_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x400200) ioctl$KDGKBENT(r1, 0x4b46, &(0x7f0000000180)={0x7, 0x6, 0xb66a}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000000)=@req3={0x6000000, 0x3, 0x6000000, 0x3}, 0x1c) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x200100, 0x0) ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000000100)=0xc503) setsockopt$packet_int(r2, 0x107, 0x9, &(0x7f0000000080), 0x4) 11:35:01 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x3f00, 0x0, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:35:01 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) close(0xffffffffffffffff) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="2e0000002e008183ad5de0713c444d00070000001000034000ff39a0053582c137153e37835b3f00040000000000", 0x2e}], 0x1}, 0x0) close(0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) 11:35:01 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SMI(r3, 0xaeb7) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r3, 0xae80, 0xffffffff00000000) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a0000120800000088b070") 11:35:01 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x2}) 11:35:01 executing program 1: r0 = socket$inet_sctp(0x2, 0x1000000000000005, 0x84) open_by_handle_at(r0, &(0x7f0000000000)={0x51, 0x0, "ba635ff1e0498aa67697898772a2f9ff781d7544dc6255f9618f5255c78decdbd2fe8120ab6152326812ea2f6264d33b8f12d22b77a038c086ec8b2995b40d6644d20c04a31d32d443"}, 0x20000) recvfrom$inet(r0, &(0x7f00000003c0)=""/4096, 0x1000, 0x40, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000300)={0x0, @in={{0x2, 0x0, @multicast1}}}, 0x0) 11:35:01 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) close(0xffffffffffffffff) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="2e0000002e008183ad5de0713c444d00070000001000034000ff39a0053582c137153e37835b3f00040000000000", 0x2e}], 0x1}, 0x0) close(0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) 11:35:01 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x4000, 0x0, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:35:01 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x2}) 11:35:01 executing program 1: r0 = socket$inet_sctp(0x2, 0x1000000000000005, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x0) 11:35:01 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8001, 0x8000, 0x80, 0x4, 0x0, 0x2, 0x5}, 0x1c) setsockopt$packet_int(r1, 0x107, 0x9, &(0x7f0000000080), 0x4) 11:35:01 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffe000/0x1000)=nil) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SMI(r1, 0xaeb7) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r1, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl(r1, 0x8, &(0x7f0000000100)="0800000088b07000000000") 11:35:01 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) close(0xffffffffffffffff) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="2e0000002e008183ad5de0713c444d00070000001000034000ff39a0053582c137153e37835b3f00040000000000", 0x2e}], 0x1}, 0x0) close(0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 11:35:01 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x4305, 0x0, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:35:01 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00', 0x2}) 11:35:01 executing program 1: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x400000, 0x0) ioctl$KVM_NMI(r0, 0xae9a) r1 = socket$inet_sctp(0x2, 0x1000000000000005, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000300)={0x0, @in={{0x2, 0x0, @multicast1}}}, 0x0) 11:35:01 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x4788, 0x0, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:35:01 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00', 0x2}) [ 638.306275] net_ratelimit: 17 callbacks suppressed [ 638.306282] protocol 88fb is buggy, dev hsr_slave_0 [ 638.316380] protocol 88fb is buggy, dev hsr_slave_1 11:35:01 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x401, 0x200) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x820}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x6c, r1, 0x21, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1f}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x80000000}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4048000}, 0x4000000) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SMI(r5, 0xaeb7) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0a0000120800000088b070") 11:35:01 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) close(0xffffffffffffffff) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="2e0000002e008183ad5de0713c444d00070000001000034000ff39a0053582c137153e37835b3f00040000000000", 0x2e}], 0x1}, 0x0) close(0xffffffffffffffff) 11:35:01 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_netdev_private(r1, 0x89f9, &(0x7f00000000c0)="77c9beeab6805df66790c6cc51dbcfa1dd3702ae259c2324902bfaa19b81afdb8ce8cd498c0eff678ed84011c06376e3d514176a50653ede1ff661d693d9565b0378082a78a2dccfe74fd33c849e4b97aae9aaf073dc66") r2 = dup2(r0, r0) setsockopt$inet6_dccp_int(r2, 0x21, 0x4, &(0x7f0000000280)=0x4, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000000)=@req={0xd95, 0xe39d, 0x10001, 0x2}, 0xffffffffffffff0f) getsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f00000002c0), 0x2) read(r1, &(0x7f0000000300)=""/158, 0x9e) setsockopt$packet_int(r3, 0x107, 0x9, &(0x7f0000000080), 0x4) r4 = accept4$tipc(0xffffffffffffff9c, &(0x7f0000000040), &(0x7f0000000140)=0x10, 0x80800) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$TIPC_CONN_TIMEOUT(r4, 0x10f, 0x82, &(0x7f0000000180)=0x80, 0x4) syz_open_dev$vivid(&(0x7f0000000500)='/dev/video#\x00', 0x3, 0x2) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r5, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r7, 0x10a, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x56}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40800}, 0x40) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000240)={r0}) 11:35:01 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x4888, 0x0, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:35:01 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x00', 0x2}) 11:35:01 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) close(0xffffffffffffffff) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="2e0000002e008183ad5de0713c444d00070000001000034000ff39a0053582c137153e37835b3f00040000000000", 0x2e}], 0x1}, 0x0) close(0xffffffffffffffff) 11:35:01 executing program 1: r0 = socket$inet_sctp(0x2, 0x1000000000000005, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e21, 0x8001, @dev={0xfe, 0x80, [], 0x21}, 0x401}}}, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000000), &(0x7f0000000040)=0x10) socket$inet_sctp(0x2, 0x5, 0x84) [ 638.516746] *** Guest State *** [ 638.520072] CR0: actual=0x0000000000050032, shadow=0x0000000000050012, gh_mask=fffffffffffffff7 11:35:01 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xc3\x00', 0x2}) 11:35:01 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x6488, 0x0, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) [ 638.590523] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 11:35:01 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) close(0xffffffffffffffff) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="2e0000002e008183ad5de0713c444d00070000001000034000ff39a0053582c137153e37835b3f00040000000000", 0x2e}], 0x1}, 0x0) close(0xffffffffffffffff) 11:35:01 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000000)=@req3={0x6000000, 0x3, 0x6000000, 0x3}, 0x1c) setsockopt$packet_int(r1, 0x107, 0x9, &(0x7f0000000080), 0x4) [ 638.661114] CR3 = 0x0000000000000000 [ 638.665757] RSP = 0x0000000000000000 RIP = 0x0000000000008000 [ 638.675399] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 638.686557] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 638.693548] CS: sel=0x3000, attr=0x08093, limit=0xffffffff, base=0x0000000000030000 11:35:01 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\xe8\x00', 0x2}) [ 638.725520] DS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 638.749728] SS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 638.770809] ES: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 638.794646] FS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 638.813041] GS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 638.830238] GDTR: limit=0x00000000, base=0x0000000000000000 [ 638.856356] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 638.876387] IDTR: limit=0x00000000, base=0x0000000000000000 [ 638.884568] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 638.906311] EFER = 0x0000000000006000 PAT = 0x0007040600070406 [ 638.930969] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 638.958240] Interruptibility = 00000008 ActivityState = 00000000 [ 638.964508] *** Host State *** [ 638.998181] RIP = 0xffffffff811b3710 RSP = 0xffff88805931f8b8 [ 639.004205] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 639.016391] FSBase=00007f45eb8ae700 GSBase=ffff8880ae900000 TRBase=fffffe0000003000 [ 639.024326] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 639.046286] CR0=0000000080050033 CR3=000000002e0d6000 CR4=00000000001426e0 [ 639.053469] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201360 [ 639.076284] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 639.082508] *** Control State *** [ 639.086074] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 639.106278] EntryControls=0000d1ff ExitControls=002fefff [ 639.111870] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 639.130158] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 639.154745] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 639.183809] reason=80000021 qualification=0000000000000000 [ 639.210016] IDTVectoring: info=00000000 errcode=00000000 [ 639.215487] TSC Offset = 0xfffffea7d055353a [ 639.245908] EPT pointer = 0x0000000048a9501e [ 639.266273] protocol 88fb is buggy, dev hsr_slave_0 [ 639.266291] protocol 88fb is buggy, dev hsr_slave_0 [ 639.271346] protocol 88fb is buggy, dev hsr_slave_1 [ 639.276414] protocol 88fb is buggy, dev hsr_slave_1 [ 639.281475] protocol 88fb is buggy, dev hsr_slave_0 [ 639.286495] protocol 88fb is buggy, dev hsr_slave_0 [ 639.291469] protocol 88fb is buggy, dev hsr_slave_1 [ 639.296520] protocol 88fb is buggy, dev hsr_slave_1 11:35:02 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SMI(r3, 0xaeb7) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) r4 = accept(r0, &(0x7f00000000c0)=@generic, &(0x7f0000000140)=0x80) bind$bt_l2cap(r4, &(0x7f0000000180)={0x1f, 0x2, {0x0, 0x10001, 0x9, 0x8f, 0x5, 0x4}, 0x800, 0x5}, 0xe) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$sock_inet6_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a0000120800000088b070") 11:35:02 executing program 1: r0 = socket$inet_sctp(0x2, 0x1000000000000005, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000300)={0x0, @in={{0x2, 0x0, @multicast1}}}, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000000)={r1, 0x6, 0x30, 0x4, 0x20}, &(0x7f0000000040)=0x18) syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) 11:35:02 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x800e, 0x0, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:35:02 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) close(0xffffffffffffffff) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="2e0000002e008183ad5de0713c444d00070000001000034000ff39a0053582c137153e37835b3f00040000000000", 0x2e}], 0x1}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 11:35:02 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xf5\x00', 0x2}) 11:35:02 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000007180)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, 0x0) r1 = socket$inet_sctp(0x2, 0x1000000000000005, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000300)={0x0, @in={{0x2, 0x0, @multicast1}}}, 0x0) 11:35:02 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x8035, 0x0, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:35:02 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00', 0x2}) 11:35:02 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) close(0xffffffffffffffff) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="2e0000002e008183ad5de0713c444d00070000001000034000ff39a0053582c137153e37835b3f00040000000000", 0x2e}], 0x1}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) [ 639.508478] *** Guest State *** [ 639.511799] CR0: actual=0x0000000000050032, shadow=0x0000000000050012, gh_mask=fffffffffffffff7 11:35:02 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x8100, 0x0, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) [ 639.566416] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 639.598684] CR3 = 0x0000000000000000 [ 639.656304] RSP = 0x0000000000000000 RIP = 0x0000000000008000 [ 639.670675] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 639.695495] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 639.706367] CS: sel=0x3000, attr=0x08093, limit=0xffffffff, base=0x0000000000030000 [ 639.736364] DS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 639.755414] SS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 639.776291] ES: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 639.796345] FS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 639.815457] GS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 639.836000] GDTR: limit=0x00000000, base=0x0000000000000000 [ 639.856255] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 639.864316] IDTR: limit=0x00000000, base=0x0000000000000000 [ 639.889008] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 639.908965] EFER = 0x0000000000006000 PAT = 0x0007040600070406 [ 639.915468] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 639.925924] Interruptibility = 00000008 ActivityState = 00000000 [ 639.948921] *** Host State *** [ 639.952219] RIP = 0xffffffff811b3710 RSP = 0xffff888046b978b8 [ 639.961199] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 639.978968] FSBase=00007f45eb8ae700 GSBase=ffff8880ae900000 TRBase=fffffe0000033000 [ 639.989904] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 639.995877] CR0=0000000080050033 CR3=0000000032bbe000 CR4=00000000001426e0 [ 640.010917] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87201360 [ 640.020716] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 640.030289] *** Control State *** [ 640.033827] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 640.043637] EntryControls=0000d1ff ExitControls=002fefff [ 640.052516] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 640.062418] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 640.079212] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 640.099981] reason=80000021 qualification=0000000000000000 [ 640.119086] IDTVectoring: info=00000000 errcode=00000000 [ 640.124631] TSC Offset = 0xfffffea745a8b6db [ 640.139069] EPT pointer = 0x0000000041b3a01e 11:35:04 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = open(&(0x7f0000000040)='./file0\x00', 0x2, 0x21) ioctl$DRM_IOCTL_ADD_BUFS(r1, 0xc0206416, &(0x7f00000000c0)={0x3ff, 0x1, 0x0, 0xf98, 0x1e, 0x86}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000000)=@req3={0x6000000, 0x3, 0x6000000, 0x3}, 0x1c) setsockopt$packet_int(r2, 0x107, 0x9, &(0x7f0000000080), 0x4) 11:35:04 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xfe\x00', 0x2}) 11:35:04 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) close(0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="2e0000002e008183ad5de0713c444d00070000001000034000ff39a0053582c137153e37835b3f00040000000000", 0x2e}], 0x1}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 11:35:04 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x8847, 0x0, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:35:04 executing program 1: r0 = socket$inet_sctp(0x2, 0x1000000000000005, 0x84) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffff9c, 0x84, 0x71, &(0x7f00000000c0)={0x0, 0x400}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000140)={r1, @in6={{0xa, 0x4e24, 0xc55, @ipv4={[], [], @empty}, 0xffffffffffffff2d}}}, 0x0) 11:35:04 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000000c0)={0x0, 0xfffffffffffffffd, 0x3, 0x80000000, 0x4, 0xfffffffffffffffe}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SMI(r5, 0xaeb7) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a0000120800000088b070") ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r3, 0xc1205531, &(0x7f0000000100)={0x9, 0x6, 0xffff, 0x2, [], [], [], 0x7fffffff, 0x100, 0x5, 0xe7d6, "552477568206c2bfe3c5b60d16711b8d"}) 11:35:04 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) close(0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="2e0000002e008183ad5de0713c444d00070000001000034000ff39a0053582c137153e37835b3f00040000000000", 0x2e}], 0x1}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 11:35:04 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x8848, 0x0, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:35:04 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\xfd\xfd\xff\xff\x00', 0x2}) 11:35:04 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000300)={0x0, @in={{0x2, 0x0, @multicast1}}}, 0x0) 11:35:04 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) close(0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="2e0000002e008183ad5de0713c444d00070000001000034000ff39a0053582c137153e37835b3f00040000000000", 0x2e}], 0x1}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 11:35:04 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x8864, 0x0, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:35:07 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) fcntl$setstatus(r0, 0x4, 0x40400) r1 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000000c0)="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") r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f00000001c0)=@req={0x8000, 0xa6e3, 0x0, 0x200}, 0xff1d) setsockopt$packet_int(r2, 0x107, 0x9, &(0x7f0000000080), 0x4) 11:35:07 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SMI(r3, 0xaeb7) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a0000120800000088b070") 11:35:07 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\xc3\xff\xff\xff\x00', 0x2}) 11:35:07 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x200, 0x10040) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffff9c, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x3}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000000c0)={0x0, 0x3, 0x208, 0x3, 0x800, 0x8001, 0x6f9, 0x8, r1}, 0x20) r2 = socket$inet_sctp(0x2, 0x1000000000000005, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000300)={0x0, @in={{0x2, 0x0, @multicast1}}}, 0x0) 11:35:07 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x8906, 0x0, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:35:07 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="2e0000002e008183ad5de0713c444d00070000001000034000ff39a0053582c137153e37835b3f00040000000000", 0x2e}], 0x1}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 11:35:07 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\xf5\xff\xff\xff\x00', 0x2}) 11:35:07 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="2e0000002e008183ad5de0713c444d00070000001000034000ff39a0053582c137153e37835b3f00040000000000", 0x2e}], 0x1}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 11:35:07 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0xf000, 0x0, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:35:07 executing program 1: r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x8000) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000040)=@assoc_id=0x0, &(0x7f0000000080)=0x4) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000480)={r1, @in6={{0xa, 0x4e24, 0x3, @loopback, 0x5}}}, &(0x7f00000002c0)=0xffffffffffffffa3) r3 = socket$inet_sctp(0x2, 0x1000000000000005, 0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000001c0)={r2, 0x1}, 0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000300)={0x0, @in={{0x2, 0x0, @multicast1}}}, 0x0) 11:35:07 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x4000, 0x0) sendto$rose(r1, &(0x7f00000000c0)="ff9abe6f3ed521adca32372ff60769c2aa1b592ddd14ace067e32ba36c7acd312da6b3eab167c93975403f4b912e7a371ebd661002cbfe4916ebd7", 0x3b, 0x4000000, &(0x7f0000000100)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, 0x1c) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000000)=@req3={0x6000000, 0x3, 0x6000000, 0x3}, 0x1c) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) setsockopt$packet_int(r2, 0x107, 0x9, &(0x7f0000000140)=0x100000000000000, 0x4) 11:35:07 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\xfe\xff\xff\xff\x00', 0x2}) 11:35:07 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x418000, 0x0) ioctl$NBD_SET_TIMEOUT(r2, 0xab09, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SMI(r4, 0xaeb7) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a0000120800000088b070") 11:35:07 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x1414ac, 0x0, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:35:07 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="2e0000002e008183ad5de0713c444d00070000001000034000ff39a0053582c137153e37835b3f00040000000000", 0x2e}], 0x1}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) [ 644.546343] net_ratelimit: 8 callbacks suppressed [ 644.546351] protocol 88fb is buggy, dev hsr_slave_0 [ 644.551269] protocol 88fb is buggy, dev hsr_slave_1 11:35:07 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x04', 0x2}) 11:35:07 executing program 1: r0 = socket$inet_sctp(0x2, 0x1000000000000005, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, 0xfffffffffffffffe, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x400, 0x0) ioctl$SIOCX25SCALLUSERDATA(r1, 0x89e5, &(0x7f0000000100)={0x1e, "14be81a61189983914a5469e82a037b4e22a41e0139df9f79a4d98d84b7749ca94b79b7b8280436c1256880071389e95ccd46001c054723cfbc7f845b1a1eef1cb4cc22e83b78a08a8dc89514c58d75528e5f38e859566fdcbe2c7a372c7b3a214ef66057d43283a57d0e02f009bf8c9333b4015abfb4efa51b8d14476557b82"}) 11:35:07 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x8000a0, 0x0, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:35:07 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="2e0000002e008183ad5de0713c444d00070000001000034000ff39a0053582c137153e37835b3f00040000000000", 0x2e}], 0x1}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 11:35:07 executing program 1: r0 = socket$inet_sctp(0x2, 0x1000000000000005, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000300)={0x0, @in={{0x2, 0x0, @multicast1}}}, 0x0) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x101001, 0x0) r2 = gettid() fstat(r0, &(0x7f00000026c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = getegid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000002780)={0x0, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000002740)='\x8bsecurity\x00', 0xffffffffffffffff}, 0x30) getresuid(&(0x7f00000027c0)=0x0, &(0x7f0000002800), &(0x7f0000002840)) stat(&(0x7f0000002880)='./file0\x00', &(0x7f00000028c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = getpid() getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000002940)={{{@in=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@dev}}, &(0x7f0000002a40)=0xe8) getresgid(&(0x7f0000002a80), &(0x7f0000002ac0)=0x0, &(0x7f0000002b00)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000002b40)=0x0) lstat(&(0x7f0000002b80)='./file0\x00', &(0x7f0000002bc0)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x3, &(0x7f0000002c40)=[0x0, 0x0, 0xffffffffffffffff]) r14 = gettid() fstat(r0, &(0x7f00000045c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000004640)={0x0, 0x0, 0x0}, &(0x7f0000004680)=0xc) r17 = getpgrp(0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000046c0)={{{@in=@multicast1, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f00000047c0)=0xe8) getgroups(0x2, &(0x7f0000004800)=[0xee00, 0xee00]) r20 = getpgid(0xffffffffffffffff) r21 = geteuid() getresgid(&(0x7f0000004840), &(0x7f0000004880), &(0x7f00000048c0)=0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000005fc0)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000006000)={{{@in6, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@loopback}}, &(0x7f0000006100)=0xe8) r25 = getegid() ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000006140)=0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000006180)={0x0, 0x0}, &(0x7f00000061c0)=0xc) lstat(&(0x7f0000006200)='./file0\x00', &(0x7f0000006240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r1, &(0x7f0000006380)=[{&(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002480)=[{&(0x7f00000003c0)="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", 0x1000}, {&(0x7f00000000c0)="b0201fd4a48834895607a5c0a98c18ed1c732502c700bb74abb540a5e37589e59e5461952e39cfbb7ed1e6fdc302f8a9d49e3e36465dc7267ab6a5d4884532b34b21e28f1466d4168cfd63569e33ffbeca471bcc33457156fa27b1d2452ff1c254", 0x61}, {&(0x7f0000000140)="745d315916e8f090f75edf6992a7a2a842f6746c9a19abfb53a0d5dabce0301a8a7a7dee178c19362856f7e76289146c9c0b4d485fb25a8629ee26afd1ec6753b580e5db32b341c085c5899bba8b491434316382ea608665d6bf4b2a097493a20bbc987bff3d8dedd5fdd7de9997d9c49f86bf332abeb3ef9e8f5e65ed17e426fac23ad100cb6ad1c181987f50320598dbd05cd49191e4046ef047dffcc5cb6eb460a9ea299061859627fe9a72cae2e6baf7aace36d4f0db2eba5040510215c706faf76273f8e2276f2cab60f909c1ef69b34873234b", 0xd6}, {&(0x7f00000013c0)="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", 0x1000}, {&(0x7f0000000240)="ebaa015cddf207e7c12484fa0f98d2fc4b57f3dc551bf53529b3c9f9f4742a4c7c5c919d42e08c5b1701f8e89578f94806228892e80ed2585b8ce6afa87b89373da1afcf270916d41bf3351ac35fb05606e3775ef2f0456c195c40de04db", 0x5e}, {&(0x7f00000023c0)="5d7c09c9d1a25baa81ec0547d768864e8b33628718afb06661df3119ffc3a2f57a521244821cb7e647e6346ac932562e8581c83f73687e815c07b012ea54144407e294916e13193e48b00a019ac36d4a5de1d91b37f97265c66e2cc06f9f2eae3e1d9b3aaaa6384b31039d3d8bd54a5c04423b1cf57ee111e3c98597e6f4e72dcf9dfe24e7c1b476b44421f46b8cded255630db3b067f43b925e305e17", 0x9d}], 0x6, &(0x7f0000002500)=[@rights={0x30, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0]}, @rights={0x38, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0, r0, r0]}], 0x68, 0x4000080}, {&(0x7f0000002580)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f00000002c0)=[{&(0x7f0000002600)="980e4f61e4fb10b7abf8dc5529dc441b80fd31e7359d033572da884b02c08792d3d4d8faf68e419018ca17172a4331fc2f1accc507faea18045e4aa047c34649a23380359c6079956973408c23251f73c57c8b860b336b6c465bb135ea7e6514b31e03186a05c00d21616412c2733d157a7c9f2f9060048495e27a8094f3da6347dc0699063f67b1ab2fc2d619f61c9a45971155329e54860d25321de7d56a0ebefa61", 0xa3}], 0x1, &(0x7f0000002c80)=[@rights={0x20, 0x1, 0x1, [r0, r0, r0]}, @rights={0x28, 0x1, 0x1, [r0, r0, r0, r0, r0]}, @rights={0x38, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0, r0, r0, r0]}, @rights={0x28, 0x1, 0x1, [r0, r0, r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r2, r3, r4}, @rights={0x18, 0x1, 0x1, [r0, r0]}, @cred={0x20, 0x1, 0x2, r5, r6, r7}, @cred={0x20, 0x1, 0x2, r8, r9, r10}, @cred={0x20, 0x1, 0x2, r11, r12, r13}, @rights={0x18, 0x1, 0x1, [r0]}], 0x158}, {&(0x7f0000002e00)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000002f00)=[{&(0x7f0000002e80)="8e823acdfa", 0x5}, {&(0x7f0000002ec0)="0202434a2a629b9e96f4af25596574a40659d89aabf017a93cc254e8620326bc57c2", 0x22}], 0x2, 0x0, 0x0, 0x80}, {&(0x7f0000002f40)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000004500)=[{&(0x7f0000002fc0)="d6f80f80fbd562eb271501a5d6b98e3a6fbf599a81a1b25a3b7ca18abfcd3c5204ae4e81cabf1ce4e9c39a4f306142d7abbead3f11a6639778881ff043e7221c9a2efbbae961a1be32c8ac7d98f63b40495392395b293c59a4165f", 0x5b}, {&(0x7f0000003040)="17130aed1aeb1657837f9a4876d527a124b560329db606b15a39e193d7dfd141b82b157b158946da8f52ec0204ccfbb3959fe833968b60abb9b19a822def4d4c720e63c4ee2d80e20e9448057ac1688e0fcc7c307c127f9c8b1df8f795d18772f3b925e02bf6a91e99cd2af885ca", 0x6e}, {&(0x7f00000030c0)="c789de5817b6c46cb9330f73dd251b6c490b3784fd02a8b623626ee0f04336ea389f3085fa23bd5648", 0x29}, {&(0x7f0000003100)="03c2f0c9450e4562ff2586d91b1c75e96b94459a4faf5c0634b318bd385535d3fb068c5182c2f418059a9bf97d0b72389d81815df5703b854a668661b06b776c1d373cbb4e01d5223b6074", 0x4b}, {&(0x7f0000003180)="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", 0x1000}, {&(0x7f0000004180)="f3f9d91423568c4d619ee6c5c364a18f942481152513f475ff17bcf47e3a930f6891fe26679cefa908cb45255e9efff2816caa7675666fbca77a0572061a574e31d3dff6b5a55cd416997f5d4cdb9287d52255386fd2ca251f014787c78d58aa33ec754e221197d9604923763a6a73a14c3b44c1cf42b3420272bffba57775ac8a56d2b19179", 