type=1804 audit(1575758702.033:325): pid=16357 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir906020022/syzkaller.VTTICl/401/file0" dev="sda1" ino=17380 res=1 22:45:02 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, 0x0, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) 22:45:02 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)="9c", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000007ac0)={0x0, 0x0, &(0x7f0000007a40)=[{&(0x7f0000007700)}], 0x1}, 0x0) close(r0) [ 363.200590] protocol 88fb is buggy, dev hsr_slave_0 [ 363.206242] protocol 88fb is buggy, dev hsr_slave_1 [ 363.228133] audit: type=1804 audit(1575758702.043:326): pid=16357 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.5" name="/root/syzkaller-testdir906020022/syzkaller.VTTICl/401/file0" dev="sda1" ino=17380 res=1 22:45:02 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x20, 0x0, 0x0, 0x5a1b1340cf40f849, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r4, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) sendmsg$IPVS_CMD_DEL_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000800)=ANY=[@ANYBLOB="ac010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x1ac}, 0x1, 0x0, 0x0, 0x80}, 0x28080) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000000)={0x2, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @dev}, {0x2, 0x0, @rand_addr=0xfffffffe}, 0x593b9214c4d8fd1c}) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) socket(0x10, 0x80002, 0x0) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) write(r5, &(0x7f0000000140)="2442a5cec1923abe517d6d06bf624e3c30706775203c80aefa35", 0x1a) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) 22:45:02 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)="9c", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000007ac0)={0x0, 0x0, &(0x7f0000007a40)=[{&(0x7f0000007700)}], 0x1}, 0x0) close(r0) [ 363.413917] audit: type=1804 audit(1575758702.213:327): pid=16365 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir550511319/syzkaller.U6oSbp/390/file0" dev="sda1" ino=17602 res=1 22:45:02 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)="9c", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000007ac0)={0x0, 0x0, &(0x7f0000007a40)=[{&(0x7f0000007700)="93", 0x1}], 0x1}, 0x0) close(0xffffffffffffffff) 22:45:02 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x20, 0x0, 0x0, 0x5a1b1340cf40f849, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r4, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) sendmsg$IPVS_CMD_DEL_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000800)=ANY=[@ANYBLOB="ac010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x1ac}, 0x1, 0x0, 0x0, 0x80}, 0x28080) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000000)={0x2, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @dev}, {0x2, 0x0, @rand_addr=0xfffffffe}, 0x593b9214c4d8fd1c}) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) socket(0x10, 0x80002, 0x0) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) write(r5, &(0x7f0000000140)="2442a5cec1923abe517d6d06bf624e3c30706775203c80aefa35", 0x1a) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) [ 363.482037] audit: type=1804 audit(1575758702.223:328): pid=16365 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.2" name="/root/syzkaller-testdir550511319/syzkaller.U6oSbp/390/file0" dev="sda1" ino=17602 res=1 22:45:02 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x20, 0x0, 0x0, 0x5a1b1340cf40f849, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r4, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) sendmsg$IPVS_CMD_DEL_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000800)=ANY=[@ANYBLOB="ac010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x1ac}, 0x1, 0x0, 0x0, 0x80}, 0x28080) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000000)={0x2, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @dev}, {0x2, 0x0, @rand_addr=0xfffffffe}, 0x593b9214c4d8fd1c}) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) socket(0x10, 0x80002, 0x0) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) write(r5, &(0x7f0000000140)="2442a5cec1923abe517d6d06bf624e3c30706775203c80aefa35", 0x1a) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) 22:45:02 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x20, 0x0, 0x0, 0x5a1b1340cf40f849, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r4, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) sendmsg$IPVS_CMD_DEL_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000800)=ANY=[@ANYBLOB="ac010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x1ac}, 0x1, 0x0, 0x0, 0x80}, 0x28080) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000000)={0x2, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @dev}, {0x2, 0x0, @rand_addr=0xfffffffe}, 0x593b9214c4d8fd1c}) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) socket(0x10, 0x80002, 0x0) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) write(r5, &(0x7f0000000140)="2442a5cec1923abe517d6d06bf624e3c30706775203c80aefa35", 0x1a) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) [ 363.600109] protocol 88fb is buggy, dev hsr_slave_0 [ 363.605967] protocol 88fb is buggy, dev hsr_slave_1 22:45:02 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)="9c", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000007ac0)={0x0, 0x0, &(0x7f0000007a40)=[{&(0x7f0000007700)="93", 0x1}], 0x1}, 0x0) close(0xffffffffffffffff) [ 363.664121] audit: type=1804 audit(1575758702.743:329): pid=16385 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir103906316/syzkaller.9k5RKz/191/file0" dev="sda1" ino=17381 res=1 22:45:03 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)="9c", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000007ac0)={0x0, 0x0, &(0x7f0000007a40)=[{&(0x7f0000007700)="93", 0x1}], 0x1}, 0x0) close(0xffffffffffffffff) [ 363.878273] audit: type=1804 audit(1575758702.753:330): pid=16385 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.1" name="/root/syzkaller-testdir103906316/syzkaller.9k5RKz/191/file0" dev="sda1" ino=17381 res=1 22:45:03 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, 0x0, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) [ 363.906891] audit: type=1804 audit(1575758702.913:331): pid=16391 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir958879901/syzkaller.zsdlqm/437/file0" dev="sda1" ino=17597 res=1 [ 363.947240] audit: type=1804 audit(1575758702.923:332): pid=16391 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.0" name="/root/syzkaller-testdir958879901/syzkaller.zsdlqm/437/file0" dev="sda1" ino=17597 res=1 22:45:03 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x20, 0x0, 0x0, 0x5a1b1340cf40f849, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r4, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) sendmsg$IPVS_CMD_DEL_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000800)=ANY=[@ANYBLOB="ac010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x1ac}, 0x1, 0x0, 0x0, 0x80}, 0x28080) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000000)={0x2, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @dev}, {0x2, 0x0, @rand_addr=0xfffffffe}, 0x593b9214c4d8fd1c}) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) socket(0x10, 0x80002, 0x0) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) write(r5, &(0x7f0000000140)="2442a5cec1923abe517d6d06bf624e3c30706775203c80aefa35", 0x1a) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) [ 364.010112] protocol 88fb is buggy, dev hsr_slave_0 [ 364.015352] protocol 88fb is buggy, dev hsr_slave_1 22:45:03 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x20, 0x0, 0x0, 0x5a1b1340cf40f849, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r4, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) sendmsg$IPVS_CMD_DEL_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000800)=ANY=[@ANYBLOB="ac010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x1ac}, 0x1, 0x0, 0x0, 0x80}, 0x28080) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000000)={0x2, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @dev}, {0x2, 0x0, @rand_addr=0xfffffffe}, 0x593b9214c4d8fd1c}) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) socket(0x10, 0x80002, 0x0) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) write(r5, &(0x7f0000000140)="2442a5cec1923abe517d6d06bf624e3c30706775203c80aefa35", 0x1a) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) 22:45:03 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x20, 0x0, 0x0, 0x5a1b1340cf40f849, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r4, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) sendmsg$IPVS_CMD_DEL_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000800)=ANY=[@ANYBLOB="ac010000", @ANYRES16=0x0, @ANYBLOB="00022abd7000fbdbdf250700000008000600010400000800040006000000080006000500000050010100080002006c00000014000300e0000002000000000000000000000000080005000400000008000b00736970000800050002000000080009005f0000000c00070020000000200000000c0006006e6f6e65000000000c0007000200000013c1113eec0006006468009b74015e5150799f4544374e860ac54f4b4db189832eed85e8acf74ee2ce418e2a23a01e48a9f9e646918adcbc02f9ba7b1327f4d62955757983ec5778bd20fc476e3d97dbe181b4006f7370469f09f5e0a11151efc89e22fde01267cb81911eb409860412a9c397b738fbbe3ecf45395d38f6ccb47b1dd3ccf7c6d5a1bfab14d8e66a7341ad6c5f66dca66c55bad5c9438a74209664c4063b408bcb13af79066ef290e0f1e28c448a091c1f0a634c9feb17399020702abd5121fb8f8dcd2992003cb3e9078ef03c7c3a2d38c2f4a374226f82b998ea0030000100080009006800000008000b007369700008000600666f00000c00070034000000080000000800020000000000721fc35e6021714274178434f9edabffec00cd91f18f57a92b02f0fce2f4bb72158f9bc72080a937bfe2ba053cf4391ed8498c07c47c061d27934ab2d14d3754eb777d7f302169d4c32dbbc1931e03285d47d3811e362e9c01d62542228d08f8befca960172c8462509f0586b7af9a5a4e34bfd1a6de0bfc9ef15bf5f49e7e5e4b05f8b7ec9ec791f161942e8ccf"], 0x1ac}, 0x1, 0x0, 0x0, 0x80}, 0x28080) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000000)={0x2, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @dev}, {0x2, 0x0, @rand_addr=0xfffffffe}, 0x593b9214c4d8fd1c}) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) r5 = socket(0x10, 0x80002, 0x0) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) write(r6, &(0x7f0000000140)="2442a5cec1923abe517d6d06bf624e3c30706775203c80aefa35", 0x1a) accept4$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) 22:45:03 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x20, 0x0, 0x0, 0x5a1b1340cf40f849, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r4, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) sendmsg$IPVS_CMD_DEL_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000800)=ANY=[@ANYBLOB="ac010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x1ac}, 0x1, 0x0, 0x0, 0x80}, 0x28080) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000000)={0x2, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @dev}, {0x2, 0x0, @rand_addr=0xfffffffe}, 0x593b9214c4d8fd1c}) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) r5 = socket(0x10, 0x80002, 0x0) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) write(r6, &(0x7f0000000140)="2442a5cec1923abe517d6d06bf624e3c30706775203c80aefa35", 0x1a) accept4$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) [ 364.320609] protocol 88fb is buggy, dev hsr_slave_0 [ 364.326415] protocol 88fb is buggy, dev hsr_slave_1 22:45:03 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x20, 0x0, 0x0, 0x5a1b1340cf40f849, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r4, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) sendmsg$IPVS_CMD_DEL_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000800)=ANY=[@ANYBLOB="ac010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x1ac}, 0x1, 0x0, 0x0, 0x80}, 0x28080) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000000)={0x2, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @dev}, {0x2, 0x0, @rand_addr=0xfffffffe}, 0x593b9214c4d8fd1c}) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) r5 = socket(0x10, 0x80002, 0x0) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) write(r6, &(0x7f0000000140)="2442a5cec1923abe517d6d06bf624e3c30706775203c80aefa35", 0x1a) accept4$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) 22:45:03 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x20, 0x0, 0x0, 0x5a1b1340cf40f849, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r4, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) sendmsg$IPVS_CMD_DEL_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000800)=ANY=[@ANYBLOB="ac010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x1ac}, 0x1, 0x0, 0x0, 0x80}, 0x28080) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000000)={0x2, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @dev}, {0x2, 0x0, @rand_addr=0xfffffffe}, 0x593b9214c4d8fd1c}) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) r5 = socket(0x10, 0x80002, 0x0) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) write(r6, &(0x7f0000000140)="2442a5cec1923abe517d6d06bf624e3c30706775203c80aefa35", 0x1a) accept4$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) 22:45:03 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x20, 0x0, 0x0, 0x5a1b1340cf40f849, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r4, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) sendmsg$IPVS_CMD_DEL_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000800)=ANY=[@ANYBLOB="ac010000", @ANYRES16=0x0, @ANYBLOB="00022abd7000fbdbdf250700000008000600010400000800040006000000080006000500000050010100080002006c00000014000300e0000002000000000000000000000000080005000400000008000b00736970000800050002000000080009005f0000000c00070020000000200000000c0006006e6f6e65000000000c0007000200000013c1113eec0006006468009b74015e5150799f4544374e860ac54f4b4db189832eed85e8acf74ee2ce418e2a23a01e48a9f9e646918adcbc02f9ba7b1327f4d62955757983ec5778bd20fc476e3d97dbe181b4006f7370469f09f5e0a11151efc89e22fde01267cb81911eb409860412a9c397b738fbbe3ecf45395d38f6ccb47b1dd3ccf7c6d5a1bfab14d8e66a7341ad6c5f66dca66c55bad5c9438a74209664c4063b408bcb13af79066ef290e0f1e28c448a091c1f0a634c9feb17399020702abd5121fb8f8dcd2992003cb3e9078ef03c7c3a2d38c2f4a374226f82b998ea0030000100080009006800000008000b007369700008000600666f00000c00070034000000080000000800020000000000721fc35e6021714274178434f9edabffec00cd91f18f57a92b02f0fce2f4bb72158f9bc72080a937bfe2ba053cf4391ed8498c07c47c061d27934ab2d14d3754eb777d7f302169d4c32dbbc1931e03285d47d3811e362e9c01d62542228d08f8befca960172c8462509f0586b7af9a5a4e34bfd1a6de0bfc9ef15bf5f49e7e5e4b05f8b7ec9ec791f161942e8ccf"], 0x1ac}, 0x1, 0x0, 0x0, 0x80}, 0x28080) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000000)={0x2, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @dev}, {0x2, 0x0, @rand_addr=0xfffffffe}, 0x593b9214c4d8fd1c}) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) r5 = socket(0x10, 0x80002, 0x0) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) write(r6, &(0x7f0000000140)="2442a5cec1923abe517d6d06bf624e3c30706775203c80aefa35", 0x1a) accept4$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) 22:45:03 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x20, 0x0, 0x0, 0x5a1b1340cf40f849, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r4, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) sendmsg$IPVS_CMD_DEL_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000800)=ANY=[@ANYBLOB="ac010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x1ac}, 0x1, 0x0, 0x0, 0x80}, 0x28080) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000000)={0x2, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @dev}, {0x2, 0x0, @rand_addr=0xfffffffe}, 0x593b9214c4d8fd1c}) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) r5 = socket(0x10, 0x80002, 0x0) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) write(r6, &(0x7f0000000140)="2442a5cec1923abe517d6d06bf624e3c30706775203c80aefa35", 0x1a) accept4$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) 22:45:04 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[], 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) 22:45:04 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x20, 0x0, 0x0, 0x5a1b1340cf40f849, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r4, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) sendmsg$IPVS_CMD_DEL_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000800)=ANY=[@ANYBLOB="ac010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x1ac}, 0x1, 0x0, 0x0, 0x80}, 0x28080) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000000)={0x2, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @dev}, {0x2, 0x0, @rand_addr=0xfffffffe}, 0x593b9214c4d8fd1c}) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) r5 = socket(0x10, 0x80002, 0x0) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) write(r6, &(0x7f0000000140)="2442a5cec1923abe517d6d06bf624e3c30706775203c80aefa35", 0x1a) accept4$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) 22:45:04 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x53adc69e) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x7a, 0x0, [0x4b564d02, 0x3]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:45:04 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x20, 0x0, 0x0, 0x5a1b1340cf40f849, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r4, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) sendmsg$IPVS_CMD_DEL_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000800)=ANY=[@ANYBLOB="ac010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x1ac}, 0x1, 0x0, 0x0, 0x80}, 0x28080) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000000)={0x2, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @dev}, {0x2, 0x0, @rand_addr=0xfffffffe}, 0x593b9214c4d8fd1c}) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) r5 = socket(0x10, 0x80002, 0x0) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) write(r6, &(0x7f0000000140)="2442a5cec1923abe517d6d06bf624e3c30706775203c80aefa35", 0x1a) accept4$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f00000003c0)=r7) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) 22:45:04 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x20, 0x0, 0x0, 0x5a1b1340cf40f849, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r4, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) sendmsg$IPVS_CMD_DEL_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000800)=ANY=[@ANYBLOB="ac010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x1ac}, 0x1, 0x0, 0x0, 0x80}, 0x28080) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000000)={0x2, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @dev}, {0x2, 0x0, @rand_addr=0xfffffffe}, 0x593b9214c4d8fd1c}) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) r5 = socket(0x10, 0x80002, 0x0) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) write(r6, &(0x7f0000000140)="2442a5cec1923abe517d6d06bf624e3c30706775203c80aefa35", 0x1a) accept4$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) 22:45:04 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x20, 0x0, 0x0, 0x5a1b1340cf40f849, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r4, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) sendmsg$IPVS_CMD_DEL_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000800)=ANY=[@ANYBLOB="ac010000", @ANYRES16=0x0, @ANYBLOB="00022abd7000fbdbdf250700000008000600010400000800040006000000080006000500000050010100080002006c00000014000300e0000002000000000000000000000000080005000400000008000b00736970000800050002000000080009005f0000000c00070020000000200000000c0006006e6f6e65000000000c0007000200000013c1113eec0006006468009b74015e5150799f4544374e860ac54f4b4db189832eed85e8acf74ee2ce418e2a23a01e48a9f9e646918adcbc02f9ba7b1327f4d62955757983ec5778bd20fc476e3d97dbe181b4006f7370469f09f5e0a11151efc89e22fde01267cb81911eb409860412a9c397b738fbbe3ecf45395d38f6ccb47b1dd3ccf7c6d5a1bfab14d8e66a7341ad6c5f66dca66c55bad5c9438a74209664c4063b408bcb13af79066ef290e0f1e28c448a091c1f0a634c9feb17399020702abd5121fb8f8dcd2992003cb3e9078ef03c7c3a2d38c2f4a374226f82b998ea0030000100080009006800000008000b007369700008000600666f00000c00070034000000080000000800020000000000721fc35e6021714274178434f9edabffec00cd91f18f57a92b02f0fce2f4bb72158f9bc72080a937bfe2ba053cf4391ed8498c07c47c061d27934ab2d14d3754eb777d7f302169d4c32dbbc1931e03285d47d3811e362e9c01d62542228d08f8befca960172c8462509f0586b7af9a5a4e34bfd1a6de0bfc9ef15bf5f49e7e5e4b05f8b7ec9ec791f161942e8ccf"], 0x1ac}, 0x1, 0x0, 0x0, 0x80}, 0x28080) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000000)={0x2, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @dev}, {0x2, 0x0, @rand_addr=0xfffffffe}, 0x593b9214c4d8fd1c}) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) r5 = socket(0x10, 0x80002, 0x0) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) write(r6, &(0x7f0000000140)="2442a5cec1923abe517d6d06bf624e3c30706775203c80aefa35", 0x1a) accept4$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f00000003c0)=r7) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) 22:45:04 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=@newlink={0x28, 0x10, 0x40d, 0x0, 0x0, {}, [@IFLA_LINKMODE={0x8}]}, 0x28}}, 0x0) 22:45:05 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x20, 0x0, 0x0, 