0x86}, {&(0x7f0000004240)="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", 0xfc}, {&(0x7f0000004340)="a1e00907494b9619511862287780283c20c01f3aac3aa570847f66301fb3b16ab8ace469097cf4dc85178488454fab32c6be5e6fee69f5f5304dcd283c61a333d1c3d50e6c2e60f1eff3963e7c8e57fd841cb03245d4e48a7f4fb1ed4f5939a1f9d8f063a412a88a176e66fbe4835cc9ffef758e1e85fba363", 0x79}, {&(0x7f00000043c0)}, {&(0x7f0000004400)="9984d0977e8a46d9cb53cef96586ef9a025ea56c3a14e819bbacc564a4aa43a12dc61c955512d7bb24ed511a5a56bfeff2ced8478df8c3cc4460bb3d0539903b2f172915a1ed8267722d568b9468aa541ab5c12310d8708abc936a5cbecba520293295a963655dc46a90fbe36135af048e699bd094f1fba5946933e6c3beba78eb64be9c7b913953f2204ecd6a20141d0ef4a7531022a09ac8ec300e18cdd3553fd6a01e6c163fc17b93dab7d502ead9d06cff34acf6622628c9fb65a799dc280c7cea3499d9620a4130740f9c6af0a4a6a590bf7a85e1dbeb47c1a428b72be253d975cd263473a8491b364ea1", 0xed}], 0xa, &(0x7f0000004900)=[@cred={0x20, 0x1, 0x2, r14, r15, r16}, @cred={0x20, 0x1, 0x2, r17, r18, r19}, @cred={0x20, 0x1, 0x2, r20, r21, r22}, @rights={0x18, 0x1, 0x1, [r0]}], 0x78, 0x4080}, {&(0x7f0000004980)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005f40)=[{&(0x7f0000004a00)="8fdb425f0b8b1dee69bb03968d874b443cd3f038beae3744353ec17f57e35f1b1b162160ebb2a3b86c747f6c4a380ef4757fd5837f2c14eb3b2b1087a627ea9467032276a1d9a0ecab3c49cffc7265903cb7ab81b69c41223a5be8251d31767d76a28399dd6efa4a15ad98252eb3fdd1694587af9808c61cfb2c03a9e91ca9df680314f9af7a60dae32dc882666d5561240ae7d0a364eccbbff78de20e55d3f3519bc1000f072a2bbd1c04c2148be16e2460de290dc0e673cd63138a4e08fa46c01402b0b8fd1f1c8f9b219039415918c4771703231762cd99915eb9051eddc3e835b2375e", 0xe5}, {&(0x7f0000004b00)="dde118f56024dabc8c3182312ae8562b203b06ce93d09dc61bc0d81ebe2a92261cf683675040dc871256f7d7b41d63d913560d1ef1e4473a370bab37c5b772048896f9ff8491749b4a323f3701d934", 0x4f}, {&(0x7f0000004b80)="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", 0x1000}, {&(0x7f0000005b80)="14bc29aeb75104971cda5b6b3acf82023476444d2cb69668fa849604e3479ac2bd14b733f016d930ae1e13601fbf19a931589c733c77f123", 0x38}, {&(0x7f0000005bc0)="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", 0xfa}, {&(0x7f0000005cc0)="5731809abb5eedebaf43bc2716b56c722f087ad7c4373d7a4a17caa2089b6462f75e4ea7e9165852673d0fd26b989a95d00d863521b1a78b9b6fa83f168e0ccb7248369a2095dff653e7010fe4318d55207f4429cae26c47ebd828ec39e9530c35c24e590cd730c921ad5ecf23378ac4d5d10ea6cd0264ee7a3613d702511b08d2d207b0467d0b4feeca601c10f855d32db447f715a5583d7a020bca257aee243f1fdbddc874fd402846", 0xaa}, {&(0x7f0000005d80)="c5eddfd745b97e7324121d9f4361ea3513357f5f882ca612dccbba8bb69de5c158081bfc41eb368d22498bfdeffe37559d365f8fab83d656c4f416799b8633fcc42414ac760279ad927cb8ad7c076f2dcd63ae4f549034afdfa889d556481476655b58779129dc7c123f1a66ad6b623320d6e9bd35b8145fab6f513773c581f40c33803d53c988776b198cc8ab8b3b880200951a6612697cbb74659f52a29956efbebbea86a9555a393e114ff05b3d86d654f8b61a1fb27c7c13d626f6548ad821d7a9934e938a2edba80eb6be80f9811d3913769b6c51ae4e8d1343c66aa52363f864f977871fc0894f81ee28c10c104c910194636a25", 0xf7}, {&(0x7f0000005e80)="5075f8182ab65b65747cd439df43f8657f0d25573031e62c7a838ab47d36d0235e48915ee6114fde8ba5073000d2087074cfcebb43ae2bd6b34dc7a0f29419e9401dce2b1ded31932f5eb9ee1435448bddadfda61d855b627fc35ff26fbcbc4d619e34b66ddca0ab0d75d0b3ee5b9f2db47490e47d4d100f7c78737344efb90be2b484bf48142dfed46ee432254ea16556983eef39f7910c17d5e964e83f7ac7d97d5ff023", 0xa5}], 0x8, &(0x7f00000062c0)=[@cred={0x20, 0x1, 0x2, r23, r24, r25}, @rights={0x20, 0x1, 0x1, [r0, r0, r0, r0]}, @rights={0x18, 0x1, 0x1, [r0]}, @rights={0x20, 0x1, 0x1, [r0, r0, r0]}, @rights={0x28, 0x1, 0x1, [r0, r0, r0, r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r26, r27, r28}], 0xc0, 0x10}], 0x5, 0x4000044) 11:35:07 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x04', 0x2}) 11:35:07 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000300)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff6000/0xa000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ff3000/0x6000)=nil, &(0x7f0000000200)="ebf9df91056643024e04d6336579e258c692120128e5b314734f063c59aea1353f1a94bfad32f0db877559b9f4c46acf2433ed166a571f4c424786ed49a752e6d47c2502ee4c7a8d5d0d13e1fb91b44c83213ae69254ee9b258249ebae89e3e208973849518058b9099fe2875fb7f7bdd71a2da227fede36bec78b244499d538a16b61f0c9ca617a6a686151e742f14fb523339afd86a0784c4ff0add86a93064c74027c14fd564b2aa9387e6a3f18ac2f1ce3b8d6502a1d679e55046db3c4e754ac771158b17e5ebd4dce67f168c8feb327d3501f648547b3cf6789fd821008db40c9b714cc95e3273e0d9e5fb58a62b47c2507d23714", 0xf7, r1}, 0x68) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SMI(r3, 0xaeb7) r4 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vfio/vfio\x00', 0xe6002, 0x0) ioctl$BLKROTATIONAL(r4, 0x127e, &(0x7f0000000580)) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x7, 0x40) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000500)={0x7, 0x0, [{0x391, 0x0, 0x8001}, {0xbfd, 0x0, 0x6}, {0xfef, 0x0, 0x4}, {0x316, 0x0, 0x401}, {0x24e, 0x0, 0x8001}, {0x40000bbf, 0x0, 0x9}, {0x581, 0x0, 0x1ff}]}) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl(r0, 0x5, &(0x7f0000000180)="160000120800f57fc5b070") ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000000)={'bpq0\x00', {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000000c0)={[0x100000000, 0xfffffffffffffff8, 0x1, 0x4, 0x400, 0x6, 0x2, 0x1f, 0x0, 0x0, 0x8, 0x3af, 0x7, 0x7, 0x9, 0xff], 0x107005, 0x200}) [ 644.933685] *** Guest State *** [ 644.945138] CR0: actual=0x0000000000050032, shadow=0x0000000000050012, gh_mask=fffffffffffffff7 [ 644.966252] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 644.975122] CR3 = 0x0000000000000000 [ 645.013904] RSP = 0x0000000000000000 RIP = 0x0000000000008000 [ 645.036261] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 645.042259] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 645.066212] CS: sel=0x3000, attr=0x08093, limit=0xffffffff, base=0x0000000000030000 [ 645.074217] DS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 645.106244] SS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 645.114242] ES: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 645.129273] FS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 645.144673] GS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 645.169090] GDTR: limit=0x00000000, base=0x0000000000000000 [ 645.192411] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 645.212594] IDTR: limit=0x00000000, base=0x0000000000000000 [ 645.232165] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 645.249119] EFER = 0x0000000000006000 PAT = 0x0007040600070406 [ 645.262731] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 645.279072] Interruptibility = 00000008 ActivityState = 00000000 [ 645.292432] *** Host State *** [ 645.295762] RIP = 0xffffffff811b3710 RSP = 0xffff88802e6878b8 [ 645.313582] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 645.329265] FSBase=00007f45eb8ae700 GSBase=ffff8880ae800000 TRBase=fffffe0000033000 [ 645.345547] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 645.363422] CR0=0000000080050033 CR3=00000000558e8000 CR4=00000000001426f0 [ 645.379090] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87201360 [ 645.394633] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 645.409071] *** Control State *** [ 645.412665] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 645.432377] EntryControls=0000d1ff ExitControls=002fefff [ 645.445221] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 645.461342] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 645.475091] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 645.493551] reason=80000021 qualification=0000000000000000 [ 645.502820] IDTVectoring: info=00000000 errcode=00000000 [ 645.508425] protocol 88fb is buggy, dev hsr_slave_0 [ 645.508495] protocol 88fb is buggy, dev hsr_slave_1 [ 645.508581] protocol 88fb is buggy, dev hsr_slave_0 [ 645.508622] protocol 88fb is buggy, dev hsr_slave_1 [ 645.516251] protocol 88fb is buggy, dev hsr_slave_0 [ 645.533847] protocol 88fb is buggy, dev hsr_slave_1 [ 645.538969] protocol 88fb is buggy, dev hsr_slave_0 [ 645.541530] TSC Offset = 0xfffffea461d95b5d [ 645.544018] protocol 88fb is buggy, dev hsr_slave_1 [ 645.554586] EPT pointer = 0x000000002f4ec01e [ 645.648350] *** Guest State *** [ 645.651763] CR0: actual=0x000000008005003f, shadow=0x000000008005001f, gh_mask=fffffffffffffff7 [ 645.666292] CR4: actual=0x0000000000002068, shadow=0x0000000000000028, gh_mask=ffffffffffffe871 [ 645.675142] CR3 = 0x0000000000000000 [ 645.706216] RSP = 0x0000000000000002 RIP = 0x0000000000107005 [ 645.712210] RFLAGS=0x00000202 DR7 = 0x0000000000000400 [ 645.736262] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 645.742945] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 645.786238] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 645.794244] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 645.836254] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 645.844272] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 645.862023] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 645.874625] GDTR: limit=0x00000000, base=0x0000000000000000 [ 645.898196] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 645.921533] IDTR: limit=0x00000000, base=0x0000000000000000 [ 645.942666] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 645.964884] EFER = 0x0000000000006500 PAT = 0x0007040600070406 [ 645.982657] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 646.001585] Interruptibility = 00000008 ActivityState = 00000000 [ 646.018043] *** Host State *** [ 646.021250] RIP = 0xffffffff811b3710 RSP = 0xffff8880290c78b8 [ 646.041414] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 646.058074] FSBase=00007f45eb86c700 GSBase=ffff8880ae900000 TRBase=fffffe0000033000 [ 646.065915] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 646.095744] CR0=0000000080050033 CR3=00000000558e8000 CR4=00000000001426e0 [ 646.113500] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87201360 [ 646.129037] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 646.135103] *** Control State *** [ 646.153433] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 646.169027] EntryControls=0000d3ff ExitControls=002fefff [ 646.174522] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 646.199301] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 646.205991] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 646.231401] reason=80000021 qualification=0000000000000000 [ 646.245110] IDTVectoring: info=00000000 errcode=00000000 [ 646.259038] TSC Offset = 0xfffffea461d95b5d [ 646.263390] EPT pointer = 0x000000002f4ec01e 11:35:10 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000000)=@req3={0x6000000, 0x3, 0x6000000, 0x3}, 0x1c) setsockopt$packet_int(r1, 0x107, 0x9, &(0x7f0000000080), 0x4) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x80000, 0x0) openat(r2, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20) 11:35:10 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0xf0ffff, 0x0, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:35:10 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="2e0000002e008183ad5de0713c444d00070000001000034000ff39a0053582c137153e37835b3f00040000000000", 0x2e}], 0x1}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 11:35:10 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00', 0x2}) 11:35:10 executing program 1: r0 = socket$inet_sctp(0x2, 0x1000000000000005, 0x84) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x20, 0x4a4100) mkdirat$cgroup(r1, &(0x7f0000000040)='syz0\x00', 0x1ff) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000300)={0x0, @in={{0x2, 0x0, @multicast1}}}, 0x0) 11:35:10 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r0}) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r2, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x144, r3, 0x24, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x60, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x100}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x44}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x69a}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xee}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}]}, @TIPC_NLA_NODE={0x44, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xc00000000}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x100000000}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x800}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x20}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK={0x28, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_LINK={0x28, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}]}, @TIPC_NLA_MEDIA={0x3c, 0x5, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x4008045}, 0x40) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SMI(r5, 0xaeb7) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a0000120800000088b070") 11:35:10 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x1000000, 0x0, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:35:10 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000300)={0x0, @in={{0x2, 0x0, @multicast1}}}, 0x0) setsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f00000003c0)="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", 0x1000) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000000)=0xdd5f, 0x4) pause() syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x0, 0x2) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000080)={'security\x00', 0x49, "09b4d850f283148f927fe9ac3269b3b444ac5191afb418ce616c09b6de33b586d97d4a46843454589fc735f80bc0eaf9dfd469aaa1f1673e12a377d223c355db54fa85a26f2b612d6f"}, &(0x7f0000000100)=0x6d) [ 647.364395] *** Guest State *** 11:35:10 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00', 0x2}) 11:35:10 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="2e0000002e008183ad5de0713c444d00070000001000034000ff39a0053582c137153e37835b3f00040000000000", 0x2e}], 0x1}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) [ 647.396259] CR0: actual=0x0000000000050032, shadow=0x0000000000050012, gh_mask=fffffffffffffff7 [ 647.405143] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 