0x5a1b1340cf40f849, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r4, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) sendmsg$IPVS_CMD_DEL_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000800)=ANY=[@ANYBLOB="ac010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x1ac}, 0x1, 0x0, 0x0, 0x80}, 0x28080) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000000)={0x2, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @dev}, {0x2, 0x0, @rand_addr=0xfffffffe}, 0x593b9214c4d8fd1c}) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) r5 = socket(0x10, 0x80002, 0x0) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) write(r6, &(0x7f0000000140)="2442a5cec1923abe517d6d06bf624e3c30706775203c80aefa35", 0x1a) accept4$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f00000003c0)=r7) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000040)={r7, 0x1, 0x6, @remote}, 0x10) sendfile(r0, r1, 0x0, 0x7fffffff) 22:45:05 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[], 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) 22:45:05 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x20, 0x0, 0x0, 0x5a1b1340cf40f849, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r4, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) sendmsg$IPVS_CMD_DEL_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000800)=ANY=[@ANYBLOB="ac010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x1ac}, 0x1, 0x0, 0x0, 0x80}, 0x28080) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000000)={0x2, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @dev}, {0x2, 0x0, @rand_addr=0xfffffffe}, 0x593b9214c4d8fd1c}) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) r5 = socket(0x10, 0x80002, 0x0) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) write(r6, &(0x7f0000000140)="2442a5cec1923abe517d6d06bf624e3c30706775203c80aefa35", 0x1a) accept4$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f00000003c0)=r7) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000040)={r7, 0x1, 0x6, @remote}, 0x10) sendfile(r0, r1, 0x0, 0x7fffffff) 22:45:05 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x20, 0x0, 0x0, 0x5a1b1340cf40f849, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r4, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) sendmsg$IPVS_CMD_DEL_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000800)=ANY=[@ANYBLOB="ac010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x1ac}, 0x1, 0x0, 0x0, 0x80}, 0x28080) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000000)={0x2, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @dev}, {0x2, 0x0, @rand_addr=0xfffffffe}, 0x593b9214c4d8fd1c}) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) r5 = socket(0x10, 0x80002, 0x0) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) write(r6, &(0x7f0000000140)="2442a5cec1923abe517d6d06bf624e3c30706775203c80aefa35", 0x1a) accept4$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f00000003c0)=r7) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000040)={r7, 0x1, 0x6, @remote}, 0x10) sendfile(r0, r1, 0x0, 0x7fffffff) 22:45:05 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x20, 0x0, 0x0, 0x5a1b1340cf40f849, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r4, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) sendmsg$IPVS_CMD_DEL_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000800)=ANY=[@ANYBLOB="ac010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x1ac}, 0x1, 0x0, 0x0, 0x80}, 0x28080) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000000)={0x2, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @dev}, {0x2, 0x0, @rand_addr=0xfffffffe}, 0x593b9214c4d8fd1c}) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) r5 = socket(0x10, 0x80002, 0x0) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) write(r6, &(0x7f0000000140)="2442a5cec1923abe517d6d06bf624e3c30706775203c80aefa35", 0x1a) accept4$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f00000003c0)=r7) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000040)={r7, 0x1, 0x6, @remote}, 0x10) sendfile(r0, r1, 0x0, 0x7fffffff) 22:45:05 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x20, 0x0, 0x0, 0x5a1b1340cf40f849, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r4, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) sendmsg$IPVS_CMD_DEL_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000800)=ANY=[@ANYBLOB="ac010000", @ANYRES16=0x0, @ANYBLOB="00022abd7000fbdbdf250700000008000600010400000800040006000000080006000500000050010100080002006c00000014000300e0000002000000000000000000000000080005000400000008000b00736970000800050002000000080009005f0000000c00070020000000200000000c0006006e6f6e65000000000c0007000200000013c1113eec0006006468009b74015e5150799f4544374e860ac54f4b4db189832eed85e8acf74ee2ce418e2a23a01e48a9f9e646918adcbc02f9ba7b1327f4d62955757983ec5778bd20fc476e3d97dbe181b4006f7370469f09f5e0a11151efc89e22fde01267cb81911eb409860412a9c397b738fbbe3ecf45395d38f6ccb47b1dd3ccf7c6d5a1bfab14d8e66a7341ad6c5f66dca66c55bad5c9438a74209664c4063b408bcb13af79066ef290e0f1e28c448a091c1f0a634c9feb17399020702abd5121fb8f8dcd2992003cb3e9078ef03c7c3a2d38c2f4a374226f82b998ea0030000100080009006800000008000b007369700008000600666f00000c00070034000000080000000800020000000000721fc35e6021714274178434f9edabffec00cd91f18f57a92b02f0fce2f4bb72158f9bc72080a937bfe2ba053cf4391ed8498c07c47c061d27934ab2d14d3754eb777d7f302169d4c32dbbc1931e03285d47d3811e362e9c01d62542228d08f8befca960172c8462509f0586b7af9a5a4e34bfd1a6de0bfc9ef15bf5f49e7e5e4b05f8b7ec9ec791f161942e8ccf"], 0x1ac}, 0x1, 0x0, 0x0, 0x80}, 0x28080) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000000)={0x2, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @dev}, {0x2, 0x0, @rand_addr=0xfffffffe}, 0x593b9214c4d8fd1c}) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) r5 = socket(0x10, 0x80002, 0x0) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) write(r6, &(0x7f0000000140)="2442a5cec1923abe517d6d06bf624e3c30706775203c80aefa35", 0x1a) accept4$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f00000003c0)=r7) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000040)={r7, 0x1, 0x6, @remote}, 0x10) sendfile(r0, r1, 0x0, 0x7fffffff) 22:45:05 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x20, 0x0, 0x0, 0x5a1b1340cf40f849, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r4, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) sendmsg$IPVS_CMD_DEL_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000800)=ANY=[@ANYBLOB="ac010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x1ac}, 0x1, 0x0, 0x0, 0x80}, 0x28080) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000000)={0x2, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @dev}, {0x2, 0x0, @rand_addr=0xfffffffe}, 0x593b9214c4d8fd1c}) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) r5 = socket(0x10, 0x80002, 0x0) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) write(r6, &(0x7f0000000140)="2442a5cec1923abe517d6d06bf624e3c30706775203c80aefa35", 0x1a) accept4$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f00000003c0)=r7) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000040)={r7, 0x1, 0x6, @remote}, 0x10) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) 22:45:05 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x20, 0x0, 0x0, 0x5a1b1340cf40f849, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r4, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) sendmsg$IPVS_CMD_DEL_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000800)=ANY=[@ANYBLOB="ac010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x1ac}, 0x1, 0x0, 0x0, 0x80}, 0x28080) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000000)={0x2, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @dev}, {0x2, 0x0, @rand_addr=0xfffffffe}, 0x593b9214c4d8fd1c}) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) r5 = socket(0x10, 0x80002, 0x0) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) write(r6, &(0x7f0000000140)="2442a5cec1923abe517d6d06bf624e3c30706775203c80aefa35", 0x1a) accept4$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f00000003c0)=r7) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000040)={r7, 0x1, 0x6, @remote}, 0x10) sendfile(r0, r1, 0x0, 0x7fffffff) 22:45:05 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x20, 0x0, 0x0, 0x5a1b1340cf40f849, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r4, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) sendmsg$IPVS_CMD_DEL_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000800)=ANY=[@ANYBLOB="ac010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x1ac}, 0x1, 0x0, 0x0, 0x80}, 0x28080) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000000)={0x2, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @dev}, {0x2, 0x0, @rand_addr=0xfffffffe}, 0x593b9214c4d8fd1c}) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) r5 = socket(0x10, 0x80002, 0x0) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) write(r6, &(0x7f0000000140)="2442a5cec1923abe517d6d06bf624e3c30706775203c80aefa35", 0x1a) accept4$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f00000003c0)=r7) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000040)={r7, 0x1, 0x6, @remote}, 0x10) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) 22:45:05 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x20, 0x0, 0x0, 0x5a1b1340cf40f849, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r4, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) sendmsg$IPVS_CMD_DEL_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000800)=ANY=[@ANYBLOB="ac010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x1ac}, 0x1, 0x0, 0x0, 0x80}, 0x28080) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000000)={0x2, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @dev}, {0x2, 0x0, @rand_addr=0xfffffffe}, 0x593b9214c4d8fd1c}) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) r5 = socket(0x10, 0x80002, 0x0) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) write(r6, &(0x7f0000000140)="2442a5cec1923abe517d6d06bf624e3c30706775203c80aefa35", 0x1a) accept4$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f00000003c0)=r7) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000040)={r7, 0x1, 0x6, @remote}, 0x10) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) 22:45:05 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[], 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) 22:45:05 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCSERGETLSR(r0, 0x545c, 0x0) 22:45:06 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x20, 0x0, 0x0, 0x5a1b1340cf40f849, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r4, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) sendmsg$IPVS_CMD_DEL_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000800)=ANY=[@ANYBLOB="ac010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x1ac}, 0x1, 0x0, 0x0, 0x80}, 0x28080) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000000)={0x2, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @dev}, {0x2, 0x0, @rand_addr=0xfffffffe}, 0x593b9214c4d8fd1c}) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) r5 = socket(0x10, 0x80002, 0x0) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) write(r6, &(0x7f0000000140)="2442a5cec1923abe517d6d06bf624e3c30706775203c80aefa35", 0x1a) accept4$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f00000003c0)=r7) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000040)={r7, 0x1, 0x6, @remote}, 0x10) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) 22:45:06 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x20, 0x0, 0x0, 0x5a1b1340cf40f849, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r4, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) sendmsg$IPVS_CMD_DEL_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000800)=ANY=[@ANYBLOB="ac010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x1ac}, 0x1, 0x0, 0x0, 0x80}, 0x28080) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000000)={0x2, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @dev}, {0x2, 0x0, @rand_addr=0xfffffffe}, 0x593b9214c4d8fd1c}) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) r5 = socket(0x10, 0x80002, 0x0) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) write(r6, &(0x7f0000000140)="2442a5cec1923abe517d6d06bf624e3c30706775203c80aefa35", 0x1a) accept4$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f00000003c0)=r7) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000040)={r7, 0x1, 0x6, @remote}, 0x10) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) 22:45:06 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x20, 0x0, 0x0, 0x5a1b1340cf40f849, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r4, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) sendmsg$IPVS_CMD_DEL_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000800)=ANY=[@ANYBLOB="ac010000", @ANYRES16=0x0, @ANYBLOB="00022abd7000fbdbdf250700000008000600010400000800040006000000080006000500000050010100080002006c00000014000300e0000002000000000000000000000000080005000400000008000b00736970000800050002000000080009005f0000000c00070020000000200000000c0006006e6f6e65000000000c0007000200000013c1113eec0006006468009b74015e5150799f4544374e860ac54f4b4db189832eed85e8acf74ee2ce418e2a23a01e48a9f9e646918adcbc02f9ba7b1327f4d62955757983ec5778bd20fc476e3d97dbe181b4006f7370469f09f5e0a11151efc89e22fde01267cb81911eb409860412a9c397b738fbbe3ecf45395d38f6ccb47b1dd3ccf7c6d5a1bfab14d8e66a7341ad6c5f66dca66c55bad5c9438a74209664c4063b408bcb13af79066ef290e0f1e28c448a091c1f0a634c9feb17399020702abd5121fb8f8dcd2992003cb3e9078ef03c7c3a2d38c2f4a374226f82b998ea0030000100080009006800000008000b007369700008000600666f00000c00070034000000080000000800020000000000721fc35e6021714274178434f9edabffec00cd91f18f57a92b02f0fce2f4bb72158f9bc72080a937bfe2ba053cf4391ed8498c07c47c061d27934ab2d14d3754eb777d7f302169d4c32dbbc1931e03285d47d3811e362e9c01d62542228d08f8befca960172c8462509f0586b7af9a5a4e34bfd1a6de0bfc9ef15bf5f49e7e5e4b05f8b7ec9ec791f161942e8ccf"], 0x1ac}, 0x1, 0x0, 0x0, 0x80}, 0x28080) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000000)={0x2, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @dev}, {0x2, 0x0, @rand_addr=0xfffffffe}, 0x593b9214c4d8fd1c}) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) r5 = socket(0x10, 0x80002, 0x0) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) write(r6, &(0x7f0000000140)="2442a5cec1923abe517d6d06bf624e3c30706775203c80aefa35", 0x1a) accept4$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f00000003c0)=r7) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000040)={r7, 0x1, 0x6, @remote}, 0x10) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') 22:45:06 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x20, 0x0, 0x0, 0x5a1b1340cf40f849, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r4, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) sendmsg$IPVS_CMD_DEL_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000800)=ANY=[@ANYBLOB="ac010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x1ac}, 0x1, 0x0, 0x0, 0x80}, 0x28080) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000000)={0x2, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @dev}, {0x2, 0x0, @rand_addr=0xfffffffe}, 0x593b9214c4d8fd1c}) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) r5 = socket(0x10, 0x80002, 0x0) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) write(r6, &(0x7f0000000140)="2442a5cec1923abe517d6d06bf624e3c30706775203c80aefa35", 0x1a) accept4$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f00000003c0)=r7) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000040)={r7, 0x1, 0x6, @remote}, 0x10) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') 22:45:06 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x20, 0x0, 0x0, 0x5a1b1340cf40f849, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r4, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) sendmsg$IPVS_CMD_DEL_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000800)=ANY=[@ANYBLOB="ac010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x1ac}, 0x1, 0x0, 0x0, 0x80}, 0x28080) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000000)={0x2, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @dev}, {0x2, 0x0, @rand_addr=0xfffffffe}, 0x593b9214c4d8fd1c}) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) r5 = socket(0x10, 0x80002, 0x0) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) write(r6, &(0x7f0000000140)="2442a5cec1923abe517d6d06bf624e3c30706775203c80aefa35", 0x1a) accept4$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f00000003c0)=r7) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000040)={r7, 0x1, 0x6, @remote}, 0x10) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') 22:45:06 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x20, 0x0, 0x0, 0x5a1b1340cf40f849, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r4, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) sendmsg$IPVS_CMD_DEL_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000800)=ANY=[@ANYBLOB="ac010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x1ac}, 0x1, 0x0, 0x0, 0x80}, 0x28080) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000000)={0x2, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @dev}, {0x2, 0x0, @rand_addr=0xfffffffe}, 0x593b9214c4d8fd1c}) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) r5 = socket(0x10, 0x80002, 0x0) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) write(r6, &(0x7f0000000140)="2442a5cec1923abe517d6d06bf624e3c30706775203c80aefa35", 0x1a) accept4$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f00000003c0)=r7) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000040)={r7, 0x1, 0x6, @remote}, 0x10) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') [ 367.636414] kauditd_printk_skb: 46 callbacks suppressed [ 367.636425] audit: type=1804 audit(1575758706.823:379): pid=16532 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir958879901/syzkaller.zsdlqm/444/file0" dev="sda1" ino=17615 res=1 22:45:06 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB], 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) [ 367.816473] audit: type=1804 audit(1575758706.913:380): pid=16532 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.0" name="/root/syzkaller-testdir958879901/syzkaller.zsdlqm/444/file0" dev="sda1" ino=17615 res=1 22:45:07 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) open(0x0, 0x40002, 0x0) creat(0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') r2 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r5, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r6 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r5, r6, 0x0, 0xedc0) getsockname$packet(r6, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400fffff229c2053707635954fffff7", @ANYRES32=r7, @ANYBLOB="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"], 0x8d0}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00', r7}) readv(r1, &(0x7f0000000040)=[{0x0}], 0x1) sendmsg$IPVS_CMD_DEL_DEST(r1, 0x0, 0x28080) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x2, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @local}, {0x2, 0x0, @rand_addr=0xfffffffe}, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd}) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000100)='threaded\x00', 0xff34) 22:45:07 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x20, 0x0, 0x0, 0x5a1b1340cf40f849, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r4, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) sendmsg$IPVS_CMD_DEL_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000800)=ANY=[@ANYBLOB="ac010000", @ANYRES16=0x0, @ANYBLOB="00022abd7000fbdbdf250700000008000600010400000800040006000000080006000500000050010100080002006c00000014000300e0000002000000000000000000000000080005000400000008000b00736970000800050002000000080009005f0000000c00070020000000200000000c0006006e6f6e65000000000c0007000200000013c1113eec0006006468009b74015e5150799f4544374e860ac54f4b4db189832eed85e8acf74ee2ce418e2a23a01e48a9f9e646918adcbc02f9ba7b1327f4d62955757983ec5778bd20fc476e3d97dbe181b4006f7370469f09f5e0a11151efc89e22fde01267cb81911eb409860412a9c397b738fbbe3ecf45395d38f6ccb47b1dd3ccf7c6d5a1bfab14d8e66a7341ad6c5f66dca66c55bad5c9438a74209664c4063b408bcb13af79066ef290e0f1e28c448a091c1f0a634c9feb17399020702abd5121fb8f8dcd2992003cb3e9078ef03c7c3a2d38c2f4a374226f82b998ea0030000100080009006800000008000b007369700008000600666f00000c00070034000000080000000800020000000000721fc35e6021714274178434f9edabffec00cd91f18f57a92b02f0fce2f4bb72158f9bc72080a937bfe2ba053cf4391ed8498c07c47c061d27934ab2d14d3754eb777d7f302169d4c32dbbc1931e03285d47d3811e362e9c01d62542228d08f8befca960172c8462509f0586b7af9a5a4e34bfd1a6de0bfc9ef15bf5f49e7e5e4b05f8b7ec9ec791f161942e8ccf"], 0x1ac}, 0x1, 0x0, 0x0, 0x80}, 0x28080) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000000)={0x2, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @dev}, {0x2, 0x0, @rand_addr=0xfffffffe}, 0x593b9214c4d8fd1c}) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) r5 = socket(0x10, 0x80002, 0x0) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) write(r6, &(0x7f0000000140)="2442a5cec1923abe517d6d06bf624e3c30706775203c80aefa35", 0x1a) accept4$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f00000003c0)=r7) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000040)={r7, 0x1, 0x6, @remote}, 0x10) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r5, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4080000}, 0xc, &(0x7f0000000300)={&(0x7f0000000a40)=ANY=[@ANYBLOB="fc0012030000001818bd7363468b59bb20f1d31789c143b63dbbe23dde9e6a3623c6e20aae0d4ad68ea82db3ad530010242f6e51639c0a6d5471b0330b5d46a308", @ANYRES16=r8, @ANYBLOB="00002abd7000fedbdf25030000003400020000000700080000006afd010000000000000000000000ffffe0000002000004002735000008000500040000002000020008000500030000000000030007000000200001000c00070020000000080000000800020088000000080009006e0000002c000200080004007300000008000d0000000000080002004e20000008000d000000000008000400010000002800030008000500e000000108000100020000001400060000000000000000000000ffffac1e01010800060087000000100001000c0007002e00000044000000"], 0xfc}, 0x1, 0x0, 0x0, 0x4000104}, 0x20008000) 22:45:07 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x20, 0x0, 0x0, 0x5a1b1340cf40f849, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r4, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) sendmsg$IPVS_CMD_DEL_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000800)=ANY=[@ANYBLOB="ac010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x1ac}, 0x1, 0x0, 0x0, 0x80}, 0x28080) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000000)={0x2, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @dev}, {0x2, 0x0, @rand_addr=0xfffffffe}, 0x593b9214c4d8fd1c}) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) r5 = socket(0x10, 0x80002, 0x0) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) write(r6, &(0x7f0000000140)="2442a5cec1923abe517d6d06bf624e3c30706775203c80aefa35", 0x1a) accept4$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f00000003c0)=r7) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000040)={r7, 0x1, 0x6, @remote}, 0x10) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r5, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4080000}, 0xc, &(0x7f0000000300)={&(0x7f0000000a40)=ANY=[@ANYBLOB="fc0012030000001818bd7363468b59bb20f1d31789c143b63dbbe23dde9e6a3623c6e20aae0d4ad68ea82db3ad530010242f6e51639c0a6d5471b0330b5d46a308", @ANYRES16=r8, @ANYBLOB="00002abd7000fedbdf25030000003400020000000700080000006afd010000000000000000000000ffffe0000002000004002735000008000500040000002000020008000500030000000000030007000000200001000c00070020000000080000000800020088000000080009006e0000002c000200080004007300000008000d0000000000080002004e20000008000d000000000008000400010000002800030008000500e000000108000100020000001400060000000000000000000000ffffac1e01010800060087000000100001000c0007002e00000044000000"], 0xfc}, 0x1, 0x0, 0x0, 0x4000104}, 0x20008000) 22:45:07 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x20, 0x0, 0x0, 0x5a1b1340cf40f849, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r4, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) sendmsg$IPVS_CMD_DEL_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000800)=ANY=[@ANYBLOB="ac010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x1ac}, 0x1, 0x0, 0x0, 0x80}, 0x28080) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000000)={0x2, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @dev}, {0x2, 0x0, @rand_addr=0xfffffffe}, 0x593b9214c4d8fd1c}) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) r5 = socket(0x10, 0x80002, 0x0) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) write(r6, &(0x7f0000000140)="2442a5cec1923abe517d6d06bf624e3c30706775203c80aefa35", 0x1a) accept4$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f00000003c0)=r7) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000040)={r7, 0x1, 0x6, @remote}, 0x10) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r5, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4080000}, 0xc, &(0x7f0000000300)={&(0x7f0000000a40)=ANY=[@ANYBLOB="fc0012030000001818bd7363468b59bb20f1d31789c143b63dbbe23dde9e6a3623c6e20aae0d4ad68ea82db3ad530010242f6e51639c0a6d5471b0330b5d46a308", @ANYRES16=r8, @ANYBLOB="00002abd7000fedbdf25030000003400020000000700080000006afd010000000000000000000000ffffe0000002000004002735000008000500040000002000020008000500030000000000030007000000200001000c00070020000000080000000800020088000000080009006e0000002c000200080004007300000008000d0000000000080002004e20000008000d000000000008000400010000002800030008000500e000000108000100020000001400060000000000000000000000ffffac1e01010800060087000000100001000c0007002e00000044000000"], 0xfc}, 0x1, 0x0, 0x0, 0x4000104}, 0x20008000) 22:45:07 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x20, 0x0, 0x0, 0x5a1b1340cf40f849, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r4, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) sendmsg$IPVS_CMD_DEL_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000800)=ANY=[@ANYBLOB="ac010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x1ac}, 0x1, 0x0, 0x0, 0x80}, 0x28080) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000000)={0x2, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @dev}, {0x2, 0x0, @rand_addr=0xfffffffe}, 0x593b9214c4d8fd1c}) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) r5 = socket(0x10, 0x80002, 0x0) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) write(r6, &(0x7f0000000140)="2442a5cec1923abe517d6d06bf624e3c30706775203c80aefa35", 0x1a) accept4$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f00000003c0)=r7) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000040)={r7, 0x1, 0x6, @remote}, 0x10) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r5, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4080000}, 0xc, &(0x7f0000000300)={&(0x7f0000000a40)=ANY=[@ANYBLOB="fc0012030000001818bd7363468b59bb20f1d31789c143b63dbbe23dde9e6a3623c6e20aae0d4ad68ea82db3ad530010242f6e51639c0a6d5471b0330b5d46a308", @ANYRES16=r8, @ANYBLOB="00002abd7000fedbdf25030000003400020000000700080000006afd010000000000000000000000ffffe0000002000004002735000008000500040000002000020008000500030000000000030007000000200001000c00070020000000080000000800020088000000080009006e0000002c000200080004007300000008000d0000000000080002004e20000008000d000000000008000400010000002800030008000500e000000108000100020000001400060000000000000000000000ffffac1e01010800060087000000100001000c0007002e00000044000000"], 0xfc}, 0x1, 0x0, 0x0, 0x4000104}, 0x20008000) [ 368.160153] net_ratelimit: 20 callbacks suppressed [ 368.160159] protocol 88fb is buggy, dev hsr_slave_0 [ 368.170784] protocol 88fb is buggy, dev hsr_slave_1 [ 368.301081] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=16552 comm=syz-executor.1 [ 368.336903] audit: type=1804 audit(1575758707.523:381): pid=16557 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir550511319/syzkaller.U6oSbp/398/file0" dev="sda1" ino=17591 res=1 [ 368.435474] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=16558 comm=syz-executor.3 22:45:07 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x20, 0x0, 0x0, 0x5a1b1340cf40f849, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r4, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) sendmsg$IPVS_CMD_DEL_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000800)=ANY=[@ANYBLOB="ac010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x1ac}, 0x1, 0x0, 0x0, 0x80}, 0x28080) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000000)={0x2, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @dev}, {0x2, 0x0, @rand_addr=0xfffffffe}, 0x593b9214c4d8fd1c}) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) r5 = socket(0x10, 0x80002, 0x0) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) write(r6, &(0x7f0000000140)="2442a5cec1923abe517d6d06bf624e3c30706775203c80aefa35", 0x1a) accept4$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f00000003c0)=r7) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000040)={r7, 0x1, 0x6, @remote}, 0x10) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r5, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4080000}, 0xc, &(0x7f0000000300)={&(0x7f0000000a40)=ANY=[@ANYBLOB="fc0012030000001818bd7363468b59bb20f1d31789c143b63dbbe23dde9e6a3623c6e20aae0d4ad68ea82db3ad530010242f6e51639c0a6d5471b0330b5d46a308", @ANYRES16=r8, @ANYBLOB="00002abd7000fedbdf25030000003400020000000700080000006afd010000000000000000000000ffffe0000002000004002735000008000500040000002000020008000500030000000000030007000000200001000c00070020000000080000000800020088000000080009006e0000002c000200080004007300000008000d0000000000080002004e20000008000d000000000008000400010000002800030008000500e000000108000100020000001400060000000000000000000000ffffac1e01010800060087000000100001000c0007002e00000044000000"], 0xfc}, 0x1, 0x0, 0x0, 0x4000104}, 0x20008000) 22:45:07 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x20, 0x0, 0x0, 0x5a1b1340cf40f849, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r4, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) sendmsg$IPVS_CMD_DEL_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000800)=ANY=[@ANYBLOB="ac010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x1ac}, 0x1, 0x0, 0x0, 0x80}, 0x28080) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000000)={0x2, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @dev}, {0x2, 0x0, @rand_addr=0xfffffffe}, 0x593b9214c4d8fd1c}) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) r5 = socket(0x10, 0x80002, 0x0) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) write(r6, &(0x7f0000000140)="2442a5cec1923abe517d6d06bf624e3c30706775203c80aefa35", 0x1a) accept4$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f00000003c0)=r7) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000040)={r7, 0x1, 0x6, @remote}, 0x10) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r5, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4080000}, 0xc, &(0x7f0000000300)={&(0x7f0000000a40)=ANY=[@ANYBLOB="fc0012030000001818bd7363468b59bb20f1d31789c143b63dbbe23dde9e6a3623c6e20aae0d4ad68ea82db3ad530010242f6e51639c0a6d5471b0330b5d46a308", @ANYRES16=r8, @ANYBLOB="00002abd7000fedbdf25030000003400020000000700080000006afd010000000000000000000000ffffe0000002000004002735000008000500040000002000020008000500030000000000030007000000200001000c00070020000000080000000800020088000000080009006e0000002c000200080004007300000008000d0000000000080002004e20000008000d000000000008000400010000002800030008000500e000000108000100020000001400060000000000000000000000ffffac1e01010800060087000000100001000c0007002e00000044000000"], 0xfc}, 0x1, 0x0, 0x0, 0x4000104}, 0x20008000) [ 368.480169] protocol 88fb is buggy, dev hsr_slave_0 [ 368.485379] protocol 88fb is buggy, dev hsr_slave_1 [ 368.491375] audit: type=1804 audit(1575758707.533:382): pid=16557 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.2" name="/root/syzkaller-testdir550511319/syzkaller.U6oSbp/398/file0" dev="sda1" ino=17591 res=1 22:45:07 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB], 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) 22:45:07 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'nr0\x01\x00', 0x4009}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f00000018c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\a\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83CZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x98\x86\"R\x06\x00\x00\x00\x00\x00\x00\x00\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&\x014\x01\xf4\xb7\x83\x9a\xfa*\xa6\x06\xb7Pk7N\xc2\xd9\xee\xd0\xb0M\x00\xab\xc3\t\fc\xd8dx\xd5\x1dU*s)\x12[\x14\xb1\xc0\xd7\x1a\xa0\x16\xa2z\x9e\x93 \xddeF>29\v\x02\xa2b\x13R\xef\xffA,\xb9.$\xfa\x9f\xde[\x80\xd1=\xce\x1b\xeb\xf6\xf4\xe3z\x1f\x9dz\xa3\xc0\xe2\xa2\xb1\xeeq\xf5\xec0\x8e\xf4\xfb\xd9\x87\xf03\xdb\xae|\x10&V5c\xa6\xce\xcd\x8a\xdf\xe1\x89\"\xea\xde\xe7\xa3\xbe\xe7\xff\xf9 \x11\xfdY\xc6\xa1\xe8\xda\v\\?\xcb\x87\bn\x9b\x01\x1f\xf8\xe8\x1eV\xfaC\xdf\xc3Vv\x9b\x1a\xfc\x14.c\x94\xc9=\xb0\x0f!d\b\x18*@m\x7f\xaal\x17G\xd6?\x81\x16P\x03\x10e\xc3\xcd\xb1B\xeb\x01B\\\x91A\xa1\x8an\xb4#\xadr\x1e\x81v\xa2\x0e6x\xca\x8b\xa6\xd8\x81\x10:\x0e(\xdd\xfc\xc9\xc6\xb4\xf0\'f:\xbd\xfe\x11\xf8\xc8W\x81s^\xd9W\xf1\x94\xaf\xc5\x8a\xb4f\x1b\x17E\xb23\x12\xb0\xeb\xef\x8c\xb24h\xd7}\x7f\x92Hgej\x957\xe2A') ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000000)=0x1) write$cgroup_subtree(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) [ 368.640547] protocol 88fb is buggy, dev hsr_slave_0 [ 368.646169] protocol 88fb is buggy, dev hsr_slave_1 [ 368.702898] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=16560 comm=syz-executor.2 [ 368.755120] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=16562 comm=syz-executor.5 [ 368.763555] audit: type=1804 audit(1575758707.603:383): pid=16559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir906020022/syzkaller.VTTICl/409/file0" dev="sda1" ino=17616 res=1 [ 368.983357] device nr0 entered promiscuous mode [ 369.040279] protocol 88fb is buggy, dev hsr_slave_0 [ 369.045418] protocol 88fb is buggy, dev hsr_slave_1 [ 369.059318] audit: type=1804 audit(1575758707.613:384): pid=16559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.5" name="/root/syzkaller-testdir906020022/syzkaller.VTTICl/409/file0" dev="sda1" ino=17616 res=1 22:45:08 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'nr0\x01\x00', 0x4009}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f00000018c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\a\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83CZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x98\x86\"R\x06\x00\x00\x00\x00\x00\x00\x00\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&\x014\x01\xf4\xb7\x83\x9a\xfa*\xa6\x06\xb7Pk7N\xc2\xd9\xee\xd0\xb0M\x00\xab\xc3\t\fc\xd8dx\xd5\x1dU*s)\x12[\x14\xb1\xc0\xd7\x1a\xa0\x16\xa2z\x9e\x93 \xddeF>29\v\x02\xa2b\x13R\xef\xffA,\xb9.$\xfa\x9f\xde[\x80\xd1=\xce\x1b\xeb\xf6\xf4\xe3z\x1f\x9dz\xa3\xc0\xe2\xa2\xb1\xeeq\xf5\xec0\x8e\xf4\xfb\xd9\x87\xf03\xdb\xae|\x10&V5c\xa6\xce\xcd\x8a\xdf\xe1\x89\"\xea\xde\xe7\xa3\xbe\xe7\xff\xf9 \x11\xfdY\xc6\xa1\xe8\xda\v\\?\xcb\x87\bn\x9b\x01\x1f\xf8\xe8\x1eV\xfaC\xdf\xc3Vv\x9b\x1a\xfc\x14.c\x94\xc9=\xb0\x0f!d\b\x18*@m\x7f\xaal\x17G\xd6?\x81\x16P\x03\x10e\xc3\xcd\xb1B\xeb\x01B\\\x91A\xa1\x8an\xb4#\xadr\x1e\x81v\xa2\x0e6x\xca\x8b\xa6\xd8\x81\x10:\x0e(\xdd\xfc\xc9\xc6\xb4\xf0\'f:\xbd\xfe\x11\xf8\xc8W\x81s^\xd9W\xf1\x94\xaf\xc5\x8a\xb4f\x1b\x17E\xb23\x12\xb0\xeb\xef\x8c\xb24h\xd7}\x7f\x92Hgej\x957\xe2A') write$cgroup_subtree(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) [ 369.080425] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=16568 comm=syz-executor.0 [ 369.101161] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=16572 comm=syz-executor.1 22:45:08 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'nr0\x01\x00', 0x4009}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f00000018c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\a\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83CZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x98\x86\"R\x06\x00\x00\x00\x00\x00\x00\x00\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&\x014\x01\xf4\xb7\x83\x9a\xfa*\xa6\x06\xb7Pk7N\xc2\xd9\xee\xd0\xb0M\x00\xab\xc3\t\fc\xd8dx\xd5\x1dU*s)\x12[\x14\xb1\xc0\xd7\x1a\xa0\x16\xa2z\x9e\x93 \xddeF>29\v\x02\xa2b\x13R\xef\xffA,\xb9.$\xfa\x9f\xde[\x80\xd1=\xce\x1b\xeb\xf6\xf4\xe3z\x1f\x9dz\xa3\xc0\xe2\xa2\xb1\xeeq\xf5\xec0\x8e\xf4\xfb\xd9\x87\xf03\xdb\xae|\x10&V5c\xa6\xce\xcd\x8a\xdf\xe1\x89\"\xea\xde\xe7\xa3\xbe\xe7\xff\xf9 \x11\xfdY\xc6\xa1\xe8\xda\v\\?\xcb\x87\bn\x9b\x01\x1f\xf8\xe8\x1eV\xfaC\xdf\xc3Vv\x9b\x1a\xfc\x14.c\x94\xc9=\xb0\x0f!d\b\x18*@m\x7f\xaal\x17G\xd6?\x81\x16P\x03\x10e\xc3\xcd\xb1B\xeb\x01B\\\x91A\xa1\x8an\xb4#\xadr\x1e\x81v\xa2\x0e6x\xca\x8b\xa6\xd8\x81\x10:\x0e(\xdd\xfc\xc9\xc6\xb4\xf0\'f:\xbd\xfe\x11\xf8\xc8W\x81s^\xd9W\xf1\x94\xaf\xc5\x8a\xb4f\x1b\x17E\xb23\x12\xb0\xeb\xef\x8c\xb24h\xd7}\x7f\x92Hgej\x957\xe2A') ioctl$TUNSETVNETLE(r0, 0x400454dc, 0x0) write$cgroup_subtree(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0052865d07"], 0x90ad) 22:45:08 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'nr0\x01\x00', 0x4009}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f00000018c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\a\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83CZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x98\x86\"R\x06\x00\x00\x00\x00\x00\x00\x00\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&\x014\x01\xf4\xb7\x83\x9a\xfa*\xa6\x06\xb7Pk7N\xc2\xd9\xee\xd0\xb0M\x00\xab\xc3\t\fc\xd8dx\xd5\x1dU*s)\x12[\x14\xb1\xc0\xd7\x1a\xa0\x16\xa2z\x9e\x93 \xddeF>29\v\x02\xa2b\x13R\xef\xffA,\xb9.$\xfa\x9f\xde[\x80\xd1=\xce\x1b\xeb\xf6\xf4\xe3z\x1f\x9dz\xa3\xc0\xe2\xa2\xb1\xeeq\xf5\xec0\x8e\xf4\xfb\xd9\x87\xf03\xdb\xae|\x10&V5c\xa6\xce\xcd\x8a\xdf\xe1\x89\"\xea\xde\xe7\xa3\xbe\xe7\xff\xf9 \x11\xfdY\xc6\xa1\xe8\xda\v\\?\xcb\x87\bn\x9b\x01\x1f\xf8\xe8\x1eV\xfaC\xdf\xc3Vv\x9b\x1a\xfc\x14.c\x94\xc9=\xb0\x0f!d\b\x18*@m\x7f\xaal\x17G\xd6?\x81\x16P\x03\x10e\xc3\xcd\xb1B\xeb\x01B\\\x91A\xa1\x8an\xb4#\xadr\x1e\x81v\xa2\x0e6x\xca\x8b\xa6\xd8\x81\x10:\x0e(\xdd\xfc\xc9\xc6\xb4\xf0\'f:\xbd\xfe\x11\xf8\xc8W\x81s^\xd9W\xf1\x94\xaf\xc5\x8a\xb4f\x1b\x17E\xb23\x12\xb0\xeb\xef\x8c\xb24h\xd7}\x7f\x92Hgej\x957\xe2A') write$cgroup_subtree(r0, &(0x7f00000000c0)=ANY=[], 0x0) 22:45:08 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'nr0\x01\x00', 0x4009}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f00000018c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\a\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83CZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x98\x86\"R\x06\x00\x00\x00\x00\x00\x00\x00\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&\x014\x01\xf4\xb7\x83\x9a\xfa*\xa6\x06\xb7Pk7N\xc2\xd9\xee\xd0\xb0M\x00\xab\xc3\t\fc\xd8dx\xd5\x1dU*s)\x12[\x14\xb1\xc0\xd7\x1a\xa0\x16\xa2z\x9e\x93 \xddeF>29\v\x02\xa2b\x13R\xef\xffA,\xb9.$\xfa\x9f\xde[\x80\xd1=\xce\x1b\xeb\xf6\xf4\xe3z\x1f\x9dz\xa3\xc0\xe2\xa2\xb1\xeeq\xf5\xec0\x8e\xf4\xfb\xd9\x87\xf03\xdb\xae|\x10&V5c\xa6\xce\xcd\x8a\xdf\xe1\x89\"\xea\xde\xe7\xa3\xbe\xe7\xff\xf9 \x11\xfdY\xc6\xa1\xe8\xda\v\\?\xcb\x87\bn\x9b\x01\x1f\xf8\xe8\x1eV\xfaC\xdf\xc3Vv\x9b\x1a\xfc\x14.c\x94\xc9=\xb0\x0f!d\b\x18*@m\x7f\xaal\x17G\xd6?\x81\x16P\x03\x10e\xc3\xcd\xb1B\xeb\x01B\\\x91A\xa1\x8an\xb4#\xadr\x1e\x81v\xa2\x0e6x\xca\x8b\xa6\xd8\x81\x10:\x0e(\xdd\xfc\xc9\xc6\xb4\xf0\'f:\xbd\xfe\x11\xf8\xc8W\x81s^\xd9W\xf1\x94\xaf\xc5\x8a\xb4f\x1b\x17E\xb23\x12\xb0\xeb\xef\x8c\xb24h\xd7}\x7f\x92Hgej\x957\xe2A') write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="0052080607"], 0x90ad) [ 369.303189] device nr0 entered promiscuous mode [ 369.310894] audit: type=1804 audit(1575758707.933:385): pid=16566 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir103906316/syzkaller.9k5RKz/199/file0" dev="sda1" ino=17379 res=1 [ 369.364924] device nr0 entered promiscuous mode 22:45:08 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'nr0\x01\x00', 0x4009}) r1 = socket$kcm(0x29, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f00000018c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\a\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83CZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x98\x86\"R\x06\x00\x00\x00\x00\x00\x00\x00\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&\x014\x01\xf4\xb7\x83\x9a\xfa*\xa6\x06\xb7Pk7N\xc2\xd9\xee\xd0\xb0M\x00\xab\xc3\t\fc\xd8dx\xd5\x1dU*s)\x12[\x14\xb1\xc0\xd7\x1a\xa0\x16\xa2z\x9e\x93 \xddeF>29\v\x02\xa2b\x13R\xef\xffA,\xb9.$\xfa\x9f\xde[\x80\xd1=\xce\x1b\xeb\xf6\xf4\xe3z\x1f\x9dz\xa3\xc0\xe2\xa2\xb1\xeeq\xf5\xec0\x8e\xf4\xfb\xd9\x87\xf03\xdb\xae|\x10&V5c\xa6\xce\xcd\x8a\xdf\xe1\x89\"\xea\xde\xe7\xa3\xbe\xe7\xff\xf9 \x11\xfdY\xc6\xa1\xe8\xda\v\\?\xcb\x87\bn\x9b\x01\x1f\xf8\xe8\x1eV\xfaC\xdf\xc3Vv\x9b\x1a\xfc\x14.c\x94\xc9=\xb0\x0f!d\b\x18*@m\x7f\xaal\x17G\xd6?\x81\x16P\x03\x10e\xc3\xcd\xb1B\xeb\x01B\\\x91A\xa1\x8an\xb4#\xadr\x1e\x81v\xa2\x0e6x\xca\x8b\xa6\xd8\x81\x10:\x0e(\xdd\xfc\xc9\xc6\xb4\xf0\'f:\xbd\xfe\x11\xf8\xc8W\x81s^\xd9W\xf1\x94\xaf\xc5\x8a\xb4f\x1b\x17E\xb23\x12\xb0\xeb\xef\x8c\xb24h\xd7}\x7f\x92Hgej\x957\xe2A') write$cgroup_subtree(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0052080607"], 0x90ad) 22:45:08 executing program 0: r0 = socket(0xa, 0x40000000002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x19, 0x2, 0x104, [0x20000600, 0x0, 0x0, 0x20000630, 0x20000660], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff020000000500000000000000000076657468305f746f5f7465616d00000064756d6d79300000000000000000000064756d0004300000000000000000000073797a6b616c6c8279a7"]}, 0x17c) r1 = socket(0xa, 0x40000000002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x19, 0x2, 0x208, [0x20000600, 0x0, 0x0, 0x20000630, 0x20000660], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"]}, 0x280) [ 369.440161] protocol 88fb is buggy, dev hsr_slave_0 [ 369.445663] protocol 88fb is buggy, dev hsr_slave_1 [ 369.455464] device nr0 entered promiscuous mode 22:45:08 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x7, 0x3, 0x400000bff}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r1, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) [ 369.535470] audit: type=1804 audit(1575758707.943:386): pid=16566 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.1" name="/root/syzkaller-testdir103906316/syzkaller.9k5RKz/199/file0" dev="sda1" ino=17379 res=1 22:45:08 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'nr0\x01\x00', 0x4009}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f00000018c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\a\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83CZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x98\x86\"R\x06\x00\x00\x00\x00\x00\x00\x00\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&\x014\x01\xf4\xb7\x83\x9a\xfa*\xa6\x06\xb7Pk7N\xc2\xd9\xee\xd0\xb0M\x00\xab\xc3\t\fc\xd8dx\xd5\x1dU*s)\x12[\x14\xb1\xc0\xd7\x1a\xa0\x16\xa2z\x9e\x93 \xddeF>29\v\x02\xa2b\x13R\xef\xffA,\xb9.