11:35:10 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00', 0x2}) [ 647.477858] CR3 = 0x0000000000000000 [ 647.496354] RSP = 0x0000000000000000 RIP = 0x0000000000008000 11:35:10 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x2000000, 0x0, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) [ 647.525625] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 647.545279] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 647.581667] CS: sel=0x3000, attr=0x08093, limit=0xffffffff, base=0x0000000000030000 [ 647.623577] DS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 647.645177] SS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 647.668024] ES: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 647.691049] FS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 647.713694] GS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 647.732346] GDTR: limit=0x00000000, base=0x0000000000000000 [ 647.743968] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 647.769200] IDTR: limit=0x00000000, base=0x0000000000000000 [ 647.780359] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 647.791664] EFER = 0x0000000000006000 PAT = 0x0007040600070406 [ 647.801547] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 647.812192] Interruptibility = 00000008 ActivityState = 00000000 [ 647.821858] *** Host State *** [ 647.825300] RIP = 0xffffffff811b3710 RSP = 0xffff888051bd78b8 [ 647.834522] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 647.844661] FSBase=00007f45eb8ae700 GSBase=ffff8880ae900000 TRBase=fffffe0000003000 [ 647.855617] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 647.864817] CR0=0000000080050033 CR3=000000009ce59000 CR4=00000000001426e0 [ 647.875096] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201360 [ 647.884971] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 647.894173] *** Control State *** [ 647.901483] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 647.911362] EntryControls=0000d1ff ExitControls=002fefff [ 647.920099] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 647.935741] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 647.954967] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 647.973734] reason=80000021 qualification=0000000000000000 [ 647.983262] IDTVectoring: info=00000000 errcode=00000000 [ 647.993646] TSC Offset = 0xfffffea3106b22a1 [ 648.001235] EPT pointer = 0x000000009400101e [ 648.069520] *** Guest State *** [ 648.082746] CR0: actual=0x0000000000050032, shadow=0x0000000000050012, gh_mask=fffffffffffffff7 [ 648.117530] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 648.134411] CR3 = 0x0000000000000000 [ 648.141685] RSP = 0x0000000000000000 RIP = 0x0000000000008000 [ 648.152288] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 648.162914] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 648.175325] CS: sel=0x3000, attr=0x08093, limit=0xffffffff, base=0x0000000000030000 [ 648.193586] DS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 648.213129] SS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 648.234692] ES: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 648.250773] FS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 648.266846] GS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 648.286296] GDTR: limit=0x00000000, base=0x0000000000000000 [ 648.304884] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 648.324258] IDTR: limit=0x00000000, base=0x0000000000000000 [ 648.356669] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 648.364656] EFER = 0x0000000000006000 PAT = 0x0007040600070406 [ 648.401797] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 648.421682] Interruptibility = 00000008 ActivityState = 00000000 [ 648.441441] *** Host State *** [ 648.444780] RIP = 0xffffffff811b3710 RSP = 0xffff88805427f8b8 [ 648.461374] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 648.481572] FSBase=00007f45eb88d700 GSBase=ffff8880ae800000 TRBase=fffffe0000003000 [ 648.496240] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 648.516319] CR0=0000000080050033 CR3=000000009ce59000 CR4=00000000001426f0 [ 648.533360] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87201360 [ 648.551253] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 648.566204] *** Control State *** [ 648.575268] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 648.593147] EntryControls=0000d1ff ExitControls=002fefff [ 648.611637] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 648.631397] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 648.651253] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 648.658224] reason=80000021 qualification=0000000000000000 [ 648.676325] IDTVectoring: info=00000000 errcode=00000000 [ 648.696286] TSC Offset = 0xfffffea3106b22a1 [ 648.700716] EPT pointer = 0x000000009400101e 11:35:12 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x20000, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2, 0x40) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rfkill\x00', 0x4000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x80) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000000)=@req3={0x6000000, 0x3, 0x6000000, 0x3}, 0x1c) setsockopt$packet_int(r1, 0x107, 0x9, &(0x7f00000001c0)=0x100000, 0xffffffffffffffdb) 11:35:12 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="2e0000002e008183ad5de0713c444d00070000001000034000ff39a0053582c137153e37835b3f00040000000000", 0x2e}], 0x1}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 11:35:12 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00', 0x2}) 11:35:12 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x3000000, 0x0, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:35:12 executing program 1: r0 = socket$inet_sctp(0x2, 0x1000000000000005, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000300)={0x0, @in={{0x2, 0x0, @multicast1}}}, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000000)={'erspan0\x00', {0x2, 0x4e23, @remote}}) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x9, 0x44000) ioctl$SCSI_IOCTL_DOORLOCK(r1, 0x5380) 11:35:12 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SMI(r3, 0xaeb7) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a0000120800000088b070") 11:35:13 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00', 0x2}) 11:35:13 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x4000000, 0x0, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:35:13 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="2e0000002e008183ad5de0713c444d00070000001000034000ff39a0053582c137153e37835b3f00040000000000", 0x2e}], 0x1}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) [ 649.949235] *** Guest State *** [ 649.952677] CR0: actual=0x0000000000050032, shadow=0x0000000000050012, gh_mask=fffffffffffffff7 [ 649.966667] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 649.975522] CR3 = 0x0000000000000000 [ 649.996786] RSP = 0x0000000000000000 RIP = 0x0000000000008000 11:35:13 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x6000000, 0x0, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) [ 650.021524] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 650.050613] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 11:35:13 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="2e0000002e008183ad5de0713c444d00070000001000034000ff39a0053582c137153e37835b3f00040000000000", 0x2e}], 0x1}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) [ 650.083161] CS: sel=0x3000, attr=0x08093, limit=0xffffffff, base=0x0000000000030000 [ 650.119976] DS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 650.145287] SS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 11:35:13 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x7000000, 0x0, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) [ 650.187002] ES: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 650.238376] FS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 650.268705] GS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 650.285945] GDTR: limit=0x00000000, base=0x0000000000000000 [ 650.301326] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 650.315691] IDTR: limit=0x00000000, base=0x0000000000000000 [ 650.361207] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 650.392128] EFER = 0x0000000000006000 PAT = 0x0007040600070406 [ 650.412307] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 650.427216] Interruptibility = 00000008 ActivityState = 00000000 [ 650.433471] *** Host State *** [ 650.455520] RIP = 0xffffffff811b3710 RSP = 0xffff88808fbff8b8 [ 650.477144] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 650.497924] FSBase=00007f45eb8ae700 GSBase=ffff8880ae800000 TRBase=fffffe0000033000 [ 650.522400] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 650.542181] CR0=0000000080050033 CR3=000000008eb57000 CR4=00000000001426f0 [ 650.553896] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201360 [ 650.573664] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 650.592500] *** Control State *** [ 650.596120] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 650.622393] EntryControls=0000d1ff ExitControls=002fefff [ 650.627993] net_ratelimit: 14 callbacks suppressed [ 650.628001] protocol 88fb is buggy, dev hsr_slave_0 [ 650.628051] protocol 88fb is buggy, dev hsr_slave_1 [ 650.664750] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 650.691656] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 650.700552] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 650.711344] reason=80000021 qualification=0000000000000000 [ 650.719636] IDTVectoring: info=00000000 errcode=00000000 [ 650.725209] TSC Offset = 0xfffffea1b100bd69 [ 650.734227] EPT pointer = 0x00000000900d301e [ 650.786282] protocol 88fb is buggy, dev hsr_slave_0 [ 650.791397] protocol 88fb is buggy, dev hsr_slave_1 11:35:14 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000000)=@req3={0x6000000, 0x3, 0x6000000, 0x3}, 0x1c) setsockopt$packet_int(r1, 0x107, 0x9, &(0x7f0000000080), 0x4) openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x1, 0x0) 11:35:14 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="2e0000002e008183ad5de0713c444d00070000001000034000ff39a0053582c137153e37835b3f00040000000000", 0x2e}], 0x1}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 11:35:14 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00', 0x2}) 11:35:14 executing program 1: r0 = socket$inet_sctp(0x2, 0x1000000000000005, 0x84) writev(r0, &(0x7f0000001700)=[{&(0x7f0000000000)="60de7cb1ad9a220bf8ac03a0c2e687eee82f86db0c7cbce10d7c5b4ff90618d24c6858ec82016b2ee86ac0a7ecd66a191bd5a3bbfca57c04657e5402d810fd3774e35c8d36693b7e63650e9f8b1415e2dff9ab2c1f3644", 0x57}, {&(0x7f00000001c0)="898fcb0c33dc111489313b31c1b1ab9249372267950adb6480af671da8ac8b90f21cdeae97a10dc4f916cfd9c18a7beb90f9d365223afbf6cb988312c0035e45b79b373f06ec28647043ca2f295114bf", 0x50}, {&(0x7f0000000240)="cdc7f8e92360e336c1c278f69d326248b096725792f29c5bffc90308ed28f944b715ca85bc924203a19a1d5eb387ae9d0d3fd86118dc021f592c528263b2098568a807e299bf96b5cef35aafa943423dce", 0x51}, {&(0x7f00000002c0)="810be3b6dfabacf96f3d23be43334a8ff12d33edc84e0b8aa853ff201509a3fdc0649da37b7b97a4bb25742f049ed9448b7ff24287a53b5760755b8acb8a17219e1cd3fb7a92f0f6dd5a9ff11c1c26c51fbaa657f7c42c5419282385b2ee7ca5c3ef37a1880d528dfedd4d7c7bf4530b9890db4821e81eb1cc0c25ff0c628093dc01149e2b15b60612c31dfd09ac34c55db84c8dc7ea", 0x96}, {&(0x7f00000013c0)="eb419f1adb9fe37862af51ed0a34f43abc4021b6e9e4f584f0e6d1e85a2bb1cecb410684a34e179b04b4d33de4077bb0c48ea89a2cc2975c16cd3d9e1b06834b72c381926546f75e30ee555fba486c55693d3aeb633a966ad6ef748cfbd2950788c792b7a0c3748e2aba0a4c81719aecfa21cd5a4d79d14de5529da6388575b49b5ee22bba8b1f8c9ccef2fd3057", 0x8e}, {&(0x7f0000001480)="cbb51c60e0876fa1d8ba12f572cc1ac92ebc19ed4297db5a319a103b47ca3d39c40443f506d989df0c4519ea8de22d934ae44d747d0441d067417a03bdd857baea0a0ca0d7ac2c9efbb35d691acfe84dd653954e40bc638412ddb450d1897273f8fb6a257e553798feba1b2f7a355a149c2dfb40201821eaefb6c8454df5b92d7756b4fdba998ea482e59598c3847eca884d5493faf87fb52b17929906befa06eea99b8e7eb2974a6cd17be96f976ecca33d403c39869172e6a6fe2896f114444529a4cd603dc3f7b4001663198e23f1a07d41d78c9e06ada01e9ede0f92b588da9559af8a", 0xe5}, {&(0x7f0000001580)="617cccc4780ecc4f42d264cca50bc4ea405267aa41739eade015f8f63f48b2cfa06f8c1b8e0a19b383d9f4f5c2f96371c132e66478d67e244e966421cfdc567210008d6aeaf00e7f779316cf8c88e46c95ebf1c5e4fd2051518e1897036e3274be308f858d652c57da0014b09d9810c942", 0x71}, {&(0x7f0000001600)="0ed6f45c7cdaf26e93cc3c55c79a82efa832ffcdfec48681471c720b94784c0b25588ffa06b849210540d3c741e67af599671eddb3294530a27e88c5460af3e826c161cb470341a89f92885bfe4d00b14bd3ca2005fa0c1b225bb4ace997e732ef815b8bcaace97401963fdd00ad918fd324dd55e3600543b0d9a07348a10b4a58544b6412576625cd108eec7f8978ca8fde5df78f5e38a7c725eb89459e60d33f28d35bf7ddfe266401229128de6d6d2e8de5612f727b3fed9e78a025002ad587e47356ee6e3c2f8b2dcf52e64d2db8fa7f5e46b7053728955e07117c5c81fe04d7ea2f4dd1e08fa0d96d370a3c24773b98997e33", 0xf5}], 0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f00000003c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000000180)=0x1008) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000000c0)={r1, @in={{0x2, 0x0, @multicast1}}}, 0x0) 11:35:14 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x8000000, 0x0, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:35:14 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_SREGS(r0, 0x4138ae84, &(0x7f00000000c0)={{0x10f006, 0xf000, 0x1a, 0x625d, 0x3f, 0x3, 0x305, 0x0, 0x10000, 0xc4fd, 0x9, 0x1000}, {0x1, 0x0, 0xe, 0x9, 0x80, 0x2, 0xa338, 0x7fffffff, 0x0, 0x3f, 0x3, 0x9}, {0x3000, 0x4000, 0x0, 0x40, 0x8, 0xfffffffffffffffc, 0x11, 0x101, 0x100000000, 0xd35a, 0x9, 0x8}, {0xd000, 0x0, 0xf, 0x1493, 0x2, 0x2, 0x1, 0x4, 0x5, 0x8, 0x3f, 0x2ab}, {0x10d002, 0x4000, 0xe, 0x8, 0x400, 0x101, 0x1, 0x2, 0x7, 0x526, 0x3f, 0x1}, {0x5000, 0x3, 0xf, 0x100000001, 0x6, 0x6, 0xff, 0x3, 0x100000001, 0x81, 0xa66, 0x9}, {0x4, 0x6000, 0xc, 0x2, 0x2, 0x7fffffff, 0x7, 0x80000000, 0x2, 0x473f, 0x1, 0x3ff}, {0x1004, 0x100000, 0xd, 0x1f, 0x14, 0x2, 0x0, 0xfff, 0x641, 0xed1a, 0x7, 0x7}, {0x1, 0x1000}, {0x0, 0x4000}, 0x40024, 0x0, 0x1000, 0x0, 0x3, 0xc000, 0x10000, [0x2, 0x5, 0xffffffff80000000]}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SMI(r3, 0xaeb7) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340)='/dev/autofs\x00', 