$\xfa\x9f\xde[\x80\xd1=\xce\x1b\xeb\xf6\xf4\xe3z\x1f\x9dz\xa3\xc0\xe2\xa2\xb1\xeeq\xf5\xec0\x8e\xf4\xfb\xd9\x87\xf03\xdb\xae|\x10&V5c\xa6\xce\xcd\x8a\xdf\xe1\x89\"\xea\xde\xe7\xa3\xbe\xe7\xff\xf9 \x11\xfdY\xc6\xa1\xe8\xda\v\\?\xcb\x87\bn\x9b\x01\x1f\xf8\xe8\x1eV\xfaC\xdf\xc3Vv\x9b\x1a\xfc\x14.c\x94\xc9=\xb0\x0f!d\b\x18*@m\x7f\xaal\x17G\xd6?\x81\x16P\x03\x10e\xc3\xcd\xb1B\xeb\x01B\\\x91A\xa1\x8an\xb4#\xadr\x1e\x81v\xa2\x0e6x\xca\x8b\xa6\xd8\x81\x10:\x0e(\xdd\xfc\xc9\xc6\xb4\xf0\'f:\xbd\xfe\x11\xf8\xc8W\x81s^\xd9W\xf1\x94\xaf\xc5\x8a\xb4f\x1b\x17E\xb23\x12\xb0\xeb\xef\x8c\xb24h\xd7}\x7f\x92Hgej\x957\xe2A') write$cgroup_subtree(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00R\x00\r\a'], 0x90ad) 22:45:08 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB], 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) 22:45:08 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x7, 0x3, 0x400000bff}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) 22:45:08 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'nr0\x01\x00', 0x4009}) socket$kcm(0x29, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00R\x00\r\a'], 0x90ad) 22:45:08 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'nr0\x01\x00', 0x4009}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f00000018c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\a\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83CZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x98\x86\"R\x06\x00\x00\x00\x00\x00\x00\x00\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&\x014\x01\xf4\xb7\x83\x9a\xfa*\xa6\x06\xb7Pk7N\xc2\xd9\xee\xd0\xb0M\x00\xab\xc3\t\fc\xd8dx\xd5\x1dU*s)\x12[\x14\xb1\xc0\xd7\x1a\xa0\x16\xa2z\x9e\x93 \xddeF>29\v\x02\xa2b\x13R\xef\xffA,\xb9.$\xfa\x9f\xde[\x80\xd1=\xce\x1b\xeb\xf6\xf4\xe3z\x1f\x9dz\xa3\xc0\xe2\xa2\xb1\xeeq\xf5\xec0\x8e\xf4\xfb\xd9\x87\xf03\xdb\xae|\x10&V5c\xa6\xce\xcd\x8a\xdf\xe1\x89\"\xea\xde\xe7\xa3\xbe\xe7\xff\xf9 \x11\xfdY\xc6\xa1\xe8\xda\v\\?\xcb\x87\bn\x9b\x01\x1f\xf8\xe8\x1eV\xfaC\xdf\xc3Vv\x9b\x1a\xfc\x14.c\x94\xc9=\xb0\x0f!d\b\x18*@m\x7f\xaal\x17G\xd6?\x81\x16P\x03\x10e\xc3\xcd\xb1B\xeb\x01B\\\x91A\xa1\x8an\xb4#\xadr\x1e\x81v\xa2\x0e6x\xca\x8b\xa6\xd8\x81\x10:\x0e(\xdd\xfc\xc9\xc6\xb4\xf0\'f:\xbd\xfe\x11\xf8\xc8W\x81s^\xd9W\xf1\x94\xaf\xc5\x8a\xb4f\x1b\x17E\xb23\x12\xb0\xeb\xef\x8c\xb24h\xd7}\x7f\x92Hgej\x957\xe2A') write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="0052080607"], 0x90ad) 22:45:09 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x7, 0x3, 0x400000bff}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) 22:45:09 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x7, 0x3, 0x400000bff}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) 22:45:09 executing program 1: r0 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@caif, &(0x7f0000000100)=0x80, 0x80000) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200)='nbd\x00') r2 = socket(0xa, 0x40000000002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x19, 0x2, 0x208, [0x20000600, 0x0, 0x0, 0x20000630, 0x20000660], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"]}, 0x280) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r4 = socket(0xa, 0x40000000002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x19, 0x2, 0x208, [0x20000600, 0x0, 0x0, 0x20000630, 0x20000660], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"]}, 0x280) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x58, r1, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x44, 0x7, [{0x8, 0x1, r2}, {0x8, 0x1, r3}, {0x8}, {0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8}, {0x8, 0x1, r6}, {0x8}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x40000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ifreq(r7, 0x2000089a2, &(0x7f0000000000)={'bridge0\x00\x00\f4\xbd\x19\n\x00', @ifru_addrs=@nl}) [ 369.833533] device nr0 entered promiscuous mode 22:45:09 executing program 3 (fault-call:3 fault-nth:0): r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)="9c", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000007ac0)={0x0, 0x0, &(0x7f0000007a40)=[{&(0x7f0000007700)="93", 0x1}], 0x1}, 0x0) close(r0) 22:45:09 executing program 5 (fault-call:11 fault-nth:0): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) 22:45:09 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x7, 0x3, 0x400000bff}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) 22:45:09 executing program 2 (fault-call:1 fault-nth:0): symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') unlink(&(0x7f0000000040)='./file0\x00') [ 370.045813] bridge0: port 3(team0) entered blocking state [ 370.072715] bridge0: port 3(team0) entered disabled state [ 370.124239] device team0 entered promiscuous mode [ 370.130866] FAULT_INJECTION: forcing a failure. [ 370.130866] name failslab, interval 1, probability 0, space 0, times 1 [ 370.138482] device team_slave_0 entered promiscuous mode [ 370.155678] FAULT_INJECTION: forcing a failure. [ 370.155678] name failslab, interval 1, probability 0, space 0, times 1 [ 370.164396] CPU: 0 PID: 16643 Comm: syz-executor.2 Not tainted 4.14.158-syzkaller #0 [ 370.179094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 370.183388] device team_slave_1 entered promiscuous mode [ 370.188634] Call Trace: [ 370.188732] dump_stack+0x142/0x197 [ 370.188787] should_fail.cold+0x10f/0x159 [ 370.204681] should_failslab+0xdb/0x130 [ 370.208683] kmem_cache_alloc+0x2d7/0x780 [ 370.212943] ? lock_downgrade+0x740/0x740 [ 370.212986] getname_flags+0xcb/0x580 [ 370.213023] ? __mutex_unlock_slowpath+0x71/0x800 [ 370.223242] bridge0: port 3(team0) entered blocking state [ 370.225874] do_unlinkat+0xc0/0x600 [ 370.225937] ? __sb_end_write+0xc1/0x100 [ 370.225948] ? do_rmdir+0x390/0x390 [ 370.231660] bridge0: port 3(team0) entered forwarding state [ 370.235195] ? fput+0xd4/0x150 [ 370.251762] ? SyS_write+0x15e/0x230 [ 370.255514] ? do_syscall_64+0x53/0x640 [ 370.259498] ? SyS_unlinkat+0x80/0x80 [ 370.263337] SyS_unlink+0x1b/0x20 [ 370.266989] do_syscall_64+0x1e8/0x640 [ 370.270892] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 370.275866] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 370.281195] RIP: 0033:0x45a6f9 [ 370.284380] RSP: 002b:00007f14315aec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 370.292087] RAX: ffffffffffffffda RBX: 00007f14315aec90 RCX: 000000000045a6f9 [ 370.292093] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 370.292099] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 370.292105] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f14315af6d4 [ 370.292111] R13: 00000000004c77e4 R14: 00000000004e49b8 R15: 0000000000000003 [ 370.335697] CPU: 1 PID: 16645 Comm: syz-executor.5 Not tainted 4.14.158-syzkaller #0 [ 370.343633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 370.353005] Call Trace: [ 370.355614] dump_stack+0x142/0x197 [ 370.359264] should_fail.cold+0x10f/0x159 [ 370.363444] should_failslab+0xdb/0x130 [ 370.367535] __kmalloc+0x2f0/0x7a0 [ 370.371098] ? mutex_trylock+0x168/0x1c0 [ 370.375361] ? tty_write_lock+0x20/0x60 [ 370.379537] ? tty_write+0x4b1/0x700 [ 370.383284] tty_write+0x4b1/0x700 [ 370.387042] ? process_echoes+0x150/0x150 [ 370.391221] __vfs_write+0x105/0x6b0 [ 370.395060] ? tty_read+0x270/0x270 [ 370.398727] ? kernel_read+0x120/0x120 [ 370.402808] ? __inode_security_revalidate+0xd6/0x130 [ 370.408020] ? avc_policy_seqno+0x9/0x20 [ 370.412106] ? selinux_file_permission+0x85/0x480 [ 370.417029] ? security_file_permission+0x89/0x1f0 [ 370.422193] ? rw_verify_area+0xea/0x2b0 [ 370.426287] vfs_write+0x198/0x500 [ 370.429854] SyS_write+0xfd/0x230 [ 370.433333] ? SyS_read+0x230/0x230 [ 370.436977] ? do_syscall_64+0x53/0x640 [ 370.440967] ? SyS_read+0x230/0x230 [ 370.444646] do_syscall_64+0x1e8/0x640 [ 370.448552] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 370.453426] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 370.458632] RIP: 0033:0x45a6f9 [ 370.461833] RSP: 002b:00007f386549dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 22:45:09 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) 22:45:09 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)="9c", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000007ac0)={0x0, 0x0, &(0x7f0000007a40)=[{&(0x7f0000007700)="93", 0x1}], 0x1}, 0x0) r1 = creat(&(0x7f00000017c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RRENAME(r1, &(0x7f0000000000)={0x7, 0x15, 0x1}, 0x7) close(r0) [ 370.469555] RAX: ffffffffffffffda RBX: 00007f386549dc90 RCX: 000000000045a6f9 [ 370.476981] RDX: 00000000ffffffde RSI: 00000000200001c0 RDI: 0000000000000003 [ 370.484357] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 370.491731] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f386549e6d4 [ 370.499103] R13: 00000000004cb6e7 R14: 00000000004e5090 R15: 0000000000000007 22:45:09 executing program 2 (fault-call:1 fault-nth:1): symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') unlink(&(0x7f0000000040)='./file0\x00') 22:45:09 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff3"], 0x11) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) 22:45:09 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) [ 370.635774] FAULT_INJECTION: forcing a failure. [ 370.635774] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 370.647731] CPU: 0 PID: 16656 Comm: syz-executor.2 Not tainted 4.14.158-syzkaller #0 [ 370.655667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 370.665041] Call Trace: [ 370.667653] dump_stack+0x142/0x197 [ 370.671321] should_fail.cold+0x10f/0x159 [ 370.675657] __alloc_pages_nodemask+0x1d6/0x7a0 [ 370.680365] ? fs_reclaim_acquire+0x20/0x20 22:45:09 executing program 1 (fault-call:0 fault-nth:0): symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') [ 370.684716] ? __alloc_pages_slowpath+0x2930/0x2930 [ 370.689768] cache_grow_begin+0x80/0x400 [ 370.693848] kmem_cache_alloc+0x6a6/0x780 [ 370.698019] getname_flags+0xcb/0x580 [ 370.701844] ? __mutex_unlock_slowpath+0x71/0x800 [ 370.706713] do_unlinkat+0xc0/0x600 [ 370.710371] ? __sb_end_write+0xc1/0x100 [ 370.714452] ? do_rmdir+0x390/0x390 [ 370.718095] ? fput+0xd4/0x150 [ 370.721302] ? SyS_write+0x15e/0x230 [ 370.725038] ? do_syscall_64+0x53/0x640 [ 370.729027] ? SyS_unlinkat+0x80/0x80 [ 370.732923] SyS_unlink+0x1b/0x20 22:45:09 executing program 5 (fault-call:11 fault-nth:1): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) [ 370.736388] do_syscall_64+0x1e8/0x640 [ 370.740381] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 370.745480] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 370.750916] RIP: 0033:0x45a6f9 [ 370.754196] RSP: 002b:00007f14315aec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 370.761995] RAX: ffffffffffffffda RBX: 00007f14315aec90 RCX: 000000000045a6f9 [ 370.769960] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 370.777232] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 22:45:10 executing program 2 (fault-call:1 fault-nth:2): symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') unlink(&(0x7f0000000040)='./file0\x00') [ 370.784527] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f14315af6d4 [ 370.791805] R13: 00000000004c77e4 R14: 00000000004e49b8 R15: 0000000000000003 22:45:10 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) [ 370.892894] FAULT_INJECTION: forcing a failure. [ 370.892894] name failslab, interval 1, probability 0, space 0, times 0 [ 370.906207] CPU: 0 PID: 16671 Comm: syz-executor.1 Not tainted 4.14.158-syzkaller #0 [ 370.914132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 370.924286] Call Trace: [ 370.927038] dump_stack+0x142/0x197 [ 370.930686] should_fail.cold+0x10f/0x159 [ 370.934962] should_failslab+0xdb/0x130 [ 370.938941] kmem_cache_alloc+0x2d7/0x780 [ 370.943196] ? __mutex_unlock_slowpath+0x71/0x800 [ 370.948392] ? check_preemption_disabled+0x3c/0x250 [ 370.953625] getname_flags+0xcb/0x580 [ 370.957449] SyS_symlink+0x68/0x210 [ 370.961084] ? SyS_write+0x15e/0x230 [ 370.964804] ? SyS_symlinkat+0x210/0x210 [ 370.968886] ? do_syscall_64+0x53/0x640 [ 370.970877] FAULT_INJECTION: forcing a failure. [ 370.970877] name failslab, interval 1, probability 0, space 0, times 0 [ 370.972960] ? SyS_symlinkat+0x210/0x210 [ 370.972968] do_syscall_64+0x1e8/0x640 [ 370.972975] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 370.972984] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 370.972990] RIP: 0033:0x45a6f9 [ 370.972994] RSP: 002b:00007f5d50c13c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 370.973002] RAX: ffffffffffffffda RBX: 00007f5d50c13c90 RCX: 000000000045a6f9 [ 370.973006] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000020000140 [ 370.973010] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 370.973013] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5d50c146d4 [ 370.973017] R13: 00000000004ca8dd R14: 00000000004e3c50 R15: 0000000000000003 [ 370.987872] FAULT_INJECTION: forcing a failure. [ 370.987872] name failslab, interval 1, probability 0, space 0, times 0 [ 370.988854] CPU: 1 PID: 16667 Comm: syz-executor.5 Not tainted 4.14.158-syzkaller #0 [ 370.988866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 371.079228] Call Trace: [ 371.081820] dump_stack+0x142/0x197 [ 371.085639] should_fail.cold+0x10f/0x159 [ 371.089823] should_failslab+0xdb/0x130 [ 371.093884] __kmalloc+0x71/0x7a0 [ 371.097343] ? __mutex_lock+0x36a/0x1470 [ 371.101569] ? save_trace+0x290/0x290 [ 371.106231] ? usleep_range+0x130/0x130 [ 371.110193] ? __tty_buffer_request_room+0x1a4/0x500 [ 371.115288] __tty_buffer_request_room+0x1a4/0x500 [ 371.120214] tty_insert_flip_string_fixed_flag+0x8a/0x1c0 [ 371.126715] pty_write+0x113/0x1d0 [ 371.130242] ? pty_stop+0x1a0/0x1a0 [ 371.133968] n_tty_write+0x38b/0xee0 [ 371.137676] ? process_echoes+0x150/0x150 [ 371.142014] ? do_wait_intr_irq+0x2a0/0x2a0 [ 371.146440] ? kasan_check_write+0x14/0x20 [ 371.150754] ? _copy_from_user+0x99/0x110 [ 371.155692] tty_write+0x3f6/0x700 [ 371.159763] ? process_echoes+0x150/0x150 [ 371.163948] __vfs_write+0x105/0x6b0 [ 371.167927] ? tty_read+0x270/0x270 [ 371.171654] ? kernel_read+0x120/0x120 [ 371.175534] ? __inode_security_revalidate+0xd6/0x130 [ 371.180879] ? avc_policy_seqno+0x9/0x20 [ 371.184995] ? selinux_file_permission+0x85/0x480 [ 371.190010] ? security_file_permission+0x89/0x1f0 [ 371.195117] ? rw_verify_area+0xea/0x2b0 [ 371.199219] vfs_write+0x198/0x500 [ 371.202756] SyS_write+0xfd/0x230 [ 371.206229] ? SyS_read+0x230/0x230 [ 371.209864] ? do_syscall_64+0x53/0x640 [ 371.213830] ? SyS_read+0x230/0x230 [ 371.217574] do_syscall_64+0x1e8/0x640 [ 371.221464] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 371.226316] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 371.231492] RIP: 0033:0x45a6f9 [ 371.235287] RSP: 002b:00007f38654bec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 22:45:10 executing program 1 (fault-call:0 fault-nth:1): symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') [ 371.243074] RAX: ffffffffffffffda RBX: 00007f38654bec90 RCX: 000000000045a6f9 [ 371.250938] RDX: 00000000ffffffde RSI: 00000000200001c0 RDI: 0000000000000003 [ 371.258248] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 371.265624] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f38654bf6d4 [ 371.273419] R13: 00000000004cb6e7 R14: 00000000004e5090 R15: 0000000000000007 [ 371.280696] CPU: 0 PID: 16674 Comm: syz-executor.2 Not tainted 4.14.158-syzkaller #0 [ 371.280703] [ 371.280707] ====================================================== [ 371.280710] WARNING: possible circular locking dependency detected [ 371.280712] 4.14.158-syzkaller #0 Not tainted [ 371.280714] ------------------------------------------------------ [ 371.280716] syz-executor.5/16667 is trying to acquire lock: [ 371.280718] (console_owner){-.-.}, at: [] vprintk_emit+0x2f1/0x600 [ 371.280724] [ 371.280726] but task is already holding lock: [ 371.280727] (&(&port->lock)->rlock){-.-.}, at: [] pty_write+0xe0/0x1d0 [ 371.280733] [ 371.280736] which lock already depends on the new lock. [ 371.280737] [ 371.280738] [ 371.280741] the existing dependency chain (in reverse order) is: [ 371.280742] [ 371.280743] -> #2 (&(&port->lock)->rlock){-.-.}: [ 371.280750] lock_acquire+0x16f/0x430 [ 371.280753] _raw_spin_lock_irqsave+0x95/0xcd [ 371.280755] tty_port_tty_get+0x22/0x90 [ 371.280757] tty_port_default_wakeup+0x16/0x40 [ 371.280759] tty_port_tty_wakeup+0x57/0x70 [ 371.280761] uart_write_wakeup+0x46/0x70 22:45:10 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff3"], 0x11) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) [ 371.280764] serial8250_tx_chars+0x40d/0xa10 [ 371.280766] serial8250_handle_irq.part.0+0x206/0x250 [ 371.280768] serial8250_default_handle_irq+0xa1/0x120 [ 371.280770] serial8250_interrupt+0xe9/0x1a0 [ 371.280773] __handle_irq_event_percpu+0x125/0x7f0 [ 371.280775] handle_irq_event_percpu+0x65/0x130 [ 371.280778] handle_irq_event+0xa7/0x134 [ 371.280780] handle_edge_irq+0x22b/0x840 [ 371.280782] handle_irq+0x39/0x50 [ 371.280784] do_IRQ+0x99/0x1d0 [ 371.280786] ret_from_intr+0x0/0x1e [ 371.280788] _raw_spin_unlock_irqrestore+0x95/0xe0 [ 371.280790] uart_write+0x29a/0x4f0 [ 371.280792] n_tty_write+0x38b/0xee0 [ 371.280794] tty_write+0x3f6/0x700 [ 371.280797] redirected_tty_write+0xa3/0xb0 [ 371.280799] __vfs_write+0x105/0x6b0 [ 371.280800] vfs_write+0x198/0x500 [ 371.280802] SyS_write+0xfd/0x230 [ 371.280804] do_syscall_64+0x1e8/0x640 [ 371.280807] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 371.280808] [ 371.280809] -> #1 (&port_lock_key){-.-.}: [ 371.280816] lock_acquire+0x16f/0x430 [ 371.280818] _raw_spin_lock_irqsave+0x95/0xcd [ 371.280820] serial8250_console_write+0x709/0x930 [ 371.280823] univ8250_console_write+0x5f/0x70 [ 371.280825] console_unlock+0x9ba/0xed0 [ 371.280827] vprintk_emit+0x1f9/0x600 [ 371.280829] vprintk_default+0x28/0x30 [ 371.280831] vprintk_func+0x5d/0x159 [ 371.280832] printk+0x9e/0xbc [ 371.280834] register_console+0x614/0x9e0 [ 371.280836] univ8250_console_init+0x33/0x3f [ 371.280838] console_init+0x4d/0x5d [ 371.280840] start_kernel+0x43c/0x6fd [ 371.280843] x86_64_start_reservations+0x29/0x2b [ 371.280845] x86_64_start_kernel+0x77/0x7b [ 371.280847] secondary_startup_64+0xa5/0xb0 [ 371.280848] [ 371.280849] -> #0 (console_owner){-.-.}: [ 371.280856] __lock_acquire+0x2cb3/0x4620 [ 371.280858] lock_acquire+0x16f/0x430 [ 371.280860] vprintk_emit+0x32e/0x600 [ 371.280862] vprintk_default+0x28/0x30 [ 371.280864] vprintk_func+0x5d/0x159 [ 371.280866] printk+0x9e/0xbc [ 371.280868] should_fail.cold+0xe4/0x159 [ 371.280870] should_failslab+0xdb/0x130 [ 371.280872] __kmalloc+0x71/0x7a0 [ 371.280874] __tty_buffer_request_room+0x1a4/0x500 [ 371.280877] tty_insert_flip_string_fixed_flag+0x8a/0x1c0 [ 371.280879] pty_write+0x113/0x1d0 [ 371.280881] n_tty_write+0x38b/0xee0 [ 371.280883] tty_write+0x3f6/0x700 [ 371.280885] __vfs_write+0x105/0x6b0 [ 371.280887] vfs_write+0x198/0x500 [ 371.280889] SyS_write+0xfd/0x230 [ 371.280891] do_syscall_64+0x1e8/0x640 [ 371.280893] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 371.280894] [ 371.280896] other info that might help us debug this: [ 371.280898] [ 371.280899] Chain exists of: [ 371.280900] console_owner --> &port_lock_key --> &(&port->lock)->rlock [ 371.280909] [ 371.280912] Possible unsafe locking scenario: [ 371.280913] [ 371.280915] CPU0 CPU1 [ 371.280917] ---- ---- [ 371.280918] lock(&(&port->lock)->rlock); [ 371.280923] lock(&port_lock_key); [ 371.280928] lock(&(&port->lock)->rlock); [ 371.280932] lock(console_owner); [ 371.280936] [ 371.280938] *** DEADLOCK *** [ 371.280939] [ 371.280941] 5 locks held by syz-executor.5/16667: [ 371.280942] #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 [ 371.280949] #1: (&tty->atomic_write_lock){+.+.}, at: [] tty_write_lock+0x20/0x60 [ 371.280958] #2: (&o_tty->termios_rwsem/1){++++}, at: [] n_tty_write+0xb35/0xee0 [ 371.280966] #3: (&ldata->output_lock){+.+.}, at: [] n_tty_write+0x48a/0xee0 [ 371.280974] #4: (&(&port->lock)->rlock){-.-.}, at: [] pty_write+0xe0/0x1d0 [ 371.280981] [ 371.280983] stack backtrace: [ 371.280986] CPU: 1 PID: 16667 Comm: syz-executor.5 Not tainted 4.14.158-syzkaller #0 [ 371.280990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 371.280992] Call Trace: [ 371.280993] dump_stack+0x142/0x197 [ 371.280995] ? vprintk_func+0x65/0x159 [ 371.280998] print_circular_bug.isra.0.cold+0x1cc/0x28f [ 371.281000] __lock_acquire+0x2cb3/0x4620 [ 371.281002] ? trace_hardirqs_on+0x10/0x10 [ 371.281004] ? save_trace+0x290/0x290 [ 371.281006] ? vprintk_emit+0x309/0x600 [ 371.281008] lock_acquire+0x16f/0x430 [ 371.281015] ? vprintk_emit+0x2f1/0x600 [ 371.281017] vprintk_emit+0x32e/0x600 [ 371.281019] ? vprintk_emit+0x2f1/0x600 [ 371.281021] vprintk_default+0x28/0x30 [ 371.281022] vprintk_func+0x5d/0x159 [ 371.281024] ? save_trace+0x290/0x290 [ 371.281026] printk+0x9e/0xbc [ 371.281028] ? show_regs_print_info+0x63/0x63 [ 371.281030] ? ___ratelimit+0x55/0x537 [ 371.281032] should_fail.cold+0xe4/0x159 [ 371.281034] should_failslab+0xdb/0x130 [ 371.281036] __kmalloc+0x71/0x7a0 [ 371.281039] ? __mutex_lock+0x36a/0x1470 [ 371.281041] ? save_trace+0x290/0x290 [ 371.281043] ? usleep_range+0x130/0x130 [ 371.281045] ? __tty_buffer_request_room+0x1a4/0x500 [ 371.281048] __tty_buffer_request_room+0x1a4/0x500 [ 371.281050] tty_insert_flip_string_fixed_flag+0x8a/0x1c0 [ 371.281052] pty_write+0x113/0x1d0 [ 371.281054] ? pty_stop+0x1a0/0x1a0 [ 371.281056] n_tty_write+0x38b/0xee0 [ 371.281058] ? process_echoes+0x150/0x150 [ 371.281060] ? do_wait_intr_irq+0x2a0/0x2a0 [ 371.281062] ? kasan_check_write+0x14/0x20 [ 371.281065] ? _copy_from_user+0x99/0x110 [ 371.281067] tty_write+0x3f6/0x700 [ 371.281069] ? process_echoes+0x150/0x150 [ 371.281071] __vfs_write+0x105/0x6b0 [ 371.281073] ? tty_read+0x270/0x270 [ 371.281074] ? kernel_read+0x120/0x120 [ 371.281077] ? __inode_security_revalidate+0xd6/0x130 [ 371.281079] ? avc_policy_seqno+0x9/0x20 [ 371.281081] ? selinux_file_permission+0x85/0x480 [ 371.281084] ? security_file_permission+0x89/0x1f0 [ 371.281086] ? rw_verify_area+0xea/0x2b0 [ 371.281088] vfs_write+0x198/0x500 [ 371.281090] SyS_write+0xfd/0x230 [ 371.281092] ? SyS_read+0x230/0x230 [ 371.281094] ? do_syscall_64+0x53/0x640 [ 371.281096] ? SyS_read+0x230/0x230 [ 371.281098] do_syscall_64+0x1e8/0x640 [ 371.281100] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 371.281102] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 371.281104] RIP: 0033:0x45a6f9 [ 371.281106] RSP: 002b:00007f38654bec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 371.281111] RAX: ffffffffffffffda RBX: 00007f38654bec90 RCX: 000000000045a6f9 [ 371.281114] RDX: 00000000ffffffde RSI: 00000000200001c0 RDI: 0000000000000003 [ 371.281117] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 371.281120] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f38654bf6d4 [ 371.281123] R13: 00000000004cb6e7 R14: 00000000004e5090 R15: 0000000000000007 [ 371.284061] kobject: 'loop1' (ffff8880a4074c20): kobject_uevent_env [ 371.288803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 371.294638] kobject: 'loop1' (ffff8880a4074c20): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 371.296982] Call Trace: [ 371.297001] dump_stack+0x142/0x197 [ 371.297018] should_fail.cold+0x10f/0x159 [ 372.104759] ? mempool_free+0x1d0/0x1d0 [ 372.108824] should_failslab+0xdb/0x130 [ 372.112813] kmem_cache_alloc+0x47/0x780 [ 372.116881] ? mempool_free+0x1d0/0x1d0 [ 372.120848] mempool_alloc_slab+0x47/0x60 [ 372.124985] mempool_alloc+0x138/0x300 [ 372.128875] ? remove_element.isra.0+0x1b0/0x1b0 [ 372.133695] ? __getblk_gfp+0x5c/0x7c0 [ 372.137591] ? trace_hardirqs_on+0x10/0x10 [ 372.142139] ? __kernel_text_address+0xd/0x40 [ 372.146794] bio_alloc_bioset+0x368/0x680 [ 372.151073] ? bvec_alloc+0x2e0/0x2e0 [ 372.154884] submit_bh_wbc+0xf6/0x720 [ 372.158770] __sync_dirty_buffer+0xcf/0x260 [ 372.163299] sync_dirty_buffer+0x1b/0x20 [ 372.167421] __ext4_handle_dirty_metadata+0x16e/0x470 [ 372.172802] ext4_handle_dirty_dirent_node+0x35b/0x480 [ 372.178095] ? ext4_rename_dir_prepare+0x3f0/0x3f0 [ 372.183027] ext4_delete_entry+0x2e4/0x430 [ 372.187299] ? ext4_generic_delete_entry+0x350/0x350 [ 372.192493] ? __ext4_journal_start_sb+0x105/0x450 [ 372.197411] ? ext4_unlink+0x37d/0xe90 [ 372.201306] ext4_unlink+0x4cc/0xe90 [ 372.205455] ? lock_acquire+0x16f/0x430 [ 372.210471] ? ext4_rmdir+0xa60/0xa60 [ 372.214265] ? selinux_inode_unlink+0x23/0x30 [ 372.218753] ? security_inode_unlink+0xdd/0x120 [ 372.223432] vfs_unlink+0x281/0x480 [ 372.227141] do_unlinkat+0x33d/0x600 [ 372.230959] ? do_rmdir+0x390/0x390 [ 372.234578] ? fput+0xd4/0x150 [ 372.237767] ? SyS_write+0x15e/0x230 [ 372.242472] ? SyS_unlinkat+0x80/0x80 [ 372.246276] SyS_unlink+0x1b/0x20 [ 372.249745] do_syscall_64+0x1e8/0x640 [ 372.253743] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 372.258609] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 372.263805] RIP: 0033:0x45a6f9 [ 372.267092] RSP: 002b:00007f14315aec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 372.274906] RAX: ffffffffffffffda RBX: 00007f14315aec90 RCX: 000000000045a6f9 [ 372.282542] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 372.290219] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 22:45:10 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe95bfbf356fd281b47985fdc0efb10040001b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) r6 = creat(&(0x7f00000017c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB="eca7e3", @ANYRESHEX=r6, @ANYBLOB=',\x00']) ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5) 22:45:11 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x7, 0x3, 0x400000bff}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) [ 372.297518] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f14315af6d4 [ 372.304866] R13: 00000000004c77e4 R14: 00000000004e49b8 R15: 0000000000000003 [ 372.323595] kobject: 'loop5' (ffff8880a41c16a0): kobject_uevent_env [ 372.324919] FAULT_INJECTION: forcing a failure. [ 372.324919] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 372.340568] kobject: 'loop5' (ffff8880a41c16a0): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 372.342217] CPU: 0 PID: 16679 Comm: syz-executor.1 Not tainted 4.14.158-syzkaller #0 [ 372.342225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 372.342230] Call Trace: [ 372.358467] kobject: 'loop4' (ffff8880a4159620): kobject_uevent_env [ 372.359883] dump_stack+0x142/0x197 [ 372.359898] should_fail.cold+0x10f/0x159 [ 372.359914] __alloc_pages_nodemask+0x1d6/0x7a0 [ 372.380322] kobject: 'loop4' (ffff8880a4159620): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 372.381756] ? proc_fail_nth_write+0x7d/0x180 [ 372.381766] ? proc_cwd_link+0x1b0/0x1b0 [ 372.413258] ? __alloc_pages_slowpath+0x2930/0x2930 [ 372.418301] cache_grow_begin+0x80/0x400 [ 372.422376] kmem_cache_alloc+0x6a6/0x780 [ 372.427880] ? __mutex_unlock_slowpath+0x71/0x800 [ 372.432749] ? check_preemption_disabled+0x3c/0x250 [ 372.437906] getname_flags+0xcb/0x580 [ 372.441800] SyS_symlink+0x68/0x210 [ 372.445776] ? SyS_write+0x15e/0x230 [ 372.449635] ? SyS_symlinkat+0x210/0x210 [ 372.454030] ? SyS_symlinkat+0x210/0x210 [ 372.458187] do_syscall_64+0x1e8/0x640 [ 372.462175] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 372.467984] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 372.473176] RIP: 0033:0x45a6f9 [ 372.476447] RSP: 002b:00007f5d50c13c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 372.484238] RAX: ffffffffffffffda RBX: 00007f5d50c13c90 RCX: 000000000045a6f9 [ 372.491531] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000020000140 22:45:11 executing program 2: symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') unlink(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f00000017c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) recvfrom$x25(r0, &(0x7f0000000080)=""/129, 0x81, 0x1000, &(0x7f0000000000)={0x9, @null=' \x00'}, 0x12) [ 372.498808] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 372.506067] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5d50c146d4 [ 372.514295] R13: 00000000004ca8dd R14: 00000000004e3c50 R15: 0000000000000003 22:45:11 executing program 1 (fault-call:0 fault-nth:2): symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') 22:45:11 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)="9c", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000007ac0)={0x0, 0x0, &(0x7f0000007a40)=[{&(0x7f0000007700)="93", 0x1}], 0x1}, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x210602, 0x0) r2 = creat(&(0x7f00000017c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000000040)={r6}, 0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0xf790, 0x8012, 0xffffffff, 0x8, r6}, &(0x7f0000000140)=0x10) fsetxattr$security_smack_transmute(r1, &(0x7f0000000040)='security.SMACK64TRANSMUTE\x00', &(0x7f00000000c0)='TRUE', 0x4, 0x0) close(r0) [ 372.544034] kobject: 'loop2' (ffff8880a40e1520): kobject_uevent_env [ 372.556377] kobject: 'loop2' (ffff8880a40e1520): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 372.579567] kobject: 'loop0' (ffff8880a4010320): kobject_uevent_env [ 372.597016] kobject: 'loop0' (ffff8880a4010320): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 372.611340] FAULT_INJECTION: forcing a failure. [ 372.611340] name failslab, interval 1, probability 0, space 0, times 0 [ 372.613718] kobject: 'loop3' (ffff8880a40fb5a0): kobject_uevent_env [ 372.628383] CPU: 0 PID: 16694 Comm: syz-executor.1 Not tainted 4.14.158-syzkaller #0 [ 372.633161] kobject: 'loop3' (ffff8880a40fb5a0): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 372.637415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 372.637419] Call Trace: [ 372.637440] dump_stack+0x142/0x197 [ 372.637459] should_fail.cold+0x10f/0x159 [ 372.648203] kobject: 'loop1' (ffff8880a4074c20): kobject_uevent_env [ 372.656726] should_failslab+0xdb/0x130 [ 372.656735] kmem_cache_alloc+0x2d7/0x780 [ 372.656744] ? __d_lookup+0x3a2/0x670 [ 372.656755] ? lock_acquire+0x16f/0x430 [ 372.656762] ? lock_downgrade+0x740/0x740 [ 372.656769] __d_alloc+0x2d/0x9f0 [ 372.656777] d_alloc+0x4d/0x270 [ 372.656787] __lookup_hash+0x58/0x180 [ 372.656795] filename_create+0x16c/0x430 [ 372.656803] ? kern_path_mountpoint+0x40/0x40 [ 372.656815] SyS_symlink+0xc4/0x210 [ 372.661245] kobject: 'loop1' (ffff8880a4074c20): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 372.663023] ? SyS_symlinkat+0x210/0x210 [ 372.663033] ? SyS_symlinkat+0x210/0x210 [ 372.735441] do_syscall_64+0x1e8/0x640 [ 372.739435] ? trace_hardirqs_off_thunk+0x1a/0x1c 22:45:11 executing program 0: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) [ 372.744324] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 372.749541] RIP: 0033:0x45a6f9 [ 372.752742] RSP: 002b:00007f5d50c13c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 372.760537] RAX: ffffffffffffffda RBX: 00007f5d50c13c90 RCX: 000000000045a6f9 [ 372.767942] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000020000140 [ 372.775216] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 372.782579] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5d50c146d4 [ 372.789838] R13: 00000000004ca8dd R14: 00000000004e3c50 R15: 0000000000000003 22:45:12 executing program 1 (fault-call:0 fault-nth:3): symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') 22:45:12 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)="9c", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000007ac0)={0x0, 0x0, &(0x7f0000007a40)=[{&(0x7f0000007700)="93", 0x1}], 0x1}, 0x0) socket$alg(0x26, 0x5, 0x0) socket$kcm(0x29, 0x5, 0x0) close(r0) [ 372.809586] kobject: 'loop0' (ffff8880a4010320): kobject_uevent_env [ 372.818615] kobject: 'loop0' (ffff8880a4010320): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 372.838745] kobject: 'loop1' (ffff8880a4074c20): kobject_uevent_env 22:45:12 executing program 0: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) 22:45:12 executing program 2: r0 = creat(&(0x7f00000017c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r2 = creat(&(0x7f00000017c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) ioctl$USBDEVFS_GETDRIVER(r2, 0x41045508, &(0x7f0000000300)={0x3, "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"}) r4 = getpid() sched_setattr(r4, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r5 = syz_open_procfs(r4, &(0x7f0000000000)='net/tcp6\x00') setsockopt$netlink_NETLINK_NO_ENOBUFS(r5, 0x10e, 0x5, &(0x7f0000000100)=0x7, 0x4) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000080)=[@in6={0xa, 0x4e23, 0x7f, @remote, 0x7f}, @in6={0xa, 0x4e24, 0x9, @empty}, @in6={0xa, 0x4e22, 0x7fffffff, @remote, 0x100}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x24}}], 0x64) symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') unlink(&(0x7f0000000040)='./file0\x00') [ 372.853599] kobject: 'loop1' (ffff8880a4074c20): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 372.874446] kobject: 'loop3' (ffff8880a40fb5a0): kobject_uevent_env [ 372.892010] kobject: 'loop3' (ffff8880a40fb5a0): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 372.913142] kobject: 'loop2' (ffff8880a40e1520): kobject_uevent_env [ 372.913928] FAULT_INJECTION: forcing a failure. [ 372.913928] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 372.928512] kobject: 'loop2' (ffff8880a40e1520): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 372.932775] CPU: 0 PID: 16713 Comm: syz-executor.1 Not tainted 4.14.158-syzkaller #0 [ 372.932784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 372.932786] Call Trace: [ 372.932805] dump_stack+0x142/0x197 [ 372.932824] should_fail.cold+0x10f/0x159 [ 372.932838] __alloc_pages_nodemask+0x1d6/0x7a0 [ 372.932846] ? proc_fail_nth_write+0x7d/0x180 [ 372.932859] ? __alloc_pages_slowpath+0x2930/0x2930 [ 372.945683] kobject: 'loop0' (ffff8880a4010320): kobject_uevent_env [ 372.951964] cache_grow_begin+0x80/0x400 [ 372.951972] kmem_cache_alloc+0x6a6/0x780 [ 372.951985] getname_flags+0xcb/0x580 [ 372.951995] SyS_symlink+0xad/0x210 [ 372.952002] ? SyS_symlinkat+0x210/0x210 [ 372.952010] ? SyS_symlinkat+0x210/0x210 [ 372.952021] do_syscall_64+0x1e8/0x640 [ 372.952029] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 372.952041] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 372.952052] RIP: 0033:0x45a6f9 [ 372.963556] kobject: 'loop0' (ffff8880a4010320): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 372.964238] RSP: 002b:00007f5d50c13c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 373.050769] RAX: ffffffffffffffda RBX: 00007f5d50c13c90 RCX: 000000000045a6f9 22:45:12 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)="9c", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000007ac0)={0x0, 0x0, &(0x7f0000007a40)=[{&(0x7f0000007700)="93", 0x1}], 0x1}, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') close(r0) [ 373.058028] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000020000140 [ 373.065383] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 373.072662] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5d50c146d4 [ 373.079942] R13: 00000000004ca8dd R14: 00000000004e3c50 R15: 0000000000000003 [ 373.099159] kobject: 'loop3' (ffff8880a40fb5a0): kobject_uevent_env [ 373.110989] kobject: 'loop3' (ffff8880a40fb5a0): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 373.126974] kobject: 'loop0' (ffff8880a4010320): kobject_uevent_env [ 373.133822] kobject: 'loop0' (ffff8880a4010320): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 373.153569] kobject: 'loop1' (ffff8880a4074c20): kobject_uevent_env [ 373.162653] kobject: 'loop1' (ffff8880a4074c20): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 373.174296] kobject: 'loop3' (ffff8880a40fb5a0): kobject_uevent_env [ 373.181153] kobject: 'loop3' (ffff8880a40fb5a0): fill_kobj_path: path = '/devices/virtual/block/loop3' 22:45:12 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff3"], 0x11) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) 22:45:12 executing program 0: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) 22:45:12 executing program 1 (fault-call:0 fault-nth:4): symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') 22:45:12 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)="9c", 0x1}], 0x1}, 0x0) socket$kcm(0x29, 0x2, 0x0) sendmsg(r0, &(0x7f0000007ac0)={0x0, 0x0, &(0x7f0000007a40)=[{&(0x7f0000007700)="93", 0x1}], 0x1}, 0x0) close(r0) 22:45:12 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x19, 0x5b}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd039abb0aa53f8e99b61d2837945f5549d6d5478000000058e071250ab81380d5357cabaf4ce1cb05a6b7deae46cadd427bcee8a54b668eb53e6c4c30a684d462cca5188b87882e3f9cdc7841e67698352959552996da0f598ae24d46e224845e2c4b183a969c2b13586040b221ecadb400369a92163243ab26e9b347d24bacd689ef42d162c67f5f4b45fe671d5e97f722b3a50fc9baf2a9e688857cd14e2d0604ded9176c25331b458acac18bc4fd96a234b1f8c022680c3cc27a84e03ee562e45b"], 0x22) r6 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x8, 0x500) ioctl$TCSETA(r6, 0x5406, &(0x7f0000000100)={0x1, 0x400, 0xa5, 0xd2, 0x7, 0x7, 0x4, 0x4e, 0x0, 0x8}) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) [ 373.343045] 9pnet: Insufficient options for proto=fd [ 373.360156] net_ratelimit: 20 callbacks suppressed [ 373.360160] protocol 88fb is buggy, dev hsr_slave_0 [ 373.368810] kobject: 'loop5' (ffff8880a41c16a0): kobject_uevent_env [ 373.370455] protocol 88fb is buggy, dev hsr_slave_1 [ 373.376828] kobject: 'loop5' (ffff8880a41c16a0): fill_kobj_path: path = '/devices/virtual/block/loop5' 22:45:12 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x7, 0x3, 0x400000bff}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) 22:45:12 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="2321242ea699b88bd75692f1f75f44f5e0c00405f879cf3681ddea2f6669c1b3b496faefe90baff356fd280747985fdc0e0010020001b2fd0d256bb2427bb50add425131aecefece24d0b0d1a18546e666f9c55534635d87cff3bfa1b6811ee06d52543b2d035cdd293df46efb154f69ed6a9eeed858bdc628293438aa6396b491e19293bd5aaa78"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) [ 373.409482] FAULT_INJECTION: forcing a failure. [ 373.409482] name failslab, interval 1, probability 0, space 0, times 0 [ 373.429780] kobject: 'loop4' (ffff8880a4159620): kobject_uevent_env [ 373.437425] CPU: 0 PID: 16736 Comm: syz-executor.1 Not tainted 4.14.158-syzkaller #0 [ 373.445528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 22:45:12 executing program 3: r0 = creat(&(0x7f00000017c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) write$binfmt_elf64(r1, &(0x7f0000000700)={{0x7f, 0x45, 0x4c, 0x46, 0x3f, 0x8, 0x6, 0x0, 0x5, 0x0, 0x3, 0x4d, 0x174, 0x40, 0x3b6, 0xb2f, 0x80, 0x38, 0x1, 0xf1, 0x2}, [{0x4, 0x720, 0x3e05, 0x40, 0x7f, 0x3, 0x23, 0xfff}], "7421452ef75837dcfe3eccc61b658ca1114701f2abb5f42e7ab6f2d489b771d2e27fa98a8fef8e9dac2afa00fd401016407b45d90b90beae01a76b09f9102b97ed16d060a8cea5ce737b15d720bd50c2bc1b4e26557a3390151d2f48ee998db24f96cabbc31c09ead21a4f3ea145bb3ea63b5284974dbc81698fb41e12d949ddf2069f953ed19726b6f63ee97b068cb97e369a3bc669493b0b84c4734cefbc035e0db13b6f8cee0e", [[], [], [], [], []]}, 0x620) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)="9c", 0x1}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000007ac0)={0x0, 0x0, &(0x7f0000007a40)}, 0x200809c0) close(0xffffffffffffffff) [ 373.452179] kobject: 'loop4' (ffff8880a4159620): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 373.455678] Call Trace: [ 373.455706] dump_stack+0x142/0x197 [ 373.455724] should_fail.cold+0x10f/0x159 [ 373.455747] should_failslab+0xdb/0x130 [ 373.484283] kmem_cache_alloc+0x2d7/0x780 [ 373.488445] ? __d_lookup+0x3a2/0x670 [ 373.492417] ? lock_acquire+0x16f/0x430 [ 373.496601] ? lock_downgrade+0x740/0x740 [ 373.500863] __d_alloc+0x2d/0x9f0 [ 373.504408] d_alloc+0x4d/0x270 [ 373.507703] __lookup_hash+0x58/0x180 [ 373.511496] filename_create+0x16c/0x430 [ 373.515822] ? kern_path_mountpoint+0x40/0x40 [ 373.520478] SyS_symlink+0xc4/0x210 [ 373.524125] ? SyS_symlinkat+0x210/0x210 [ 373.528341] ? SyS_symlinkat+0x210/0x210 [ 373.533413] do_syscall_64+0x1e8/0x640 [ 373.537302] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 373.542221] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 373.547462] RIP: 0033:0x45a6f9 [ 373.550845] RSP: 002b:00007f5d50c13c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 373.558859] RAX: ffffffffffffffda RBX: 00007f5d50c13c90 RCX: 000000000045a6f9 [ 373.566337] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000020000140 [ 373.574142] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 373.581504] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5d50c146d4 [ 373.588789] R13: 00000000004ca8dd R14: 00000000004e3c50 R15: 0000000000000003 [ 373.600100] protocol 88fb is buggy, dev hsr_slave_0 [ 373.605234] protocol 88fb is buggy, dev hsr_slave_1 22:45:12 executing program 1 (fault-call:0 fault-nth:5): symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') 22:45:12 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x7, 0x3, 0x400000bff}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) [ 373.621766] kobject: 'loop0' (ffff8880a4010320): kobject_uevent_env [ 373.642806] kobject: 'loop0' (ffff8880a4010320): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 373.658342] kobject: 'loop5' (ffff8880a41c16a0): kobject_uevent_env [ 373.666932] kobject: 'loop5' (ffff8880a41c16a0): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 373.672908] FAULT_INJECTION: forcing a failure. [ 373.672908] name failslab, interval 1, probability 0, space 0, times 0 [ 373.677486] kobject: 'loop3' (ffff8880a40fb5a0): kobject_uevent_env [ 373.692353] CPU: 0 PID: 16753 Comm: syz-executor.1 Not tainted 4.14.158-syzkaller #0 [ 373.694920] kobject: 'loop3' (ffff8880a40fb5a0): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 373.702408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 373.702414] Call Trace: [ 373.702442] dump_stack+0x142/0x197 [ 373.702459] should_fail.cold+0x10f/0x159 [ 373.702477] should_failslab+0xdb/0x130 [ 373.712743] kobject: 'loop1' (ffff8880a4074c20): kobject_uevent_env [ 373.721407] kmem_cache_alloc+0x2d7/0x780 [ 373.721485] ? ext4_sync_fs+0x800/0x800 [ 373.721496] ext4_alloc_inode+0x1d/0x610 [ 373.724290] kobject: 'loop1' (ffff8880a4074c20): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 373.727886] alloc_inode+0x64/0x180 [ 