0xa000, 0x0) write$FUSE_OPEN(r4, &(0x7f0000000380)={0x20, 0x0, 0x7, {0x0, 0x1}}, 0x20) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a0000120800000088b070") ioctl$KVM_XEN_HVM_CONFIG(r2, 0x4038ae7a, &(0x7f0000000300)={0x99d0, 0x9a8, &(0x7f0000000000)="89ebea9b2eea87e0a67b0b4dfb78c28e378e2f9534469b02", &(0x7f0000000200)="99b410e434546b433c2ba37a005a919306a7f4c22ad981a20727a6622692fa5bf94f3fa377783722c724f7f7969582b336b6929d694236fdf780d8621006eddab64aca139369bc887e4c52f215e195bea315021f6214efb0d810b343e5810982608ef398cf6ba9a07efa7688d68ab5956751eb1335d3da6d69570f24a0fc76e42682b0755075122b26a3629603d7e3888cc3d1e6522514272924995e0d17ab74c6a2b0e47448955f5a164049fd309afcc0ac23c53add56cbfa7dfd0cf4b39eac910c6606813dc05b1e9598c022ac19c2854fe78876a4fd20093407d70fc4d79b6c0cd19965b559d536b534040654d57923084a31f49cb2", 0x18, 0xf7}) 11:35:14 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x8060000, 0x0, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:35:14 executing program 1: r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x80000000, 0x480000) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0xf7) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dsp\x00', 0x2, 0x0) ioctl$TIOCMGET(r1, 0x5415, &(0x7f00000001c0)) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000300)={0x0, @in={{0x2, 0x0, @multicast1}}}, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000080)={r2, @in6={{0xa, 0x4e20, 0x1, @local, 0x7}}, 0xffffffffffff0000, 0x6, 0x8001, 0x9, 0x2}, &(0x7f0000000140)=0x98) 11:35:14 executing program 4: perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="2e0000002e008183ad5de0713c444d00070000001000034000ff39a0053582c137153e37835b3f00040000000000", 0x2e}], 0x1}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) [ 651.717051] *** Guest State *** [ 651.732079] CR0: actual=0x0000000000050032, shadow=0x0000000000050012, gh_mask=fffffffffffffff7 [ 651.746260] protocol 88fb is buggy, dev hsr_slave_0 [ 651.746292] protocol 88fb is buggy, dev hsr_slave_1 [ 651.751320] protocol 88fb is buggy, dev hsr_slave_1 [ 651.756394] protocol 88fb is buggy, dev hsr_slave_0 11:35:14 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00', 0x2}) [ 651.761421] protocol 88fb is buggy, dev hsr_slave_0 [ 651.766502] protocol 88fb is buggy, dev hsr_slave_1 [ 651.780391] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 11:35:14 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0xb000000, 0x0, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) [ 651.813678] CR3 = 0x0000000000000000 [ 651.822632] RSP = 0x0000000000000000 RIP = 0x0000000000008000 [ 651.847075] RFLAGS=0x00000002 DR7 = 0x0000000000000400 11:35:15 executing program 4: perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="2e0000002e008183ad5de0713c444d00070000001000034000ff39a0053582c137153e37835b3f00040000000000", 0x2e}], 0x1}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) [ 651.874600] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 651.900435] CS: sel=0x3000, attr=0x08093, limit=0xffffffff, base=0x0000000000030000 [ 651.924064] DS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 651.946440] SS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 651.961678] ES: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 652.002091] FS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 652.016490] GS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 652.033692] GDTR: limit=0x00000000, base=0x0000000000000000 [ 652.047713] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 652.055798] IDTR: limit=0x00000000, base=0x0000000000000000 [ 652.069832] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 652.080464] EFER = 0x0000000000006000 PAT = 0x0007040600070406 [ 652.090840] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 652.100572] Interruptibility = 00000008 ActivityState = 00000000 [ 652.110834] *** Host State *** [ 652.114153] RIP = 0xffffffff811b3710 RSP = 0xffff88808e30f8b8 [ 652.123161] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 652.133591] FSBase=00007f45eb8ae700 GSBase=ffff8880ae900000 TRBase=fffffe0000033000 [ 652.143619] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 652.153439] CR0=0000000080050033 CR3=0000000038501000 CR4=00000000001426e0 [ 652.162764] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87201360 [ 652.173393] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 652.181732] *** Control State *** [ 652.185309] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 652.196064] EntryControls=0000d1ff ExitControls=002fefff [ 652.214081] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 652.226362] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 652.237676] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 652.254297] reason=80000021 qualification=0000000000000000 [ 652.266413] IDTVectoring: info=00000000 errcode=00000000 [ 652.281025] TSC Offset = 0xfffffea0bb90ad87 [ 652.294637] EPT pointer = 0x000000004753201e 11:35:17 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x4, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000000)=@req3={0x6000000, 0x3, 0x6000000, 0x3}, 0x1c) r2 = shmget$private(0x0, 0x2000, 0x1, &(0x7f0000ffd000/0x2000)=nil) shmctl$SHM_UNLOCK(r2, 0xc) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000040)=0x0) get_robust_list(r3, &(0x7f0000000240)=&(0x7f0000000300)={&(0x7f00000002c0)={&(0x7f00000000c0)}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)}}, &(0x7f0000000280)=0x18) setsockopt$packet_int(r1, 0x107, 0x9, &(0x7f0000000080), 0x4) 11:35:17 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00', 0x2}) 11:35:17 executing program 1: r0 = socket$inet_sctp(0x2, 0x1000000000000005, 0x84) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) ioprio_get$pid(0x2, r1) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000300)={0x0, @in={{0x2, 0x0, @multicast1}}}, 0x0) 11:35:17 executing program 4: perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="2e0000002e008183ad5de0713c444d00070000001000034000ff39a0053582c137153e37835b3f00040000000000", 0x2e}], 0x1}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 11:35:17 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0xd000000, 0x0, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:35:17 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x109000, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240)='/dev/snapshot\x00', 0x105200, 0x0) getpeername$unix(r2, &(0x7f0000000280), &(0x7f0000000300)=0x6e) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x4020000200000002) ioctl$KVM_SMI(r4, 0xaeb7) r5 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0xfffffffffffffff7, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000080)='/dev/kvm\x00'}, 0x30) r7 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1cb7f5ae731359da, r7) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000140)={[], 0x2, 0x1f, 0x6, 0x5, 0x52f, r6}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$CAPI_REGISTER(r0, 0x400c4301, &(0x7f00000000c0)={0x7, 0x1c, 0x10000}) syz_open_dev$mice(&(0x7f0000000340)='/dev/input/mice\x00', 0x0, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="0a0000120800000088b070") 11:35:17 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00', 0x2}) 11:35:17 executing program 4: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="2e0000002e008183ad5de0713c444d00070000001000034000ff39a0053582c137153e37835b3f00040000000000", 0x2e}], 0x1}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 11:35:17 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x11000000, 0x0, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:35:17 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000300)={0x0, @in={{0x2, 0x0, @multicast1}}}, 0x0) [ 654.278199] *** Guest State *** [ 654.286335] CR0: actual=0x0000000000050032, shadow=0x0000000000050012, gh_mask=fffffffffffffff7 [ 654.316810] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 11:35:17 executing program 0: socketpair$unix(0x1, 0x4000001, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000000)=@req3={0x6000000, 0x3, 0x6000000, 0x3}, 0x1c) setsockopt$packet_int(r1, 0x107, 0x9, &(0x7f0000000080), 0x4) [ 654.343608] CR3 = 0x0000000000000000 11:35:17 executing program 4: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="2e0000002e008183ad5de0713c444d00070000001000034000ff39a0053582c137153e37835b3f00040000000000", 0x2e}], 0x1}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 11:35:17 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff', 0x2}) [ 654.370264] RSP = 0x0000000000000000 RIP = 0x0000000000008000 [ 654.396671] RFLAGS=0x00000002 DR7 = 0x0000000000000400 11:35:17 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x14000000, 0x0, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:35:17 executing program 1: r0 = socket$inet_sctp(0x2, 0x1000000000000005, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000300)={0x0, @in={{0x2, 0x0, @multicast1}}}, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x40, 0x4) accept(r0, &(0x7f0000000080)=@tipc=@name, &(0x7f0000000100)=0x80) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000040)=0x8, 0x4) [ 654.427274] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 654.449161] CS: sel=0x3000, attr=0x08093, limit=0xffffffff, base=0x0000000000030000 [ 654.480381] DS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 654.515189] SS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 11:35:17 executing program 4: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="2e0000002e008183ad5de0713c444d00070000001000034000ff39a0053582c137153e37835b3f00040000000000", 0x2e}], 0x1}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 11:35:17 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00', 0x2}) [ 654.537804] ES: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 654.576320] FS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 654.596317] GS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 654.653524] GDTR: limit=0x00000000, base=0x0000000000000000 [ 654.713416] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 654.727278] IDTR: limit=0x00000000, base=0x0000000000000000 [ 654.746362] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 654.754471] EFER = 0x0000000000006000 PAT = 0x0007040600070406 [ 654.776274] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 654.783877] Interruptibility = 00000008 ActivityState = 00000000 [ 654.802266] *** Host State *** [ 654.805514] RIP = 0xffffffff811b3710 RSP = 0xffff8880326df8b8 [ 654.833039] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 654.862430] FSBase=00007f45eb8ae700 GSBase=ffff8880ae900000 TRBase=fffffe0000003000 [ 654.890097] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 654.896015] CR0=0000000080050033 CR3=00000000483f1000 CR4=00000000001426e0 [ 654.926333] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87201360 [ 654.933160] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 654.956314] *** Control State *** [ 654.959920] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 654.976280] EntryControls=0000d1ff ExitControls=002fefff [ 654.981880] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 655.002069] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 655.021979] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 655.052004] reason=80000021 qualification=0000000000000000 [ 655.086680] IDTVectoring: info=00000000 errcode=00000000 [ 655.092187] TSC Offset = 0xfffffe9f5cbded2a [ 655.122339] EPT pointer = 0x0000000055a3d01e [ 655.151956] *** Guest State *** [ 655.166263] CR0: actual=0x000000008005003f, shadow=0x000000008005001f, gh_mask=fffffffffffffff7 [ 655.206281] CR4: actual=0x0000000000002068, shadow=0x0000000000000028, gh_mask=ffffffffffffe871 [ 655.236301] CR3 = 0x0000000000000000 [ 655.240153] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 655.266281] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 655.272388] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 655.296266] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 655.316275] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 655.324369] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 655.342729] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 655.371792] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 655.408185] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 655.435549] GDTR: limit=0x00000000, base=0x0000000000000000 [ 655.456308] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 655.476266] IDTR: limit=0x00000000, base=0x0000000000000000 [ 655.484343] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 655.507070] EFER = 0x0000000000006500 PAT = 0x0007040600070406 [ 655.513563] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 655.536331] Interruptibility = 00000000 ActivityState = 00000000 [ 655.552264] *** Host State *** [ 655.555485] RIP = 0xffffffff811b3710 RSP = 0xffff88804ab178b8 [ 655.581801] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 655.605474] FSBase=00007f45eb86c700 GSBase=ffff8880ae900000 TRBase=fffffe0000003000 [ 655.628359] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 655.634272] CR0=0000000080050033 CR3=00000000483f1000 CR4=00000000001426e0 [ 655.656292] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87201360 [ 655.663059] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 655.686247] *** Control State *** [ 655.689999] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 655.706259] EntryControls=0000d3ff ExitControls=002fefff [ 655.711807] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 655.726286] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 655.736288] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 655.756208] reason=80000021 qualification=0000000000000000 [ 655.762537] IDTVectoring: info=00000000 errcode=00000000 [ 655.796416] TSC Offset = 0xfffffe9ef2eceaaf [ 655.800771] EPT pointer = 0x0000000033dc901e 11:35:19 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SMI(r3, 0xaeb7) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000003c0)={{}, {0x0, 0x0, 0x0, 0x7fff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x1}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0x4000000000000, 0x0, 0x0, 0x0, 