373.768406] new_inode_pseudo+0x19/0xf0 [ 373.772516] new_inode+0x1f/0x40 [ 373.775886] __ext4_new_inode+0x32c/0x4860 [ 373.780111] ? ext4_free_inode+0x1210/0x1210 [ 373.784507] ? may_create+0x1f6/0x420 [ 373.788442] ? dquot_get_next_dqblk+0x160/0x160 [ 373.793107] ? selinux_dentry_init_security+0x220/0x220 [ 373.798466] ext4_symlink+0x548/0xa80 [ 373.802266] vfs_symlink+0x322/0x560 [ 373.805970] SyS_symlink+0x193/0x210 [ 373.809679] ? SyS_symlinkat+0x210/0x210 [ 373.813773] ? SyS_symlinkat+0x210/0x210 [ 373.817841] do_syscall_64+0x1e8/0x640 [ 373.821715] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 373.826555] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 373.831935] RIP: 0033:0x45a6f9 [ 373.835112] RSP: 002b:00007f5d50c13c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 373.842920] RAX: ffffffffffffffda RBX: 00007f5d50c13c90 RCX: 000000000045a6f9 [ 373.850277] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000020000140 [ 373.858121] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 373.865603] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5d50c146d4 [ 373.874873] R13: 00000000004ca8dd R14: 00000000004e3c50 R15: 0000000000000003 [ 373.891546] kobject: 'loop0' (ffff8880a4010320): kobject_uevent_env [ 373.898718] kobject: 'loop0' (ffff8880a4010320): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 373.923161] kobject: 'loop1' (ffff8880a4074c20): kobject_uevent_env [ 373.930435] kobject: 'loop1' (ffff8880a4074c20): fill_kobj_path: path = '/devices/virtual/block/loop1' 22:45:13 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x7, 0x3, 0x400000bff}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) 22:45:13 executing program 1 (fault-call:0 fault-nth:6): symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') [ 374.026338] kobject: 'loop2' (ffff8880a40e1520): kobject_uevent_env [ 374.028192] FAULT_INJECTION: forcing a failure. [ 374.028192] name failslab, interval 1, probability 0, space 0, times 0 [ 374.034823] kobject: 'loop2' (ffff8880a40e1520): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 374.047376] CPU: 1 PID: 16768 Comm: syz-executor.1 Not tainted 4.14.158-syzkaller #0 [ 374.062342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 374.066817] kobject: 'loop0' (ffff8880a4010320): kobject_uevent_env [ 374.071887] Call Trace: [ 374.071905] dump_stack+0x142/0x197 [ 374.071920] should_fail.cold+0x10f/0x159 [ 374.071932] should_failslab+0xdb/0x130 [ 374.071940] kmem_cache_alloc+0x2d7/0x780 [ 374.071947] ? __debug_object_init+0x171/0x8e0 [ 374.071954] ? kasan_kmalloc+0xce/0xf0 [ 374.071967] selinux_inode_alloc_security+0xb6/0x2a0 [ 374.071976] security_inode_alloc+0x94/0xd0 [ 374.071990] inode_init_always+0x552/0xaf0 [ 374.083044] kobject: 'loop0' (ffff8880a4010320): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 374.085396] alloc_inode+0x81/0x180 [ 374.085408] new_inode_pseudo+0x19/0xf0 [ 374.139187] new_inode+0x1f/0x40 [ 374.142709] __ext4_new_inode+0x32c/0x4860 [ 374.146944] ? ext4_free_inode+0x1210/0x1210 [ 374.151359] ? may_create+0x1f6/0x420 [ 374.155150] ? dquot_get_next_dqblk+0x160/0x160 [ 374.159915] ? selinux_dentry_init_security+0x220/0x220 [ 374.165279] ext4_symlink+0x548/0xa80 [ 374.169080] vfs_symlink+0x322/0x560 [ 374.172793] SyS_symlink+0x193/0x210 [ 374.176617] ? SyS_symlinkat+0x210/0x210 [ 374.180688] ? SyS_symlinkat+0x210/0x210 [ 374.184847] do_syscall_64+0x1e8/0x640 [ 374.189084] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 374.193933] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 374.199115] RIP: 0033:0x45a6f9 [ 374.202301] RSP: 002b:00007f5d50c13c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 374.210169] RAX: ffffffffffffffda RBX: 00007f5d50c13c90 RCX: 000000000045a6f9 [ 374.217445] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000020000140 22:45:13 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB], 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) 22:45:13 executing program 2: symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') r0 = creat(&(0x7f00000017c0)='./file0\x00', 0x0) bind(r0, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @rand_addr=0x7}, 0x2, 0x3, 0x0, 0x3}}, 0x80) remap_file_pages(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000000, 0xd72, 0x100000) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0xc0305302, &(0x7f0000000000)={0x7, 0x7ff, 0x1, 0x10001, 0x7fffffff, 0x1}) unlink(&(0x7f0000000040)='./file0\x00') 22:45:13 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x0, 0x3, 0x400000bff}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) 22:45:13 executing program 1 (fault-call:0 fault-nth:7): symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') [ 374.225523] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 374.233014] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5d50c146d4 [ 374.240501] R13: 00000000004ca8dd R14: 00000000004e3c50 R15: 0000000000000003 [ 374.266858] kobject: 'loop1' (ffff8880a4074c20): kobject_uevent_env [ 374.274901] kobject: 'loop1' (ffff8880a4074c20): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 374.296070] mmap: syz-executor.2 (16775) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.txt. [ 374.296414] kobject: 'loop4' (ffff8880a4159620): kobject_uevent_env [ 374.317023] FAULT_INJECTION: forcing a failure. 22:45:13 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x0, 0x3, 0x400000bff}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) [ 374.317023] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 374.328315] kobject: 'loop4' (ffff8880a4159620): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 374.329213] protocol 88fb is buggy, dev hsr_slave_0 [ 374.343754] protocol 88fb is buggy, dev hsr_slave_1 [ 374.350700] CPU: 0 PID: 16779 Comm: syz-executor.1 Not tainted 4.14.158-syzkaller #0 [ 374.358843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 374.368369] Call Trace: [ 374.371144] dump_stack+0x142/0x197 [ 374.376082] should_fail.cold+0x10f/0x159 [ 374.380316] ? __might_sleep+0x93/0xb0 [ 374.384291] __alloc_pages_nodemask+0x1d6/0x7a0 [ 374.388951] ? __alloc_pages_slowpath+0x2930/0x2930 [ 374.394034] alloc_pages_current+0xec/0x1e0 [ 374.398352] __page_cache_alloc+0x248/0x3e0 [ 374.402798] pagecache_get_page+0x17c/0x9e0 [ 374.407120] ? ext4_meta_trans_blocks+0x210/0x2c0 [ 374.411981] grab_cache_page_write_begin+0x74/0xa0 [ 374.416911] ext4_write_begin+0x214/0x1290 [ 374.421153] ? ext4_mark_inode_dirty+0x1fb/0x860 22:45:13 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x80, 0x0) r1 = creat(&(0x7f00000017c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100)={0xffffffffffffffff}, 0x0, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f00000002c0)={0xa, 0x4, 0xfa00, {r3}}, 0xc) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r5, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r5, 0x40045431, &(0x7f00000000c0)) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup2(r6, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = syz_open_pts(r5, 0x4000000000000002) r9 = semget$private(0x0, 0x3, 0xce42db9a6d9ec3d9) semctl$GETALL(r9, 0x0, 0xd, &(0x7f0000000200)=""/191) r10 = dup3(r8, r4, 0x0) ioctl$TCXONC(r10, 0x540a, 0x0) write$binfmt_script(r5, &(0x7f0000002b80)=ANY=[@ANYBLOB="232169985fdc0e0010020401b2fd0d00000000"], 0x22) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$P9_RATTACH(r4, &(0x7f00000001c0)={0x14}, 0xffffffde) mq_timedreceive(r0, &(0x7f0000000300)=""/105, 0x69, 0x7, &(0x7f0000000380)={0x0, 0x1c9c380}) ioctl$TCXONC(r10, 0x540a, 0x1) [ 374.425953] ? __ext4_new_inode+0x27b0/0x4860 [ 374.430670] ? ext4_truncate+0x11f0/0x11f0 [ 374.435267] ? lock_downgrade+0x740/0x740 [ 374.439433] ext4_da_write_begin+0x4fb/0xea0 [ 374.444622] ? __ext4_new_inode+0x24a/0x4860 [ 374.449019] ? ext4_write_begin+0x1290/0x1290 [ 374.453751] pagecache_write_begin+0x84/0xc0 [ 374.458190] __page_symlink+0x16e/0x1e0 [ 374.462866] ? page_get_link+0x4b0/0x4b0 [ 374.466924] ? __ext4_journal_stop+0xea/0x1c0 [ 374.471591] ext4_symlink+0x6eb/0xa80 [ 374.475508] vfs_symlink+0x322/0x560 [ 374.479224] SyS_symlink+0x193/0x210 [ 374.483220] ? SyS_symlinkat+0x210/0x210 [ 374.487352] ? SyS_symlinkat+0x210/0x210 [ 374.491444] do_syscall_64+0x1e8/0x640 [ 374.495327] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 374.500178] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 374.505364] RIP: 0033:0x45a6f9 [ 374.508537] RSP: 002b:00007f5d50c13c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 374.516234] RAX: ffffffffffffffda RBX: 00007f5d50c13c90 RCX: 000000000045a6f9 22:45:13 executing program 2: symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') unlink(&(0x7f0000000040)='./file0\x00') lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)) [ 374.523606] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000020000140 [ 374.530885] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 374.538159] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5d50c146d4 [ 374.545429] R13: 00000000004ca8dd R14: 00000000004e3c50 R15: 0000000000000003 [ 374.553144] protocol 88fb is buggy, dev hsr_slave_0 [ 374.558363] protocol 88fb is buggy, dev hsr_slave_1 [ 374.574029] kobject: 'loop0' (ffff8880a4010320): kobject_uevent_env [ 374.581110] kobject: 'loop0' (ffff8880a4010320): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 374.596353] kobject: 'loop5' (ffff8880a41c16a0): kobject_uevent_env [ 374.617943] kobject: 'loop5' (ffff8880a41c16a0): fill_kobj_path: path = '/devices/virtual/block/loop5' 22:45:13 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000340), 0x1, 0x0, 0xfffffffffffffe50}, 0x4000020) sendmsg(r0, &(0x7f0000007ac0)={0x0, 0x0, &(0x7f0000007a40)=[{&(0x7f0000007700)="93", 0x1}], 0x1}, 0x0) r1 = creat(&(0x7f00000017c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240), 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x800482, &(0x7f0000001800)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYRES16, @ANYPTR64, @ANYBLOB="a3d7671897114321b4c4f7ea800334a23cb37b756a1b14ba36b2d1deae191d23918d2b7b13c82caee074601362e2f6dc3ea6595cbef418ef0cce45bf", @ANYBLOB="882e76cb01aa711eaa08c2dd3d74775dc2f5afcf6d63609bc93f8d2e62a380d9a2b33274a10926d23fb94e5f5505da1375ae1efc110e116de839b849703a18c6def37f30f2a8814cd9d219807505002a8387fa3b17c23cf703cee1eea41727b62e7bbe5bf2f088f20944e1f9cdb8c36b9d370fe3d191fecf8b84aa4b806d468b101fda75"], @ANYBLOB="2c7766246e6f3d28bf7bfa169b1a6f526b9f96e19de4301610fe67adefa8ca5a4118e03dd620b6b0ff70e5ad707d4528a2b9357737c31c654cdc385b153beb1c6c7ec2991486fbdb910d15a79d3e971de9112a48e258c567e6ae1918e83d148dbe12a7beae175276c6dcbe31f08c6bfc5d03eda4986ac4f915d7382fee36b7c7645f1e52757be8bf7468981767eade59780118c7427bdaaef3b939a1ce56969500959d2ab87e6f6aee17cbe71391a3d66107df51fdc924ec8e4fdc379e715cdbcbdce2748765e102139b11a88b1a597a073c55ba670ad1a8c804", @ANYRESHEX=r1, @ANYBLOB=',\x00']) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000001c0)="3e08215d154cec343fe0f14d2f43e179e3ec4f57e0f2852fc3dec90bf4bd85a8764737d22448906d259910b02431399faf301e9e14f0a3190bf70a47165004ff02c8fb11ef15755635d51a5ff2386663fb398fb3a6499903a6c92ae9d85ee5be78", 0x61) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x10) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f0000000280)={0x2}) sendmsg$tipc(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="3fd33670c85ba1e1063327767258ee69e8e54414d95e1e69ffad67892745afb588e5c38539a053f843639565bb9733775aa92bcfedfd00383a5512e2f1", 0x3d}], 0x1, &(0x7f00000000c0)="05d449b9b3484b71fd16aa8cdc8027fcdeba8f177ff2ef9f22d48a9cf48714ef21112f1fb0d05d051f618e144ac25cfebab818ce54224b76e21114a60a90715431716896c3e6def016c8367b5577c749d813f180731888d3645e14d8651d93b071d82c5a1c0a3668e3cbbe64b5718d497ffb326ab29c0af6579c5d48790a9777", 0x80, 0x12000800}, 0x800) close(r0) 22:45:13 executing program 1 (fault-call:0 fault-nth:8): symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') 22:45:13 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x0, 0x3, 0x400000bff}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) 22:45:13 executing program 2: symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x200200, 0x0) ioctl$FBIOGET_CON2FBMAP(r0, 0x460f, &(0x7f0000000080)={0x37, 0x1}) unlink(&(0x7f0000000040)='./file0\x00') r1 = creat(&(0x7f00000017c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f00000001c0)={0x0, @nfc={0x27, 0x0, 0x0, 0xc}, @generic={0x11, "7e63c6893fd7a59f6d283bdab45c"}, @sco={0x1f, {0x9, 0x2, 0xd6, 0x3f, 0x3, 0x34}}, 0x15, 0x0, 0x0, 0x0, 0x2, &(0x7f00000000c0)='veth1_to_bond\x00', 0x6, 0x5, 0xae5d}) [ 374.635008] kobject: 'loop1' (ffff8880a4074c20): kobject_uevent_env [ 374.644827] kobject: 'loop1' (ffff8880a4074c20): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 374.668657] kobject: 'loop2' (ffff8880a40e1520): kobject_uevent_env 22:45:13 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x7, 0x0, 0x400000bff}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) [ 374.678029] kobject: 'loop2' (ffff8880a40e1520): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 374.691596] FAULT_INJECTION: forcing a failure. [ 374.691596] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 374.706127] 9pnet: Insufficient options for proto=fd [ 374.711335] kobject: 'loop0' (ffff8880a4010320): kobject_uevent_env [ 374.718174] 9pnet: Insufficient options for proto=fd [ 374.718626] kobject: 'loop0' (ffff8880a4010320): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 374.723489] protocol 88fb is buggy, dev hsr_slave_0 [ 374.723530] protocol 88fb is buggy, dev hsr_slave_1 [ 374.746401] CPU: 1 PID: 16802 Comm: syz-executor.1 Not tainted 4.14.158-syzkaller #0 [ 374.754414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 374.763951] Call Trace: [ 374.766555] dump_stack+0x142/0x197 [ 374.767201] kobject: 'loop3' (ffff8880a40fb5a0): kobject_uevent_env [ 374.770203] should_fail.cold+0x10f/0x159 [ 374.770217] ? __might_sleep+0x93/0xb0 [ 374.770230] __alloc_pages_nodemask+0x1d6/0x7a0 [ 374.770245] ? __alloc_pages_slowpath+0x2930/0x2930 [ 374.777037] kobject: 'loop3' (ffff8880a40fb5a0): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 374.780966] alloc_pages_current+0xec/0x1e0 [ 374.780981] __page_cache_alloc+0x248/0x3e0 [ 374.780989] pagecache_get_page+0x17c/0x9e0 [ 374.780999] ? ext4_meta_trans_blocks+0x210/0x2c0 [ 374.781008] grab_cache_page_write_begin+0x74/0xa0 [ 374.781016] ext4_write_begin+0x214/0x1290 [ 374.781026] ? ext4_mark_inode_dirty+0x1fb/0x860 [ 374.785747] kobject: 'loop2' (ffff8880a40e1520): kobject_uevent_env [ 374.789618] ? __ext4_new_inode+0x27b0/0x4860 [ 374.789631] ? ext4_truncate+0x11f0/0x11f0 [ 374.789644] ? lock_downgrade+0x740/0x740 [ 374.789653] ext4_da_write_begin+0x4fb/0xea0 [ 374.789661] ? __ext4_new_inode+0x24a/0x4860 [ 374.789672] ? ext4_write_begin+0x1290/0x1290 [ 374.794985] kobject: 'loop2' (ffff8880a40e1520): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 374.804149] pagecache_write_begin+0x84/0xc0 [ 374.804164] __page_symlink+0x16e/0x1e0 [ 374.804172] ? page_get_link+0x4b0/0x4b0 [ 374.804182] ? __ext4_journal_stop+0xea/0x1c0 [ 374.804194] ext4_symlink+0x6eb/0xa80 [ 374.804204] vfs_symlink+0x322/0x560 [ 374.809564] kobject: 'loop0' (ffff8880a4010320): kobject_uevent_env [ 374.812823] SyS_symlink+0x193/0x210 [ 374.812834] ? SyS_symlinkat+0x210/0x210 [ 374.812842] ? SyS_symlinkat+0x210/0x210 [ 374.812855] do_syscall_64+0x1e8/0x640 [ 374.812863] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 374.812877] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 374.812887] RIP: 0033:0x45a6f9 [ 374.817406] kobject: 'loop0' (ffff8880a4010320): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 374.822145] RSP: 002b:00007f5d50c13c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 374.822156] RAX: ffffffffffffffda RBX: 00007f5d50c13c90 RCX: 000000000045a6f9 [ 374.822161] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000020000140 [ 374.822167] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 374.822172] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5d50c146d4 [ 374.822175] R13: 00000000004ca8dd R14: 00000000004e3c50 R15: 0000000000000003 [ 374.998530] kobject: 'loop0' (ffff8880a4010320): kobject_uevent_env [ 375.005159] kobject: 'loop0' (ffff8880a4010320): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 375.015273] kobject: 'loop3' (ffff8880a40fb5a0): kobject_uevent_env [ 375.021813] kobject: 'loop3' (ffff8880a40fb5a0): fill_kobj_path: path = '/devices/virtual/block/loop3' 22:45:14 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB], 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) 22:45:14 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x7, 0x0, 0x400000bff}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) 22:45:14 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) r1 = creat(&(0x7f00000017c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0xc0406618, &(0x7f0000000000)={{0x2, 0x0, @descriptor="20bb589fc22a99c6"}}) sendmsg$kcm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)="9c", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000007ac0)={0x0, 0x0, &(0x7f0000007a40)=[{&(0x7f0000007700)="93", 0x1}], 0x1}, 0x0) close(r0) 22:45:14 executing program 1 (fault-call:0 fault-nth:9): symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') [ 375.113132] kobject: 'loop4' (ffff8880a4159620): kobject_uevent_env [ 375.118524] FAULT_INJECTION: forcing a failure. [ 375.118524] name failslab, interval 1, probability 0, space 0, times 0 [ 375.122288] kobject: 'loop4' (ffff8880a4159620): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 375.133009] CPU: 1 PID: 16823 Comm: syz-executor.1 Not tainted 4.14.158-syzkaller #0 [ 375.149101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 375.159184] Call Trace: 22:45:14 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x7, 0x0, 0x400000bff}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) [ 375.161989] dump_stack+0x142/0x197 [ 375.166109] should_fail.cold+0x10f/0x159 [ 375.170382] should_failslab+0xdb/0x130 [ 375.174376] kmem_cache_alloc+0x2d7/0x780 [ 375.178543] ? check_preemption_disabled+0x3c/0x250 [ 375.183751] alloc_buffer_head+0x24/0xe0 [ 375.187664] kobject: 'loop0' (ffff8880a4010320): kobject_uevent_env [ 375.187824] alloc_page_buffers+0xb7/0x200 [ 375.198595] kobject: 'loop0' (ffff8880a4010320): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 375.208950] create_empty_buffers+0x39/0x480 [ 375.213397] ? trace_hardirqs_on+0xd/0x10 [ 375.217560] ? mem_cgroup_commit_charge+0x187/0x3a0 [ 375.222586] create_page_buffers+0x153/0x1c0 [ 375.227265] __block_write_begin_int+0x195/0x1100 [ 375.232125] ? lru_cache_add+0xda/0x1e0 [ 375.236230] ? add_to_page_cache_lru+0x159/0x310 [ 375.241434] ? _ext4_get_block+0x590/0x590 [ 375.247274] ? __breadahead+0xd0/0xd0 [ 375.251589] ? __might_sleep+0x93/0xb0 [ 375.255528] ? _ext4_get_block+0x590/0x590 [ 375.260020] __block_write_begin+0x31/0x40 [ 375.264493] ext4_write_begin+0x487/0x1290 [ 375.267229] kobject: 'loop0' (ffff8880a4010320): kobject_uevent_env [ 375.269486] ? __ext4_new_inode+0x27b0/0x4860 [ 375.269497] ? ext4_truncate+0x11f0/0x11f0 [ 375.269515] ? lock_downgrade+0x740/0x740 [ 375.278927] kobject: 'loop0' (ffff8880a4010320): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 375.280559] ext4_da_write_begin+0x4fb/0xea0 [ 375.280572] ? __ext4_new_inode+0x24a/0x4860 [ 375.280581] ? ext4_write_begin+0x1290/0x1290 [ 375.280602] pagecache_write_begin+0x84/0xc0 [ 375.318860] __page_symlink+0x16e/0x1e0 [ 375.323111] ? page_get_link+0x4b0/0x4b0 [ 375.327314] ? __ext4_journal_stop+0xea/0x1c0 [ 375.332023] ext4_symlink+0x6eb/0xa80 [ 375.335831] vfs_symlink+0x322/0x560 [ 375.339555] SyS_symlink+0x193/0x210 [ 375.343264] ? SyS_symlinkat+0x210/0x210 [ 375.347348] ? SyS_symlinkat+0x210/0x210 [ 375.352462] do_syscall_64+0x1e8/0x640 [ 375.356358] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 375.361302] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 375.366737] RIP: 0033:0x45a6f9 [ 375.369932] RSP: 002b:00007f5d50c13c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 375.377724] RAX: ffffffffffffffda RBX: 00007f5d50c13c90 RCX: 000000000045a6f9 [ 375.385128] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000020000140 [ 375.392503] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 375.399896] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5d50c146d4 [ 375.407661] R13: 00000000004ca8dd R14: 00000000004e3c50 R15: 0000000000000003 22:45:14 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x7, 0x3}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) 22:45:14 executing program 1 (fault-call:0 fault-nth:10): symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') 22:45:14 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000000)={0x8001001, 0x7}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) [ 375.441134] kobject: 'loop1' (ffff8880a4074c20): kobject_uevent_env [ 375.447821] kobject: 'loop1' (ffff8880a4074c20): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 375.480708] kobject: 'loop5' (ffff8880a41c16a0): kobject_uevent_env 22:45:14 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x7, 0x3}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) [ 375.487409] kobject: 'loop5' (ffff8880a41c16a0): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 375.500832] FAULT_INJECTION: forcing a failure. [ 375.500832] name failslab, interval 1, probability 0, space 0, times 0 [ 