0x8}, {0x1000000}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6503}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a0000120800000088b070") 11:35:19 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x1c000000, 0x0, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:35:19 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="2e0000002e008183ad5de0713c444d00070000001000034000ff39a0053582c137153e37835b3f00040000000000", 0x2e}], 0x1}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 11:35:19 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff', 0x2}) 11:35:19 executing program 1: r0 = socket$inet_sctp(0x2, 0x1000000000000005, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @multicast1}}}, 0x0) [ 655.906241] net_ratelimit: 9 callbacks suppressed [ 655.906248] protocol 88fb is buggy, dev hsr_slave_0 [ 655.906273] protocol 88fb is buggy, dev hsr_slave_1 [ 655.911149] protocol 88fb is buggy, dev hsr_slave_1 [ 655.916254] protocol 88fb is buggy, dev hsr_slave_0 [ 655.921228] protocol 88fb is buggy, dev hsr_slave_0 [ 655.926209] protocol 88fb is buggy, dev hsr_slave_1 [ 655.931201] protocol 88fb is buggy, dev hsr_slave_1 [ 656.070915] *** Guest State *** [ 656.074230] CR0: actual=0x0000000000050032, shadow=0x0000000000050012, gh_mask=fffffffffffffff7 [ 656.098921] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 656.119948] CR3 = 0x0000000000000000 [ 656.123692] RSP = 0x0000000000000000 RIP = 0x0000000000008000 [ 656.153651] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 656.169320] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 656.187963] CS: sel=0x3000, attr=0x08093, limit=0xffffffff, base=0x0000000000030000 [ 656.208480] DS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 656.229279] SS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 656.248389] ES: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 656.267681] FS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 656.287093] GS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 656.306965] GDTR: limit=0x00000000, base=0x0000000000000000 [ 656.326254] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000001000000 [ 656.345036] IDTR: limit=0x00000000, base=0x0000000000000000 [ 656.363908] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 656.382374] EFER = 0x0000000000006003 PAT = 0x0007040600070406 [ 656.394502] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 656.412626] Interruptibility = 00000008 ActivityState = 00000000 [ 656.428043] *** Host State *** [ 656.431328] RIP = 0xffffffff811b3710 RSP = 0xffff88802c64f8b8 [ 656.450423] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 656.465645] FSBase=00007f45eb8ae700 GSBase=ffff8880ae800000 TRBase=fffffe0000003000 [ 656.482209] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 656.492769] CR0=0000000080050033 CR3=0000000055155000 CR4=00000000001426f0 [ 656.514186] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201360 [ 656.531124] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 656.541597] *** Control State *** [ 656.545146] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 656.564470] EntryControls=0000d1ff ExitControls=002fefff [ 656.580331] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 656.595696] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 656.612193] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 656.625234] reason=80000021 qualification=0000000000000000 [ 656.641401] IDTVectoring: info=00000000 errcode=00000000 [ 656.650604] TSC Offset = 0xfffffe9e6891383b [ 656.663670] EPT pointer = 0x00000000a94de01e 11:35:20 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x1, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000000)=@req3={0x6000000, 0x3, 0x6000000, 0x3}, 0x1c) ioctl$FIGETBSZ(r1, 0x2, &(0x7f0000000180)) setsockopt$packet_int(r1, 0x107, 0x9, &(0x7f0000000080), 0x4) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x20005, 0x0) ioctl$VIDIOC_S_MODULATOR(r2, 0x40445637, &(0x7f00000000c0)={0x1f, "602bff1eeabbe7e0f2a435cc5132c5f80e3bf68157c89b2c0c194f7c74c6e886", 0x8, 0x5, 0x8, 0x1c, 0x7}) syz_open_dev$midi(&(0x7f0000000140)='/dev/midi#\x00', 0x5, 0x2) 11:35:20 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x20000000, 0x0, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:35:20 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="2e0000002e008183ad5de0713c444d00070000001000034000ff39a0053582c137153e37835b3f00040000000000", 0x2e}], 0x1}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 11:35:20 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff', 0x2}) 11:35:20 executing program 1: r0 = socket$inet_sctp(0x2, 0x1000000000000005, 0x84) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000300)={0x0, @in={{0x2, 0x0, @multicast1}}}, 0x0) 11:35:20 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl(r1, 0x81, &(0x7f00000000c0)="0a0000120800000088b070") 11:35:20 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x21000000, 0x0, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:35:20 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x3, 0x80000) setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f00000000c0)={0x81, {{0xa, 0x4e23, 0x7fffffff, @mcast2}}}, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0x9, &(0x7f0000000080), 0x4) 11:35:20 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000300)={0x0, @in={{0x2, 0x0, @multicast1}}}, 0x0) 11:35:20 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff', 0x2}) 11:35:20 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="2e0000002e008183ad5de0713c444d00070000001000034000ff39a0053582c137153e37835b3f00040000000000", 0x2e}], 0x1}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) [ 657.526556] *** Guest State *** [ 657.529978] CR0: actual=0x0000000000050032, shadow=0x0000000000050012, gh_mask=fffffffffffffff7 11:35:20 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x28000000, 0x0, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) [ 657.573396] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 657.613188] CR3 = 0x0000000000000000 11:35:20 executing program 1: r0 = socket$inet_sctp(0x2, 0x1000000000000005, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000300)={0x0, @in={{0x2, 0x0, @multicast1}}}, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x420000, 0x0) ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f0000000040)={0xfffffffffffffff9, 0x8, 0x2}) 11:35:20 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff', 0x2}) 11:35:20 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="2e0000002e008183ad5de0713c444d00070000001000034000ff39a0053582c137153e37835b3f00040000000000", 0x2e}], 0x1}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 11:35:20 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000000)=@req3={0x6000000, 0x3, 0x6000000, 0x3}, 0x1c) setsockopt$packet_int(r1, 0x107, 0x1b, &(0x7f0000000080), 0x0) [ 657.641886] RSP = 0x0000000000000000 RIP = 0x0000000000008000 [ 657.661743] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 657.674779] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 657.712560] CS: sel=0x3000, attr=0x08093, limit=0xffffffff, base=0x0000000000030000 11:35:20 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x29000000, 0x0, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) [ 657.755409] DS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 657.776588] SS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 657.801053] ES: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 657.823512] FS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 657.860098] GS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 657.883551] GDTR: limit=0x00000000, base=0x0000000000000000 [ 657.909337] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 657.926474] IDTR: limit=0x00000000, base=0x0000000000000000 [ 657.943593] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 657.961781] EFER = 0x0000000000006000 PAT = 0x0007040600070406 [ 657.976314] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 657.986292] protocol 88fb is buggy, dev hsr_slave_0 [ 657.986297] protocol 88fb is buggy, dev hsr_slave_0 [ 657.986357] protocol 88fb is buggy, dev hsr_slave_1 [ 657.996834] Interruptibility = 00000008 ActivityState = 00000000 [ 658.031780] *** Host State *** [ 658.035009] RIP = 0xffffffff811b3710 RSP = 0xffff8880573778b8 [ 658.066250] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 658.076596] FSBase=00007f45eb8ae700 GSBase=ffff8880ae900000 TRBase=fffffe0000033000 [ 658.084403] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 658.136214] CR0=0000000080050033 CR3=0000000055155000 CR4=00000000001426e0 [ 658.143281] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87201360 [ 658.155874] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 658.162202] *** Control State *** [ 658.165665] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 658.178208] EntryControls=0000d1ff ExitControls=002fefff [ 658.183677] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 658.206249] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 658.212951] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 658.226224] reason=80000021 qualification=0000000000000000 [ 658.232555] IDTVectoring: info=00000000 errcode=00000000 [ 658.247025] TSC Offset = 0xfffffe9da100c9fa [ 658.251359] EPT pointer = 0x000000008daa201e 11:35:21 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KVM_SMI(r3, 0xaeb7) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl(r2, 0x3, &(0x7f0000000100)="eb981f48e4dd6bee9e7c003cff60439d5801595ee586250f61553df29088ccc38580faad3326b0935442819b14d22fc96490b2abe2064c2814c3736740e1fb872fb4112907b6af828250bb6bc90c940c3bfad52ab31877f457f4aee8098b9e6640d228a9f4c389b22167ed326241e37049db57402fcd3daabe5045aa4911d00a9112a6d39922be54aec4f8e772c782f13c1e178a9adbf4e3a7a0b7f071ee2e30e1947c4103a34739ce0813cf49cbe591f391a82aadf4bdabf1") ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl(r2, 0x80, &(0x7f00000000c0)="0aa446ae00001208000000") ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000000)={r0}) bind$vsock_dgram(r4, &(0x7f0000000080)={0x28, 0x0, 0x0, @hyper}, 0x10) 11:35:21 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$nl_generic(0x10, 0x3, 0x10) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) clock_nanosleep(0x0, 0x1, &(0x7f00000000c0)={r2, r3+10000000}, &(0x7f0000000100)) r4 = dup2(r0, r1) setsockopt$inet_udp_int(r4, 0x11, 0xa, &(0x7f0000000000), 0x4) r5 = socket$inet_sctp(0x2, 0x1000000000000005, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f0000000300)={0x0, @in={{0x2, 0x0, @multicast1}}}, 0x0) ioctl$SIOCRSSL2CALL(r4, 0x89e2, &(0x7f0000000040)=@default) 11:35:21 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="2e0000002e008183ad5de0713c444d00070000001000034000ff39a0053582c137153e37835b3f00040000000000", 0x2e}], 0x1}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 11:35:21 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x2}) 11:35:21 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x2b000000, 0x0, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:35:21 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x2c000000, 0x0, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:35:21 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="2e0000002e008183ad5de0713c444d00070000001000034000ff39a0053582c137153e37835b3f00040000000000", 0x2e}], 0x1}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 11:35:21 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x2}) 11:35:21 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000300)={0x0, @in={{0x2, 0x0, @multicast1}}}, 0x0) [ 658.488022] *** Guest State *** [ 658.491447] CR0: actual=0x0000000000050032, shadow=0x0000000000050012, gh_mask=fffffffffffffff7 11:35:21 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x2f000000, 0x0, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) [ 658.536729] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 658.568237] CR3 = 0x0000000000000000 [ 658.585372] RSP = 0x0000000000000000 RIP = 0x0000000000008000 [ 658.614117] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 658.629489] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 658.645176] CS: sel=0x3000, attr=0x08093, limit=0xffffffff, base=0x0000000000030000 [ 658.658010] DS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 658.671467] SS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 658.679888] ES: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 658.688251] FS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 658.696880] GS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 658.704987] GDTR: limit=0x00000000, base=0x0000000000000000 [ 658.713381] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 658.721732] IDTR: limit=0x00000000, base=0x0000000000000000 [ 658.736419] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 658.744563] EFER = 0x0000000000006000 PAT = 0x0007040600070406 [ 658.754740] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 658.762541] Interruptibility = 00000008 ActivityState = 00000000 [ 658.770232] *** Host State *** [ 658.773579] RIP = 0xffffffff811b3710 RSP = 0xffff88804a5e78b8 [ 658.779928] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 658.786759] FSBase=00007f45eb8ae700 GSBase=ffff8880ae900000 TRBase=fffffe0000033000 [ 658.794678] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 658.806317] CR0=0000000080050033 CR3=000000004069f000 CR4=00000000001426e0 [ 658.816534] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87201360 [ 658.846313] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 658.852548] *** Control State *** [ 658.866318] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 658.873129] EntryControls=0000d1ff ExitControls=002fefff [ 658.886270] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 658.907232] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 658.914024] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 658.936260] reason=80000021 qualification=0000000000000000 [ 658.942716] IDTVectoring: info=00000000 errcode=00000000 [ 658.948746] TSC Offset = 0xfffffe9d1e22be52 [ 658.953193] EPT pointer = 0x000000003058201e [ 658.974271] *** Guest State *** [ 658.986731] CR0: actual=0x0000000000050032, shadow=0x0000000000050012, gh_mask=fffffffffffffff7 [ 659.026302] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 659.056286] CR3 = 0x0000000000000000 [ 659.061054] RSP = 0x0000000000000000 RIP = 0x0000000000008000 [ 659.076274] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 659.086520] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 659.106567] CS: sel=0x3000, attr=0x08093, limit=0xffffffff, base=0x0000000000030000 [ 659.114644] DS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 659.136257] SS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 659.144324] ES: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 659.167072] FS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 659.175150] GS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 659.196241] GDTR: limit=0x00000000, base=0x0000000000000000 [ 659.204326] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 659.219244] IDTR: limit=0x00000000, base=0x0000000000000000 [ 659.236419] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 659.244516] EFER = 0x0000000000006000 PAT = 0x0007040600070406 [ 659.266259] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 659.273803] Interruptibility = 00000008 ActivityState = 00000000 [ 659.286239] *** Host State *** [ 659.289560] RIP = 0xffffffff811b3710 RSP = 0xffff888048b478b8 [ 659.306294] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 659.312795] FSBase=00007f45eb88d700 GSBase=ffff8880ae900000 TRBase=fffffe0000033000 [ 659.326243] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 659.332222] CR0=0000000080050033 CR3=000000004069f000 CR4=00000000001426e0 [ 659.346294] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87201360 [ 659.366247] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 659.372394] *** Control State *** [ 659.375960] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 659.396245] EntryControls=0000d1ff ExitControls=002fefff [ 659.401793] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 659.416268] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 659.423068] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 659.436280] reason=80000021 qualification=0000000000000000 [ 659.446434] IDTVectoring: info=00000000 errcode=00000000 [ 659.456489] TSC Offset = 0xfffffe9cd68ceddf [ 659.460894] EPT pointer = 0x0000000056f8901e 11:35:23 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) dup(r0) r1 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x5, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x408200) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000000)=@req3={0x6000000, 0x3, 0x6000000, 0x3}, 0x1c) setsockopt$packet_int(r2, 0x107, 0x9, &(0x7f0000000080), 0x4) socketpair(0x9, 0x5, 0x9, &(0x7f0000001140)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffff9c, 0x84, 0x77, &(0x7f0000001180)={0x0, 0x0, 0x1, [0x3]}, &(0x7f00000011c0)=0xa) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r3, 0x84, 0x5, &(0x7f0000001200)={r4, @in={{0x2, 0x4e20, @local}}}, 0x84) 11:35:23 executing program 1: r0 = socket$inet_sctp(0x2, 0x1000000000000005, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e22, 0x1c00000000, @local, 0x2}}}, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000040)="98b68b9017f0b51c25decead85bb98af0fe76c3b5413d95d7e5af9e94fbc1ca8a7979715b87ce7fbf41507ee1c6023e12d1e0a00d80387bdf5ec8d", &(0x7f0000000080)="f4d03b76ec0f6b6127650a84ab9ac95ed46587333d", 0x1}, 0x20) 11:35:23 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00', 0x2}) 11:35:23 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="2e0000002e008183ad5de0713c444d00070000001000034000ff39a0053582c137153e37835b3f00040000000000", 0x2e}], 0x1}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 11:35:23 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x32010000, 0x0, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:35:23 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=[&(0x7f0000000180)='/dev/kvm\x00', &(0x7f00000001c0)='/dev/kvm\x00', &(0x7f0000000200)='+\x00', &(0x7f0000000240)='/dev/kvm\x00'], &(0x7f0000000540)=[&(0x7f00000002c0)='<#proc(\\]em0\x00', &(0x7f0000000300)='cpuset\x00', &(0x7f0000000340)='\xb6\x00', &(0x7f0000000380)='/dev/kvm\x00', &(0x7f0000000500)='/dev/kvm\x00']) ioctl$KVM_SMI(r3, 0xaeb7) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000580)="0a0000efabdf124f15e396") ioctl(r1, 0x7, &(0x7f00000000c0)="ac5c556304a5978434106af2e07292ddbab451cd6b33a4cb5d1efa37aa88232270296cd0ea504d343c662b95fbaa881c9db55ea62a1161514baa0f19dee79bc704f5044cbf312823810befd70bdd0c8fba016b8a5ba7452f93c61168b73ed1ff5c9409d6a58e95607fdc1fc29cbf531bbba2bd6c72e8c9a8fb77baab943118a45213c5dfe7029c59e1747e87430e1cda3a30125d51091b77dbbb7f1848abdf20daa4eb8bb079dc25c5c060f00b193aec05e114190cac829f3879") [ 660.522208] *** Guest State *** 11:35:23 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x3a000000, 0x0, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:35:23 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x0, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="2e0000002e008183ad5de0713c444d00070000001000034000ff39a0053582c137153e37835b3f00040000000000", 0x2e}], 0x1}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 11:35:23 executing program 1: r0 = socket$inet_sctp(0x2, 0x1000000000000005, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000300)={0x0, @in={{0x2, 0x0, @multicast1}}}, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000000)={0x0, @dev, @remote}, &(0x7f0000000040)=0xc) [ 660.544543] CR0: actual=0x0000000000050032, shadow=0x0000000000050012, gh_mask=fffffffffffffff7 11:35:23 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00`\x00', 0x2}) [ 660.604644] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 660.629169] CR3 = 0x0000000000000000 [ 660.641533] RSP = 0x0000000000000000 RIP = 0x0000000000008000 11:35:23 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x3c000000, 0x0, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:35:23 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x0, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="2e0000002e008183ad5de0713c444d00070000001000034000ff39a0053582c137153e37835b3f00040000000000", 0x2e}], 0x1}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) [ 660.660476] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 660.681126] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 660.735592] CS: sel=0x3000, attr=0x08093, limit=0xffffffff, base=0x0000000000030000 [ 660.759266] DS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 660.778155] SS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 660.801089] ES: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 660.816323] FS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 660.824324] GS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 660.846317] GDTR: limit=0x00000000, base=0x0000000000000000 [ 660.860799] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 660.876285] IDTR: limit=0x00000000, base=0x0000000000000000 [ 660.889977] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 660.916294] EFER = 0x0000000000006000 PAT = 0x0007040600070406 [ 660.922868] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 660.941875] Interruptibility = 00000008 ActivityState = 00000000 [ 660.955384] *** Host State *** [ 660.961152] RIP = 0xffffffff811b3710 RSP = 0xffff888085ce78b8 [ 660.973008] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 660.985293] FSBase=00007f45eb8ae700 GSBase=ffff8880ae900000 TRBase=fffffe0000033000 [ 661.001047] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 661.012851] CR0=0000000080050033 CR3=0000000095a7f000 CR4=00000000001426e0 [ 661.026261] net_ratelimit: 9 callbacks suppressed [ 661.026271] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87201360 [ 661.026277] protocol 88fb is buggy, dev hsr_slave_0 [ 661.026324] protocol 88fb is buggy, dev hsr_slave_1 [ 661.035719] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 661.071786] *** Control State *** [ 661.075363] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 661.102184] EntryControls=0000d1ff ExitControls=002fefff [ 661.115384] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 661.136043] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 661.155791] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 661.166294] reason=80000021 qualification=0000000000000000 [ 661.182658] IDTVectoring: info=00000000 errcode=00000000 [ 661.196320] protocol 88fb is buggy, dev hsr_slave_0 [ 661.200588] TSC Offset = 0xfffffe9c046109b3 [ 661.201466] protocol 88fb is buggy, dev hsr_slave_1 [ 661.218084] EPT pointer = 0x000000004363e01e [ 662.146401] protocol 88fb is buggy, dev hsr_slave_0 [ 662.151546] protocol 88fb is buggy, dev hsr_slave_1 [ 662.156233] protocol 88fb is buggy, dev hsr_slave_0 [ 662.156691] protocol 88fb is buggy, dev hsr_slave_0 [ 662.161637] protocol 88fb is buggy, dev hsr_slave_1 [ 662.166666] protocol 88fb is buggy, dev hsr_slave_1 11:35:26 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000000)=@req3={0x6000000, 0x3, 0x6000000, 0x3}, 0x1c) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x9) setsockopt$packet_int(r1, 0x107, 0x9, &(0x7f0000000080), 0x4) 11:35:26 executing program 1: r0 = socket$inet_sctp(0x2, 0x1000000000000005, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e24, 0xffffffff, @ipv4={[], [], @loopback}, 0xa295}}, 0x7f, 0x3, 0x6, 0xff, 0x3}, &(0x7f00000000c0)=0x98) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000300)={r1, @in6={{0xa, 0x4e21, 0x100000001, @empty, 0x80000000}}}, 0x0) 11:35:26 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x2}) 11:35:26 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x3f000000, 0x0, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:35:26 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x0, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="2e0000002e008183ad5de0713c444d00070000001000034000ff39a0053582c137153e37835b3f00040000000000", 0x2e}], 0x1}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 11:35:26 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) socket$isdn_base(0x22, 0x3, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SMI(r3, 0xaeb7) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a0000120800000088b070") 11:35:26 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x40000000, 0x0, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:35:26 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\xe8\x03\x00', 0x2}) 11:35:26 executing program 1: r0 = socket$inet_sctp(0x2, 0x1000000000000005, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000002c0)={0x0, 0x100000119}, &(0x7f0000000280)=0x10) connect$x25(r0, &(0x7f00000001c0)={0x9, @null=' \x00'}, 0x12) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000000c0)={r1, 0x0, 0x20}, 0xc) r2 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x10000400) ioctl$KVM_GET_PIT(r2, 0xc048ae65, &(0x7f0000000140)) fsetxattr$security_ima(r0, &(0x7f0000000200)='security.ima\x00', &(0x7f0000000240)=@sha1={0x1, "0e1858c555233985f9fbc52d1494fb3c58c6fbc6"}, 0x15, 0x3) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000300)={0x0, @in={{0x2, 0x0, @multicast1}}}, 0x0) 11:35:26 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="2e0000002e008183ad5de0713c444d00070000001000034000ff39a0053582c137153e37835b3f00040000000000", 0x2e}], 0x1}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) [ 663.247005] *** Guest State *** [ 663.261474] CR0: actual=0x0000000000050032, shadow=0x0000000000050012, gh_mask=fffffffffffffff7 [ 663.313183] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 663.340482] CR3 = 0x0000000000000000 [ 663.354003] RSP = 0x0000000000000000 RIP = 0x0000000000008000 11:35:26 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x43050000, 0x0, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:35:26 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00', 0x2}) [ 663.377481] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 663.396386] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 663.426412] CS: sel=0x3000, attr=0x08093, limit=0xffffffff, base=0x0000000000030000 [ 663.496247] DS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 663.528840] SS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 663.548899] ES: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 663.568517] FS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 663.580525] GS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 663.596309] GDTR: limit=0x00000000, base=0x0000000000000000 [ 663.608574] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 663.628264] IDTR: limit=0x00000000, base=0x0000000000000000 [ 663.648248] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 663.666289] EFER = 0x0000000000006000 PAT = 0x0007040600070406 [ 663.681819] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 663.707438] Interruptibility = 00000008 ActivityState = 00000000 [ 663.727283] *** Host State *** [ 663.737437] RIP = 0xffffffff811b3710 RSP = 0xffff88809950f8b8 [ 663.757273] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 663.778315] FSBase=00007f45eb8ae700 GSBase=ffff8880ae800000 TRBase=fffffe0000033000 [ 663.803065] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 663.820429] CR0=0000000080050033 CR3=0000000041a3b000 CR4=00000000001426f0 [ 663.840008] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201360 [ 663.859996] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 663.867968] *** Control State *** [ 663.871559] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 663.881962] EntryControls=0000d1ff ExitControls=002fefff [ 663.889475] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 663.900764] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 663.909516] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 663.920234] reason=80000021 qualification=0000000000000000 [ 663.928565] IDTVectoring: info=00000000 errcode=00000000 [ 663.934332] TSC Offset = 0xfffffe9a90a344ce [ 663.942430] EPT pointer = 0x000000008aaf501e [ 663.996337] *** Guest State *** [ 664.000874] CR0: actual=0x000000008005003f, shadow=0x000000008005001f, gh_mask=fffffffffffffff7 [ 664.040835] CR4: actual=0x0000000000002068, shadow=0x0000000000000028, gh_mask=ffffffffffffe871 [ 664.076263] CR3 = 0x0000000000000000 [ 664.080030] RSP = 0x0000000000000000 RIP = 0x0000000000008000 [ 664.086019] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 664.093215] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 664.100243] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 