375.512400] CPU: 0 PID: 16839 Comm: syz-executor.1 Not tainted 4.14.158-syzkaller #0 [ 375.520326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 375.530089] Call Trace: [ 375.532700] dump_stack+0x142/0x197 [ 375.536437] should_fail.cold+0x10f/0x159 [ 375.540678] ? __es_tree_search.isra.0+0x15f/0x1c0 [ 375.545618] should_failslab+0xdb/0x130 [ 375.549790] kmem_cache_alloc+0x47/0x780 [ 375.554054] __es_insert_extent+0x26c/0xe60 [ 375.558401] ext4_es_insert_extent+0x1f0/0x590 [ 375.563134] ? ext4_es_find_delayed_extent_range+0x960/0x960 [ 375.569067] ? ext4_es_find_delayed_extent_range+0x31d/0x960 [ 375.575093] ext4_ext_put_gap_in_cache+0xcb/0x110 [ 375.579944] ? ext4_zeroout_es+0x170/0x170 [ 375.584174] ? ext4_find_extent+0x64c/0x960 [ 375.588500] ext4_ext_map_blocks+0x1d4b/0x4fa0 [ 375.593354] ? ext4_write_begin+0x487/0x1290 [ 375.597755] ? __page_symlink+0x16e/0x1e0 [ 375.602066] ? ext4_find_delalloc_cluster+0xb0/0xb0 [ 375.607146] ? lock_acquire+0x16f/0x430 [ 375.611338] ? ext4_map_blocks+0x402/0x17c0 [ 375.615680] ext4_map_blocks+0xd3c/0x17c0 [ 375.619939] ? kasan_unpoison_shadow+0x35/0x50 [ 375.624632] ? kasan_kmalloc+0xce/0xf0 [ 375.628574] ? ext4_issue_zeroout+0x160/0x160 [ 375.633111] ? __this_cpu_preempt_check+0x1d/0x30 [ 375.638075] _ext4_get_block+0x1a0/0x590 [ 375.642158] ? do_raw_spin_unlock+0x16b/0x260 [ 375.646646] ? ext4_map_blocks+0x17c0/0x17c0 [ 375.651059] ext4_get_block+0x30/0x40 [ 375.654883] __block_write_begin_int+0x396/0x1100 [ 375.659716] ? _ext4_get_block+0x590/0x590 [ 375.664147] ? __breadahead+0xd0/0xd0 [ 375.667951] ? __might_sleep+0x93/0xb0 [ 375.671834] ? _ext4_get_block+0x590/0x590 [ 375.676144] __block_write_begin+0x31/0x40 [ 375.680461] ext4_write_begin+0x487/0x1290 [ 375.684957] ? __ext4_new_inode+0x27b0/0x4860 [ 375.689645] ? ext4_truncate+0x11f0/0x11f0 [ 375.693888] ? lock_downgrade+0x740/0x740 [ 375.698043] ext4_da_write_begin+0x4fb/0xea0 [ 375.702473] ? __ext4_new_inode+0x24a/0x4860 [ 375.706883] ? ext4_write_begin+0x1290/0x1290 [ 375.711563] pagecache_write_begin+0x84/0xc0 [ 375.716117] __page_symlink+0x16e/0x1e0 [ 375.720107] ? page_get_link+0x4b0/0x4b0 [ 375.724412] ? __ext4_journal_stop+0xea/0x1c0 [ 375.729530] ext4_symlink+0x6eb/0xa80 [ 375.733356] vfs_symlink+0x322/0x560 [ 375.737162] SyS_symlink+0x193/0x210 [ 375.740978] ? SyS_symlinkat+0x210/0x210 [ 375.745032] ? SyS_symlinkat+0x210/0x210 [ 375.749258] do_syscall_64+0x1e8/0x640 [ 375.753149] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 375.758172] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 375.763369] RIP: 0033:0x45a6f9 [ 375.766542] RSP: 002b:00007f5d50c13c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 375.774339] RAX: ffffffffffffffda RBX: 00007f5d50c13c90 RCX: 000000000045a6f9 [ 375.781598] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000020000140 22:45:15 executing program 2: symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') unlink(&(0x7f0000000040)='./file0\x00') r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) readlinkat(r0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000300)=""/4096, 0x1000) [ 375.788885] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 375.797814] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5d50c146d4 [ 375.805176] R13: 00000000004ca8dd R14: 00000000004e3c50 R15: 0000000000000003 [ 375.826142] kobject: 'loop0' (ffff8880a4010320): kobject_uevent_env 22:45:15 executing program 1 (fault-call:0 fault-nth:11): symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') 22:45:15 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x7, 0x3}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) [ 375.836144] kobject: 'loop0' (ffff8880a4010320): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 375.847928] kobject: 'loop2' (ffff8880a40e1520): kobject_uevent_env [ 375.863475] kobject: 'loop2' (ffff8880a40e1520): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 375.875245] FAULT_INJECTION: forcing a failure. [ 375.875245] name failslab, interval 1, probability 0, space 0, times 0 [ 375.886855] CPU: 1 PID: 16854 Comm: syz-executor.1 Not tainted 4.14.158-syzkaller #0 [ 375.894835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 375.904379] Call Trace: [ 375.906971] dump_stack+0x142/0x197 [ 375.910625] should_fail.cold+0x10f/0x159 [ 375.914787] ? __es_tree_search.isra.0+0x15f/0x1c0 [ 375.919731] should_failslab+0xdb/0x130 [ 375.923720] kmem_cache_alloc+0x47/0x780 [ 375.927884] __es_insert_extent+0x26c/0xe60 [ 375.932217] ext4_es_insert_extent+0x1f0/0x590 [ 375.936815] ? ext4_es_find_delayed_extent_range+0x960/0x960 [ 375.942630] ? ext4_es_find_delayed_extent_range+0x31d/0x960 [ 375.948442] ext4_ext_put_gap_in_cache+0xcb/0x110 [ 375.953382] ? ext4_zeroout_es+0x170/0x170 [ 375.957810] ? ext4_find_extent+0x64c/0x960 [ 375.962149] ext4_ext_map_blocks+0x1d4b/0x4fa0 [ 375.966831] ? ext4_write_begin+0x487/0x1290 [ 375.971261] ? __page_symlink+0x16e/0x1e0 [ 375.972815] kobject: 'loop3' (ffff8880a40fb5a0): kobject_uevent_env [ 375.975416] ? ext4_find_delalloc_cluster+0xb0/0xb0 [ 375.975433] ? lock_acquire+0x16f/0x430 22:45:15 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB], 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) 22:45:15 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x7, 0x3, 0x400000bff}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) 22:45:15 executing program 2: symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0xe0900, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x8000, 0x0) mkdir(&(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0xb1) bind$netrom(r1, &(0x7f00000001c0)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x2}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) ioctl$FBIOGET_CON2FBMAP(r0, 0x460f, &(0x7f0000000080)={0x3f}) r2 = creat(&(0x7f00000017c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) name_to_handle_at(r2, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)={0x1008, 0xc2, "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"}, &(0x7f0000001340), 0x1000) ioctl$SNDRV_PCM_IOCTL_RESET(0xffffffffffffffff, 0x4141, 0x0) r4 = getpid() sched_setattr(r4, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) migrate_pages(r4, 0xe, &(0x7f0000001380)=0x3, &(0x7f00000013c0)=0xf2) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001400)='/dev/sequencer2\x00', 0x8c00, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r5, 0xae45, 0xfffffffffffffffc) unlink(&(0x7f0000000040)='./file0\x00') 22:45:15 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)="9c", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000007ac0)={0x0, 0x0, &(0x7f0000007a40)=[{&(0x7f0000007700)="93", 0x1}], 0x1}, 0x0) close(r0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'veth0_to_bond\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x3b, 0x3, [{0x6, 0x1}, {0x0, 0xe0}, {0x8, 0xfffffff8}]}}) [ 375.975447] ? ext4_map_blocks+0x402/0x17c0 [ 375.982790] kobject: 'loop3' (ffff8880a40fb5a0): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 375.986865] ext4_map_blocks+0xd3c/0x17c0 [ 375.986876] ? kasan_unpoison_shadow+0x35/0x50 [ 375.986886] ? kasan_kmalloc+0xce/0xf0 [ 376.017380] ? ext4_issue_zeroout+0x160/0x160 [ 376.021898] ? __this_cpu_preempt_check+0x1d/0x30 [ 376.026871] _ext4_get_block+0x1a0/0x590 [ 376.031160] ? do_raw_spin_unlock+0x16b/0x260 [ 376.035765] ? ext4_map_blocks+0x17c0/0x17c0 [ 376.040291] ext4_get_block+0x30/0x40 [ 376.043078] kobject: 'loop4' (ffff8880a4159620): kobject_uevent_env [ 376.044104] __block_write_begin_int+0x396/0x1100 [ 376.055438] ? _ext4_get_block+0x590/0x590 [ 376.055450] kobject: 'loop4' (ffff8880a4159620): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 376.059771] ? __breadahead+0xd0/0xd0 [ 376.059783] ? __might_sleep+0x93/0xb0 [ 376.059796] ? _ext4_get_block+0x590/0x590 [ 376.059806] __block_write_begin+0x31/0x40 [ 376.085434] ext4_write_begin+0x487/0x1290 [ 376.089776] ? __ext4_new_inode+0x27b0/0x4860 22:45:15 executing program 2: symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') unlink(&(0x7f0000000040)='./file0\x00') lsetxattr$security_evm(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='security.evm\x00', &(0x7f00000000c0)=@ng={0x4, 0x7, "e7860470762d8ac5b46a71433f7566abd275"}, 0x14, 0x2) [ 376.094291] ? ext4_truncate+0x11f0/0x11f0 [ 376.098740] ? lock_downgrade+0x740/0x740 [ 376.103349] ext4_da_write_begin+0x4fb/0xea0 [ 376.107908] ? __ext4_new_inode+0x24a/0x4860 [ 376.112538] ? ext4_write_begin+0x1290/0x1290 [ 376.117080] pagecache_write_begin+0x84/0xc0 [ 376.121617] __page_symlink+0x16e/0x1e0 [ 376.125633] ? page_get_link+0x4b0/0x4b0 [ 376.129930] ? __ext4_journal_stop+0xea/0x1c0 [ 376.133280] kobject: 'loop2' (ffff8880a40e1520): kobject_uevent_env [ 376.134509] ext4_symlink+0x6eb/0xa80 [ 376.134524] vfs_symlink+0x322/0x560 [ 376.146989] kobject: 'loop2' (ffff8880a40e1520): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 376.149068] SyS_symlink+0x193/0x210 [ 376.149078] ? SyS_symlinkat+0x210/0x210 [ 376.149091] ? SyS_symlinkat+0x210/0x210 [ 376.170570] do_syscall_64+0x1e8/0x640 [ 376.174470] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 376.179332] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 376.184868] RIP: 0033:0x45a6f9 22:45:15 executing program 2: unlink(&(0x7f0000000040)='./file0\x00') [ 376.188078] RSP: 002b:00007f5d50c13c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 376.195850] RAX: ffffffffffffffda RBX: 00007f5d50c13c90 RCX: 000000000045a6f9 [ 376.203132] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000020000140 [ 376.210410] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 376.212956] kobject: 'loop2' (ffff8880a40e1520): kobject_uevent_env [ 376.217691] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5d50c146d4 [ 376.231457] R13: 00000000004ca8dd R14: 00000000004e3c50 R15: 0000000000000003 22:45:15 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)="9c", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000007a40)=[{&(0x7f0000007700)="93", 0x1}], 0x1}, 0x0) close(r0) [ 376.234877] kobject: 'loop2' (ffff8880a40e1520): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 376.261422] kobject: 'loop0' (ffff8880a4010320): kobject_uevent_env [ 376.276811] kobject: 'loop0' (ffff8880a4010320): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 376.288495] kobject: 'loop3' (ffff8880a40fb5a0): kobject_uevent_env [ 376.296466] kobject: 'loop3' (ffff8880a40fb5a0): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 376.318760] kobject: 'loop2' (ffff8880a40e1520): kobject_uevent_env [ 376.326561] kobject: 'loop2' (ffff8880a40e1520): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 376.336932] kobject: 'loop1' (ffff8880a4074c20): kobject_uevent_env 22:45:15 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) read$usbfs(r5, &(0x7f0000000200)=""/141, 0x8d) r6 = dup3(r4, r0, 0x0) ioctl$TCXONC(r6, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2ffd280747985fdc0e001002b598ab9f140001b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r6, 0x540a, 0x1) 22:45:15 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x7, 0x3, 0x400000bff}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) 22:45:15 executing program 1 (fault-call:0 fault-nth:12): symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') 22:45:15 executing program 2: symlink(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)='./file0\x00') unlink(&(0x7f0000000040)='./file0\x00') rmdir(&(0x7f00000000c0)='./file1\x00') r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x4, 0x10000) ioctl$SIOCGETNODEID(r0, 0x89e1, &(0x7f0000000080)={0x3}) 22:45:15 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)="9c", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000007ac0)={0x0, 0x0, &(0x7f0000007a40)=[{&(0x7f0000007700)="93", 0x1}], 0x1}, 0x0) close(r0) r1 = creat(&(0x7f00000017c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='9\x01\x02', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) bind(r1, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x0, 0x1, 0x1, 0x3, {0xa, 0x4e23, 0x194a360c, @rand_addr="42144d626fbae517f220a2f0c4934ada", 0x3}}}, 0x80) [ 376.343691] kobject: 'loop1' (ffff8880a4074c20): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 376.366927] kobject: 'loop3' (ffff8880a40fb5a0): kobject_uevent_env [ 376.381289] FAULT_INJECTION: forcing a failure. [ 376.381289] name failslab, interval 1, probability 0, space 0, times 0 [ 376.387135] kobject: 'loop3' (ffff8880a40fb5a0): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 376.397501] CPU: 0 PID: 16894 Comm: syz-executor.1 Not tainted 4.14.158-syzkaller #0 [ 376.409073] kobject: 'loop5' (ffff8880a41c16a0): kobject_uevent_env [ 376.410587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 376.410592] Call Trace: [ 376.410611] dump_stack+0x142/0x197 [ 376.410629] should_fail.cold+0x10f/0x159 [ 376.410647] should_failslab+0xdb/0x130 [ 376.410658] __kmalloc+0x2f0/0x7a0 [ 376.410672] ? check_preemption_disabled+0x3c/0x250 [ 376.424918] kobject: 'loop5' (ffff8880a41c16a0): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 376.426498] ? ext4_find_extent+0x709/0x960 [ 376.426509] ext4_find_extent+0x709/0x960 [ 376.467975] ? ext4_ext_map_blocks+0x80f/0x4fa0 [ 376.472672] ? trace_hardirqs_on+0xd/0x10 [ 376.476838] ext4_ext_map_blocks+0x1a3/0x4fa0 [ 376.481328] ? ext4_write_begin+0x487/0x1290 [ 376.485742] ? __page_symlink+0x16e/0x1e0 [ 376.489960] ? ext4_find_delalloc_cluster+0xb0/0xb0 [ 376.495013] ? lock_acquire+0x16f/0x430 [ 376.498999] ? ext4_map_blocks+0x829/0x17c0 [ 376.503329] ext4_map_blocks+0x881/0x17c0 [ 376.507466] ? kasan_unpoison_shadow+0x35/0x50 [ 376.512322] ? ext4_issue_zeroout+0x160/0x160 [ 376.516802] ? __this_cpu_preempt_check+0x1d/0x30 [ 376.521629] _ext4_get_block+0x1a0/0x590 [ 376.525673] ? do_raw_spin_unlock+0x16b/0x260 [ 376.530150] ? ext4_map_blocks+0x17c0/0x17c0 [ 376.534541] ext4_get_block+0x30/0x40 [ 376.538342] __block_write_begin_int+0x396/0x1100 [ 376.543529] ? _ext4_get_block+0x590/0x590 [ 376.547932] ? __breadahead+0xd0/0xd0 [ 376.552083] ? __might_sleep+0x93/0xb0 [ 376.556131] ? _ext4_get_block+0x590/0x590 [ 376.560354] __block_write_begin+0x31/0x40 [ 376.564588] ext4_write_begin+0x487/0x1290 [ 376.568813] ? __ext4_new_inode+0x27b0/0x4860 [ 376.573293] ? ext4_truncate+0x11f0/0x11f0 [ 376.577516] ? lock_downgrade+0x740/0x740 [ 376.581662] ext4_da_write_begin+0x4fb/0xea0 [ 376.586056] ? __ext4_new_inode+0x24a/0x4860 [ 376.590446] ? ext4_write_begin+0x1290/0x1290 [ 376.594952] pagecache_write_begin+0x84/0xc0 [ 376.599377] __page_symlink+0x16e/0x1e0 [ 376.603461] ? page_get_link+0x4b0/0x4b0 [ 376.607549] ? __ext4_journal_stop+0xea/0x1c0 [ 376.612233] ext4_symlink+0x6eb/0xa80 [ 376.616123] vfs_symlink+0x322/0x560 [ 376.619833] SyS_symlink+0x193/0x210 [ 376.623549] ? SyS_symlinkat+0x210/0x210 [ 376.627606] ? SyS_symlinkat+0x210/0x210 [ 376.631658] do_syscall_64+0x1e8/0x640 [ 376.635551] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 376.640389] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 376.645568] RIP: 0033:0x45a6f9 [ 376.648739] RSP: 002b:00007f5d50c13c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 376.656438] RAX: ffffffffffffffda RBX: 00007f5d50c13c90 RCX: 000000000045a6f9 [ 376.663694] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000020000140 [ 376.671069] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 376.678322] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5d50c146d4 [ 376.685740] R13: 00000000004ca8dd R14: 00000000004e3c50 R15: 0000000000000003 [ 376.701313] kobject: 'loop0' (ffff8880a4010320): kobject_uevent_env [ 376.707790] kobject: 'loop0' (ffff8880a4010320): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 376.727577] kobject: 'loop2' (ffff8880a40e1520): kobject_uevent_env [ 376.736683] kobject: 'loop2' (ffff8880a40e1520): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 376.763268] kobject: 'loop1' (ffff8880a4074c20): kobject_uevent_env [ 376.770518] kobject: 'loop1' (ffff8880a4074c20): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 376.784657] kobject: 'loop3' (ffff8880a40fb5a0): kobject_uevent_env [ 376.793053] kobject: 'loop3' (ffff8880a40fb5a0): fill_kobj_path: path = '/devices/virtual/block/loop3' 22:45:16 executing program 1 (fault-call:0 fault-nth:13): symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') 22:45:16 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x7, 0x3, 0x400000bff}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) 22:45:16 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)="9c", 0x1}], 0x1}, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x80, 0x0) write$fb(r1, &(0x7f00000000c0)="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", 0xfa) sendmsg(r0, &(0x7f0000007ac0)={0x0, 0x0, &(0x7f0000007a40)=[{&(0x7f0000007700)="93", 0x21f}], 0x1}, 0x0) close(r0) 22:45:16 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3"], 0x9) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) 22:45:16 executing program 2: pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x800) bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x2, 0x587c4426, 0x1, 0x4, 0x2d, 0x1, 0x2, [], 0x0, r0, 0x1, 0x4}, 0x3c) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000080)=0x7, 0x4) symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') open(&(0x7f0000000500)='./file0\x00', 0x200000, 0x0) r2 = creat(&(0x7f00000017c0)='./file0\x00', 0x0) r3 = creat(&(0x7f00000017c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}}) linkat(r3, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', r2, &(0x7f00000004c0)='./file0\x00', 0x1000) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r2}}) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000400)={0x8, 0x2a0, 0x7, 0x0, 0x6, 0x8, 0x5, 0xff, 0x80000001, 0x80000000, 0x0, 0x5}) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r6, 0x800c6613, &(0x7f00000003c0)=@v2={0x2, @aes256, 0x2, [], "31cc5259e5846d1b5ef9ea692da542a0"}) r7 = creat(&(0x7f00000017c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r7}}) ioctl$EVIOCGMTSLOTS(r7, 0x8040450a, &(0x7f00000000c0)=""/23) unlink(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00') ioctl$SNDRV_PCM_IOCTL_STATUS_EXT(0xffffffffffffffff, 0xc0984124, &(0x7f0000000300)) r9 = creat(&(0x7f00000017c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r10}, 0x2c, {'wfdno', 0x3d, r9}}) ioctl$VIDIOC_ENUM_DV_TIMINGS(r9, 0xc0945662, &(0x7f0000000540)={0x0, 0x0, [], {0x0, @bt={0x3, 0x2, 0x1, 0x1, 0x3f, 0xffff, 0x20, 0x0, 0x3f, 0xffffff2e, 0x5, 0x10000, 0xc7, 0x40, 0x10, 0x40}}}) [ 376.898077] kobject: 'loop4' (ffff8880a4159620): kobject_uevent_env [ 376.900287] FAULT_INJECTION: forcing a failure. [ 376.900287] name failslab, interval 1, probability 0, space 0, times 0 [ 376.908302] kobject: 'loop4' (ffff8880a4159620): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 376.918829] CPU: 0 PID: 16921 Comm: syz-executor.1 Not tainted 4.14.158-syzkaller #0 [ 376.933548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 376.942902] Call Trace: 22:45:16 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)="9c", 0x1}], 0x1}, 0x0) r1 = creat(&(0x7f00000017c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="fb28b032c93d61c5cf36e038632c00"]) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='illinois\x00', 0x9) r4 = creat(&(0x7f00000017c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB="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"/370, @ANYRESHEX=r4, @ANYBLOB=',\x00']) write$P9_RSTATFS(r3, &(0x7f00000001c0)={0x43, 0x9, 0x1, {0xffff, 0xfffffc01, 0x5, 0xa20, 0x3, 0x1, 0x5, 0x6, 0x3}}, 0x43) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000a00000003000000000000e7ffffffff0200000009000000106000"/48]) sendmsg(r0, &(0x7f0000007ac0)={0x0, 0x0, &(0x7f0000007a40)=[{&(0x7f0000007700)="93", 0x1}], 0x1}, 0x0) close(r0) [ 376.945490] dump_stack+0x142/0x197 [ 376.949140] should_fail.cold+0x10f/0x159 [ 376.953321] should_failslab+0xdb/0x130 [ 376.957308] kmem_cache_alloc+0x2d7/0x780 [ 376.961468] ? _raw_spin_unlock+0x2d/0x50 [ 376.965686] ? __mark_inode_dirty+0x2b7/0x1040 [ 376.970285] ext4_mb_new_blocks+0x513/0x3b30 [ 376.974845] ? ext4_find_extent+0x709/0x960 [ 376.979168] ext4_ext_map_blocks+0x26cd/0x4fa0 [ 376.983739] ? ext4_find_delalloc_cluster+0xb0/0xb0 [ 376.988747] ? lock_acquire+0x16f/0x430 [ 376.992819] ext4_map_blocks+0x881/0x17c0 [ 376.996953] ? kasan_unpoison_shadow+0x35/0x50 [ 377.001698] ? ext4_issue_zeroout+0x160/0x160 [ 377.006554] ? __this_cpu_preempt_check+0x1d/0x30 [ 377.011486] _ext4_get_block+0x1a0/0x590 [ 377.015644] ? do_raw_spin_unlock+0x16b/0x260 [ 377.020331] ? ext4_map_blocks+0x17c0/0x17c0 [ 377.024735] ext4_get_block+0x30/0x40 [ 377.028610] __block_write_begin_int+0x396/0x1100 [ 377.033594] ? _ext4_get_block+0x590/0x590 [ 377.037829] ? __breadahead+0xd0/0xd0 [ 377.041641] ? __might_sleep+0x93/0xb0 [ 377.045611] ? _ext4_get_block+0x590/0x590 [ 377.049832] __block_write_begin+0x31/0x40 [ 377.054055] ext4_write_begin+0x487/0x1290 [ 377.058530] ? __ext4_new_inode+0x27b0/0x4860 [ 377.063183] ? ext4_truncate+0x11f0/0x11f0 [ 377.067406] ? lock_downgrade+0x740/0x740 [ 377.071548] ext4_da_write_begin+0x4fb/0xea0 [ 377.075945] ? __ext4_new_inode+0x24a/0x4860 [ 377.080354] ? ext4_write_begin+0x1290/0x1290 [ 377.084846] pagecache_write_begin+0x84/0xc0 [ 377.089237] __page_symlink+0x16e/0x1e0 [ 377.093195] ? page_get_link+0x4b0/0x4b0 [ 377.097245] ? __ext4_journal_stop+0xea/0x1c0 [ 377.101726] ext4_symlink+0x6eb/0xa80 [ 377.105514] vfs_symlink+0x322/0x560 [ 377.109224] SyS_symlink+0x193/0x210 [ 377.112934] ? SyS_symlinkat+0x210/0x210 [ 377.116984] ? SyS_symlinkat+0x210/0x210 [ 377.121118] do_syscall_64+0x1e8/0x640 [ 377.124989] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 377.129821] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 377.135009] RIP: 0033:0x45a6f9 [ 377.138182] RSP: 002b:00007f5d50c13c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 22:45:16 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x7, 0x3, 0x400000bff}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) [ 377.145879] RAX: ffffffffffffffda RBX: 00007f5d50c13c90 RCX: 000000000045a6f9 [ 377.153135] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000020000140 [ 377.160398] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 377.167827] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5d50c146d4 [ 377.175230] R13: 00000000004ca8dd R14: 00000000004e3c50 R15: 0000000000000003 [ 377.193672] kobject: 'loop0' (ffff8880a4010320): kobject_uevent_env [ 377.203644] kobject: 'loop0' (ffff8880a4010320): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 377.229733] kobject: 'loop3' (ffff8880a40fb5a0): kobject_uevent_env [ 377.231102] 9pnet: Insufficient options for proto=fd [ 377.244039] kobject: 'loop3' (ffff8880a40fb5a0): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 377.250683] 9pnet: Insufficient options for proto=fd [ 377.257710] kobject: 'loop1' (ffff8880a4074c20): kobject_uevent_env [ 377.265977] kobject: 'loop1' (ffff8880a4074c20): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 377.276854] 9pnet: Insufficient options for proto=fd [ 377.287342] 9pnet: Insufficient options for proto=fd [ 377.287888] kobject: 'loop2' (ffff8880a40e1520): kobject_uevent_env [ 377.306709] kobject: 'loop2' (ffff8880a40e1520): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 377.318617] kobject: 'loop0' (ffff8880a4010320): kobject_uevent_env [ 377.325787] kobject: 'loop0' (ffff8880a4010320): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 377.338132] kobject: 'loop3' (ffff8880a40fb5a0): kobject_uevent_env [ 377.344969] kobject: 'loop3' (ffff8880a40fb5a0): fill_kobj_path: path = '/devices/virtual/block/loop3' 22:45:16 executing program 2: symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') unlink(&(0x7f0000000040)='./file1\x00') 22:45:16 executing program 1 (fault-call:0 fault-nth:14): symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') 22:45:16 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x7, 0x3, 0x400000bff}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) 22:45:16 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)="9c", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000007ac0)={0x0, 0x0, &(0x7f0000007a40)=[{&(0x7f0000007700)="93", 0x1}], 0x1}, 0x0) close(r0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x694330f618b4c113, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000100)={0x14, 0x88, 0xfa00, {r2, 0x3c, 0x0, @in6={0xa, 0x4e24, 0xffffffff, @mcast1, 0x6}}}, 0x90) 22:45:16 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b374e6092679496bffd75fd8bb96faefe90b0600000000000000"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) 22:45:16 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)="9c", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000007ac0)={0x0, 0x0, &(0x7f0000007a40)=[{&(0x7f0000007700)="93", 0x1}], 0x1}, 0x0) close(r0) r1 = creat(&(0x7f00000017c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000000)) 22:45:16 executing program 2: symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}}) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000000)='threaded\x00', 0x9) mkdir(&(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x1a) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000100)=0x400000) unlink(&(0x7f0000000040)='./file0\x00') [ 377.519624] kobject: 'loop5' (ffff8880a41c16a0): kobject_uevent_env [ 377.526791] kobject: 'loop5' (ffff8880a41c16a0): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 377.554498] kobject: 'loop3' (ffff8880a40fb5a0): kobject_uevent_env [ 377.557069] FAULT_INJECTION: forcing a failure. [ 377.557069] name failslab, interval 1, probability 0, space 0, times 0 [ 377.572630] CPU: 1 PID: 16958 Comm: syz-executor.1 Not tainted 4.14.158-syzkaller #0 [ 377.576329] kobject: 'loop3' (ffff8880a40fb5a0): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 377.580603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 377.580609] Call Trace: [ 377.580630] dump_stack+0x142/0x197 [ 377.580649] should_fail.cold+0x10f/0x159 [ 377.580662] ? __es_tree_search.isra.0+0x15f/0x1c0 [ 377.580675] should_failslab+0xdb/0x130 22:45:16 executing program 2: symlink(&(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') unlink(&(0x7f0000000040)='./file0\x00') [ 377.580686] kmem_cache_alloc+0x47/0x780 [ 377.580696] ? ext4_es_can_be_merged+0x16e/0x230 [ 377.580706] __es_insert_extent+0x26c/0xe60 [ 377.580716] ext4_es_insert_extent+0x1f0/0x590 [ 377.580725] ? ext4_es_find_delayed_extent_range+0x960/0x960 [ 377.580738] ext4_map_blocks+0xab1/0x17c0 [ 377.603584] kobject: 'loop2' (ffff8880a40e1520): kobject_uevent_env [ 377.605847] ? kasan_unpoison_shadow+0x35/0x50 [ 377.605862] ? ext4_issue_zeroout+0x160/0x160 [ 377.605873] ? __this_cpu_preempt_check+0x1d/0x30 [ 377.605885] _ext4_get_block+0x1a0/0x590 [ 377.605897] ? do_raw_spin_unlock+0x16b/0x260 [ 377.605905] ? ext4_map_blocks+0x17c0/0x17c0 [ 377.605918] ext4_get_block+0x30/0x40 [ 377.605928] __block_write_begin_int+0x396/0x1100 [ 377.605939] ? _ext4_get_block+0x590/0x590 [ 377.619205] kobject: 'loop2' (ffff8880a40e1520): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 377.619243] ? __breadahead+0xd0/0xd0 [ 377.667320] kobject: 'loop2' (ffff8880a40e1520): kobject_uevent_env [ 377.669246] ? __might_sleep+0x93/0xb0 [ 377.677967] kobject: 'loop2' (ffff8880a40e1520): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 377.678477] ? _ext4_get_block+0x590/0x590 [ 377.678489] __block_write_begin+0x31/0x40 [ 377.678498] ext4_write_begin+0x487/0x1290 [ 377.678509] ? __ext4_new_inode+0x27b0/0x4860 [ 377.696458] kobject: 'loop0' (ffff8880a4010320): kobject_uevent_env [ 377.697478] ? ext4_truncate+0x11f0/0x11f0 [ 377.697492] ? lock_downgrade+0x740/0x740 [ 377.697501] ext4_da_write_begin+0x4fb/0xea0 [ 377.697512] ? __ext4_new_inode+0x24a/0x4860 [ 377.697522] ? ext4_write_begin+0x1290/0x1290 [ 377.710809] kobject: 'loop0' (ffff8880a4010320): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 377.717262] pagecache_write_begin+0x84/0xc0 [ 377.717277] __page_symlink+0x16e/0x1e0 [ 377.717285] ? page_get_link+0x4b0/0x4b0 [ 377.717295] ? __ext4_journal_stop+0xea/0x1c0 [ 377.717306] ext4_symlink+0x6eb/0xa80 [ 377.717314] vfs_symlink+0x322/0x560 [ 377.717323] SyS_symlink+0x193/0x210 [ 377.717332] ? SyS_symlinkat+0x210/0x210 [ 377.717340] ? SyS_symlinkat+0x210/0x210 [ 377.717351] do_syscall_64+0x1e8/0x640 [ 377.717359] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 377.717374] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 377.717380] RIP: 0033:0x45a6f9 [ 377.717387] RSP: 002b:00007f5d50c13c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 377.849537] RAX: ffffffffffffffda RBX: 00007f5d50c13c90 RCX: 000000000045a6f9 [ 377.857559] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000020000140 [ 377.865580] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 377.873240] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5d50c146d4 [ 377.880513] R13: 00000000004ca8dd R14: 00000000004e3c50 R15: 0000000000000003 [ 377.910108] kobject: 'loop1' (ffff8880a4074c20): kobject_uevent_env [ 377.917783] kobject: 'loop1' (ffff8880a4074c20): fill_kobj_path: path = '/devices/virtual/block/loop1' 22:45:17 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x7, 0x3, 0x400000bff}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) 22:45:17 executing program 2: symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') r0 = creat(&(0x7f00000017c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@ipv4={[], [], @broadcast}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6}}, &(0x7f00000000c0)=0xe8) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r4) r5 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r6) r7 = creat(&(0x7f00000017c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r7}}) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000300)={{{@in6=@initdev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@loopback}}, &(0x7f0000000100)=0xad) r10 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r11) r12 = geteuid() r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r14) r15 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r15, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r16) r17 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r17, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r18) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={0x0, 0x0, 0x0}, &(0x7f0000000500)=0xc) r21 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="020000000100000000000000040000000000000008000000", @ANYRES32=r22, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r22, @ANYBLOB="100006000000000020000000000000"], 0x34, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000540)={{}, {0x1, 0x4}, [{0x2, 0x4, r2}, {0x2, 0x5bb9029c77cd2a72, r4}, {0x2, 0x2, r6}, {0x2, 0x1, r9}, {0x2, 0x4, r11}, {0x2, 0x4, r12}, {0x2, 0x1, r14}, {0x2, 0x1, r16}, {0x2, 0x4, r18}], {0x4, 0x2}, [{0x8, 0x4, r19}, {0x8, 0x4, r20}, {0x8, 0x1, r22}], {0x10, 0x1}, {0x20, 0xa}}, 0x84, 0x5) unlink(&(0x7f0000000040)='./file0\x00') 22:45:17 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB='#'], 0x1) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) 22:45:17 executing program 1 (fault-call:0 fault-nth:15): symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') [ 378.009408] kobject: 'loop4' (ffff8880a4159620): kobject_uevent_env [ 378.011221] FAULT_INJECTION: forcing a failure. [ 378.011221] name failslab, interval 1, probability 0, space 0, times 0 [ 378.021119] kobject: 'loop4' (ffff8880a4159620): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 378.031486] CPU: 0 PID: 16980 Comm: syz-executor.1 Not tainted 4.14.158-syzkaller #0 [ 378.047406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 378.057222] Call Trace: 22:45:17 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x7, 0x3, 0x400000bff}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, 0x0, &(0x7f0000000080)}, 0x20) [ 378.059856] dump_stack+0x142/0x197 [ 378.063505] should_fail.cold+0x10f/0x159 [ 378.067987] ? mempool_free+0x1d0/0x1d0 [ 378.071974] should_failslab+0xdb/0x130 [ 378.075945] kmem_cache_alloc+0x47/0x780 [ 378.080011] ? mempool_free+0x1d0/0x1d0 [ 378.084426] mempool_alloc_slab+0x47/0x60 [ 378.088568] mempool_alloc+0x138/0x300 [ 378.092459] ? remove_element.isra.0+0x1b0/0x1b0 [ 378.097253] ? __might_sleep+0x93/0xb0 [ 378.101145] bio_alloc_bioset+0x368/0x680 [ 378.105324] ? bvec_alloc+0x2e0/0x2e0 [ 378.109146] submit_bh_wbc+0xf6/0x720 [ 378.113029] __sync_dirty_buffer+0xcf/0x260 [ 378.117340] sync_dirty_buffer+0x1b/0x20 [ 378.121390] __ext4_handle_dirty_metadata+0x16e/0x470 [ 378.126584] ext4_handle_dirty_dirent_node+0x35b/0x480 [ 378.131951] ? ext4_rename_dir_prepare+0x3f0/0x3f0 [ 378.137159] ? lock_downgrade+0x740/0x740 [ 378.141325] ? do_raw_spin_unlock+0x16b/0x260 [ 378.145830] add_dirent_to_buf+0x375/0x5c0 [ 378.150067] ? ext4_insert_dentry+0x440/0x440 [ 378.154567] ext4_add_entry+0x4d1/0xa20 [ 378.158884] ? ext4_setattr+0x22c0/0x22c0 [ 378.164628] ? make_indexed_dir+0x1210/0x1210 [ 378.169141] ? ext4_journal_check_start+0x148/0x1e0 [ 378.174162] ext4_add_nondir+0x28/0x80 [ 378.178040] ext4_symlink+0x3ff/0xa80 [ 378.181842] vfs_symlink+0x322/0x560 [ 378.185547] SyS_symlink+0x193/0x210 [ 378.189510] ? SyS_symlinkat+0x210/0x210 [ 378.193682] ? SyS_symlinkat+0x210/0x210 [ 378.197880] do_syscall_64+0x1e8/0x640 [ 378.201783] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 378.206804] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 378.211987] RIP: 0033:0x45a6f9 [ 378.215373] RSP: 002b:00007f5d50c13c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 378.223357] RAX: ffffffffffffffda RBX: 00007f5d50c13c90 RCX: 000000000045a6f9 [ 378.231084] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000020000140 [ 378.238847] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 378.246155] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5d50c146d4 [ 378.253505] R13: 00000000004ca8dd R14: 00000000004e3c50 R15: 0000000000000003 22:45:17 executing program 1 (fault-call:0 fault-nth:16): symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') 22:45:17 executing program 2: symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f00000002c0)='./file1\x00') unlink(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f00000017c0)='./file0\x00', 0x0) r1 = creat(&(0x7f00000017c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = creat(&(0x7f00000017c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}}) sendfile(r1, r3, &(0x7f0000000080)=0x4, 0x8) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd4rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',\x00']) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r0, 0x4010ae74, &(0x7f0000000000)={0x3, 0x400, 0x9}) 22:45:17 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x7, 0x3, 0x400000bff}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, 0x0, &(0x7f0000000080)}, 0x20) [ 378.273991] kobject: 'loop0' (ffff8880a4010320): kobject_uevent_env [ 378.283076] kobject: 'loop0' (ffff8880a4010320): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 378.307432] kobject: 'loop1' (ffff8880a4074c20): kobject_uevent_env [ 378.314328] kobject: 'loop1' (ffff8880a4074c20): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 378.338254] kobject: 'loop2' (ffff8880a40e1520): kobject_uevent_env [ 378.347974] FAULT_INJECTION: forcing a failure. [ 378.347974] name failslab, interval 1, probability 0, space 0, times 0 [ 378.359980] kobject: 'loop2' (ffff8880a40e1520): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 378.368424] CPU: 1 PID: 16989 Comm: syz-executor.1 Not tainted 4.14.158-syzkaller #0 [ 378.377870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 378.380429] kobject: 'loop0' (ffff8880a4010320): kobject_uevent_env [ 378.387444] Call Trace: [ 378.387468] dump_stack+0x142/0x197 [ 378.387487] should_fail.cold+0x10f/0x159 [ 378.387499] should_failslab+0xdb/0x130 [ 378.387505] kmem_cache_alloc_node+0x56/0x780 [ 378.387590] create_task_io_context+0x31/0x3d0 [ 378.387606] generic_make_request_checks+0x1505/0x1ac0 [ 378.409082] kobject: 'loop0' (ffff8880a4010320): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 378.413274] ? blk_cleanup_queue+0x610/0x610 [ 378.413290] ? trace_hardirqs_on+0x10/0x10 [ 378.413306] generic_make_request+0x7d/0xa40 [ 378.413315] ? blk_queue_enter+0x520/0x520 [ 378.413328] ? memset+0x32/0x40 [ 378.449508] kobject: 'loop0' (ffff8880a4010320): kobject_uevent_env [ 378.450317] submit_bio+0x1a5/0x3f0 [ 378.450324] ? submit_bio+0x1a5/0x3f0 [ 378.450333] ? generic_make_request+0xa40/0xa40 [ 378.450345] ? guard_bio_eod+0x1fd/0x530 [ 378.450353] submit_bh_wbc+0x550/0x720 [ 378.450368] __sync_dirty_buffer+0xcf/0x260 [ 378.453674] kobject: 'loop0' (ffff8880a4010320): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 378.460192] sync_dirty_buffer+0x1b/0x20 [ 378.460203] __ext4_handle_dirty_metadata+0x16e/0x470 [ 378.460215] ext4_handle_dirty_dirent_node+0x35b/0x480 [ 378.460224] ? ext4_rename_dir_prepare+0x3f0/0x3f0 [ 378.460235] ? lock_downgrade+0x740/0x740 [ 378.460243] ? do_raw_spin_unlock+0x16b/0x260 [ 378.460253] add_dirent_to_buf+0x375/0x5c0 [ 378.528288] ? ext4_insert_dentry+0x440/0x440 [ 378.533484] ext4_add_entry+0x4d1/0xa20 [ 378.537704] ? ext4_setattr+0x22c0/0x22c0 [ 378.540891] 9pnet: Could not find request transport: fd4rfdno=0x000000000000000a [ 378.542093] ? make_indexed_dir+0x1210/0x1210 [ 378.542111] ? ext4_journal_check_start+0x148/0x1e0 [ 378.559783] ext4_add_nondir+0x28/0x80 [ 378.563789] ext4_symlink+0x3ff/0xa80 [ 378.567590] vfs_symlink+0x322/0x560 [ 378.571308] SyS_symlink+0x193/0x210 [ 378.576073] ? SyS_symlinkat+0x210/0x210 [ 378.580122] ? SyS_symlinkat+0x210/0x210 [ 378.584198] do_syscall_64+0x1e8/0x640 [ 378.588527] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 378.593360] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 378.598534] RIP: 0033:0x45a6f9 [ 378.602581] RSP: 002b:00007f5d50c13c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 378.610458] RAX: ffffffffffffffda RBX: 00007f5d50c13c90 RCX: 000000000045a6f9 [ 378.617805] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000020000140 [ 378.625084] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 378.632357] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5d50c146d4 22:45:17 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB="2321242e2f6669c1b3bb96faefe90baff356fd280747985fdc0e0010020001b2fd0d"], 0x22) r6 = creat(&(0x7f00000017c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x10000) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r6}}) ioctl$KVM_GET_DEBUGREGS(r6, 0x8080aea1, &(0x7f0000000100)) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r5, 0x540a, 0x1) [ 378.639616] R13: 00000000004ca8dd R14: 00000000004e3c50 R15: 0000000000000003 [ 378.662593] kobject: 'loop5' (ffff8880a41c16a0): kobject_uevent_env [ 378.671958] kobject: 'loop5' (ffff8880a41c16a0): fill_kobj_path: path = '/devices/virtual/block/loop5' 22:45:17 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) r1 = gettid() r2 = creat(&(0x7f00000017c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="7472616e3c604560c550671bd6ed3d", @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',\x00']) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8983, &(0x7f00000001c0)={0x8, 'veth1\x00', {'bond_slave_1\x00'}, 0x33}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000040)='em0\x00', 0x0}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r1, r2, 0x0, 0x1e, &(0x7f0000000000)='mime_typesecuritycpuset:!#em0\x00', r4}, 0x30) sendmsg$kcm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)="9c", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000007ac0)={0x0, 0x0, &(0x7f0000007a40)=[{&(0x7f0000007700)="93", 0x1}], 0x1}, 0x0) lsetxattr(&(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)=@known='trusted.overlay.opaque\x00', &(0x7f0000000300)='mime_typesecuritycpuset:!#em0\x00', 0x1e, 0x1) close(r0) 22:45:17 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x7, 0x3, 0x400000bff}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, 0x0, &(0x7f0000000080)}, 0x20) 22:45:17 executing program 1 (fault-call:0 fault-nth:17): symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') [ 378.689934] kobject: 'loop1' (ffff8880a4074c20): kobject_uevent_env [ 378.703906] kobject: 'loop1' (ffff8880a4074c20): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 378.720170] net_ratelimit: 18 callbacks suppressed [ 378.720175] protocol 88fb is buggy, dev hsr_slave_0 [ 378.730744] protocol 88fb is buggy, dev hsr_slave_1 22:45:17 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x7, 0x3, 0x400000bff}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000040), 0x0}, 0x20) 22:45:17 executing program 1: symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) recvfrom$unix(r0, &(0x7f0000000040)=""/58, 0x3a, 0x6877ad395a1f64b0, 0x0, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x405f00, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000100)={0x0, r2}) [ 378.736407] protocol 88fb is buggy, dev hsr_slave_0 [ 378.741877] protocol 88fb is buggy, dev hsr_slave_1 [ 378.747919] kobject: 'loop3' (ffff8880a40fb5a0): kobject_uevent_env [ 378.758425] kobject: 'loop3' (ffff8880a40fb5a0): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 378.782762] kobject: 'loop0' (ffff8880a4010320): kobject_uevent_env [ 378.792474] kobject: 'loop0' (ffff8880a4010320): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 378.824043] kobject: 'loop1' (ffff8880a4074c20): kobject_uevent_env [ 378.831211] kobject: 'loop1' (ffff8880a4074c20): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 378.843888] kobject: 'loop3' (ffff8880a40fb5a0): kobject_uevent_env [ 378.850868] kobject: 'loop3' (ffff8880a40fb5a0): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 378.870785] kobject: 'loop0' (ffff8880a4010320): kobject_uevent_env [ 378.880104] protocol 88fb is buggy, dev hsr_slave_0 [ 378.884056] kobject: 'loop0' (ffff8880a4010320): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 378.885393] protocol 88fb is buggy, dev hsr_slave_1 [ 378.913789] kobject: 'loop1' (ffff8880a4074c20): kobject_uevent_env [ 378.920782] kobject: 'loop1' (ffff8880a4074c20): fill_kobj_path: path = '/devices/virtual/block/loop1' 22:45:18 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)="9c", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000007ac0)={0x0, 0x0, &(0x7f0000007a40)=[{&(0x7f0000007700)="93", 0x1}]}, 0x0) close(r0) 22:45:18 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x7, 0x3, 0x400000bff}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000040), 0x0}, 0x20) 22:45:18 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0)