664.108612] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 664.117012] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 664.125053] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 664.133372] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 664.141865] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 664.150231] GDTR: limit=0x00000000, base=0x0000000000000000 [ 664.158565] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 664.166978] IDTR: limit=0x00000000, base=0x0000000000000000 [ 664.175010] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 664.184072] EFER = 0x0000000000006500 PAT = 0x0007040600070406 [ 664.190896] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 664.203291] Interruptibility = 00000008 ActivityState = 00000000 [ 664.214321] *** Host State *** [ 664.217839] RIP = 0xffffffff811b3710 RSP = 0xffff888045ea78b8 [ 664.228409] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 664.240489] FSBase=00007f45eb84b700 GSBase=ffff8880ae900000 TRBase=fffffe0000033000 [ 664.253076] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 664.263742] CR0=0000000080050033 CR3=0000000041a3b000 CR4=00000000001426e0 [ 664.275627] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87201360 [ 664.286023] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 664.296833] *** Control State *** [ 664.300377] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 664.314935] EntryControls=0000d3ff ExitControls=002fefff [ 664.324059] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 664.335915] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 664.346282] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 664.356470] reason=80000021 qualification=0000000000000000 [ 664.368676] IDTVectoring: info=00000000 errcode=00000000 [ 664.374221] TSC Offset = 0xfffffe9a90a344ce [ 664.384397] EPT pointer = 0x000000008aaf501e 11:35:28 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x800e0000, 0x0, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:35:28 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="2e0000002e008183ad5de0713c444d00070000001000034000ff39a0053582c137153e37835b3f00040000000000", 0x2e}], 0x1}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 11:35:28 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x00', 0x2}) 11:35:28 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x2, 0x300) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x140, 0x0) ioctl$BLKGETSIZE64(r2, 0x80081272, &(0x7f00000000c0)) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000000)=@req3={0x6000000, 0x3, 0x6000000, 0x3}, 0x1c) setsockopt$packet_int(r1, 0x107, 0xd, &(0x7f0000000040), 0x4) 11:35:28 executing program 1: r0 = socket$inet_sctp(0x2, 0x1000000000000005, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000300)={0x0, @in={{0x2, 0x0, @multicast1}}}, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x200, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f00000003c0)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1f0, r2, 0x328, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x58, 0x4, [@TIPC_NLA_LINK_PROP={0x54, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6f7}]}]}, @TIPC_NLA_MEDIA={0x20, 0x5, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffffffff72b7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}]}, @TIPC_NLA_BEARER={0x44, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x9, @empty, 0x7}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9d1}]}, @TIPC_NLA_SOCK={0x2c, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x100000001}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x40}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffffffff}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x200}]}, @TIPC_NLA_MEDIA={0xe8, 0x5, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5285}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x45d897a6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6d}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) 11:35:28 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SMI(r3, 0xaeb7) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x80000, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r4, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xdc, r5, 0x820, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x34, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xe8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x20}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_LINK={0x94, 0x4, [@TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x204000000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffffd}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4000000000000000}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a0000120800000088b070") 11:35:28 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="2e0000002e008183ad5de0713c444d00070000001000034000ff39a0053582c137153e37835b3f00040000000000", 0x2e}], 0x1}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 11:35:28 executing program 1: r0 = socket$inet_sctp(0x2, 0x7, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffff9c, 0x84, 0xf, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x21}}}, 0xb86, 0x20, 0x139a00000000, 0xfff, 0x3}, &(0x7f00000000c0)=0x98) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000100)={r1, @in={{0x2, 0x4e20, @empty}}}, &(0x7f00000001c0)=0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000300)={r2, @in6={{0xa, 0x4e22, 0xb1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xffffffffffff7fff}}}, 0x0) 11:35:29 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x03\xe8\x00', 0x2}) 11:35:29 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x80350000, 0x0, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) [ 665.897591] *** Guest State *** [ 665.914883] CR0: actual=0x0000000000050032, shadow=0x0000000000050012, gh_mask=fffffffffffffff7 11:35:29 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) [ 665.941434] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 665.962803] CR3 = 0x0000000000000000 [ 665.987507] RSP = 0x0000000000000000 RIP = 0x0000000000008000 11:35:29 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2}) 11:35:29 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x81000000, 0x0, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) [ 666.016871] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 666.045358] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 11:35:29 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) [ 666.085145] CS: sel=0x3000, attr=0x08093, limit=0xffffffff, base=0x0000000000030000 11:35:29 executing program 1: r0 = socket$inet_sctp(0x2, 0x1000000000000005, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000300)={0x0, @in={{0x2, 0x0, @multicast1}}}, 0x0) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000040)=0x8) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000080)) [ 666.135885] DS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 666.186569] SS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 666.194581] ES: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 666.292141] FS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 666.306293] net_ratelimit: 9 callbacks suppressed [ 666.306300] protocol 88fb is buggy, dev hsr_slave_0 [ 666.306331] protocol 88fb is buggy, dev hsr_slave_0 [ 666.311289] protocol 88fb is buggy, dev hsr_slave_1 [ 666.316353] protocol 88fb is buggy, dev hsr_slave_1 [ 666.321414] protocol 88fb is buggy, dev hsr_slave_0 [ 666.326467] protocol 88fb is buggy, dev hsr_slave_0 [ 666.331416] protocol 88fb is buggy, dev hsr_slave_1 [ 666.336441] protocol 88fb is buggy, dev hsr_slave_1 [ 666.355724] GS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 666.382628] GDTR: limit=0x00000000, base=0x0000000000000000 [ 666.406329] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 666.417853] IDTR: limit=0x00000000, base=0x0000000000000000 [ 666.433818] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 666.450906] EFER = 0x0000000000006000 PAT = 0x0007040600070406 [ 666.464163] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 666.480785] Interruptibility = 00000008 ActivityState = 00000000 [ 666.493906] *** Host State *** [ 666.500654] RIP = 0xffffffff811b3710 RSP = 0xffff888058dd78b8 [ 666.513497] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 666.532069] FSBase=00007f45eb8ae700 GSBase=ffff8880ae800000 TRBase=fffffe0000033000 [ 666.560624] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 666.582963] CR0=0000000080050033 CR3=000000009143b000 CR4=00000000001426f0 [ 666.606269] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87201360 [ 666.622310] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 666.637861] *** Control State *** [ 666.641366] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 666.661785] EntryControls=0000d1ff ExitControls=002fefff [ 666.676144] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 666.683214] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 666.699898] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 666.700979] *** Guest State *** [ 666.715658] reason=80000021 qualification=0000000000000000 [ 666.736273] IDTVectoring: info=00000000 errcode=00000000 [ 666.741908] TSC Offset = 0xfffffe99299ffcfc [ 666.756651] CR0: actual=0x000000008005003f, shadow=0x000000008005001f, gh_mask=fffffffffffffff7 [ 666.765618] CR4: actual=0x0000000000002068, shadow=0x0000000000000028, gh_mask=ffffffffffffe871 [ 666.797241] EPT pointer = 0x0000000097baa01e [ 666.826282] CR3 = 0x0000000000000000 [ 666.830007] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 666.835987] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 666.876243] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 666.882934] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 666.910650] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 666.931518] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 666.945110] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 666.961243] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 666.976229] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 666.984227] GDTR: limit=0x00000000, base=0x0000000000000000 [ 667.011411] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 667.029706] IDTR: limit=0x00000000, base=0x0000000000000000 [ 667.046233] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 667.066224] EFER = 0x0000000000006500 PAT = 0x0007040600070406 [ 667.083713] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 667.101532] Interruptibility = 00000000 ActivityState = 00000000 [ 667.115800] *** Host State *** [ 667.122640] RIP = 0xffffffff811b3710 RSP = 0xffff88802d9c78b8 [ 667.136235] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 667.151595] FSBase=00007f45eb84b700 GSBase=ffff8880ae800000 TRBase=fffffe0000033000 [ 667.169701] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 667.175605] CR0=0000000080050033 CR3=000000009143b000 CR4=00000000001426f0 [ 667.200719] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87201360 [ 667.212144] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 667.222994] *** Control State *** [ 667.229013] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 667.235702] EntryControls=0000d3ff ExitControls=002fefff [ 667.250470] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 667.263191] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 667.266263] protocol 88fb is buggy, dev hsr_slave_0 [ 667.274958] protocol 88fb is buggy, dev hsr_slave_1 [ 667.276041] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 667.294750] reason=80000021 qualification=0000000000000000 [ 667.308557] IDTVectoring: info=00000000 errcode=00000000 [ 667.314020] TSC Offset = 0xfffffe98bb4bbcab [ 667.326142] EPT pointer = 0x000000009246d01e 11:35:31 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$KDGKBSENT(r2, 0x4b48, &(0x7f0000000040)={0xba0, 0xdb3, 0x6}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000000)=@req3={0x6000000, 0x3, 0x6000000, 0x3}, 0x1c) 11:35:31 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2}) 11:35:31 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x84ffffff, 0x0, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:35:31 executing program 1: r0 = socket$inet_sctp(0x2, 0x1000000000000005, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e20, 0x3ff, @rand_addr="1c975c0ddd9c37f8c5317f6228cd778d", 0x3a191ec10}}}, 0x0) 11:35:31 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 11:35:31 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) io_setup(0x9, &(0x7f0000000180)=0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff}, 0x4000) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0x2400, 0x0) r6 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000380)='/dev/btrfs-control\x00', 0x40, 0x0) r7 = syz_open_dev$vcsa(&(0x7f00000016c0)='/dev/vcsa#\x00', 0x4, 0x101000) io_submit(r3, 0x4, &(0x7f0000001740)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x4, r1, &(0x7f0000000500)="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", 0x1000, 0x8001, 0x0, 0x1, r4}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x84, r2, &(0x7f0000000240)="ec0a8dbe2f8af6b5601ddecc2d6e269aa9bd3abe287e123791351006db8415ed947ee145efc47574aeada456a71bba78ef04e7bd5ae91df716af9eed9ecdfd247e48851e67c4cd98fecfbd99296d40fa26e800f9f2cd152c1def5499e6a43570cd3d21fea44820f306942e909624a9b5c74f30f39b490b352b0247430f8bccea3965e7c83274a0ea912c6c02139f7fbe1ed58550140eff7f6d57ce3c89c631b03af834b511a192cd677366c57a9257bfafc228eb6c01000522f1fb", 0xbb, 0x0, 0x0, 0x2, r5}, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x1, 0x1, r1, &(0x7f0000001500)="e475cb770d1a14f67b8cd0169cfce942977462fef329658eab99adef6a4427e8106781a00a86770a7a46582ce60700eefc750fd15f026471b60b580715b290fccfc67f353c3593351baae09813eeb08fae3e246a8d4063eedce3c3ae64b1ab62802f0e14bab2acb9d9efd0b00ed8588e24e2e26f3e12c60a404bafc08a99e21ab0186806038713104f8e05be6960434b41165e854e958ec70ad7b2acf21df5389801446d08446a8944708655592516b34ecaf4249c0697cee9852f13b68cc336805f5a47ac5271a1856d20", 0xcb, 0x8, 0x0, 0x0, r6}, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x3, 0x7, r0, &(0x7f0000001640)="26438907c7245842b319541ac4580b8e105621405408f0f98741572add04eb294fa530805a11f961919c8fd0b130948bf3570b9e4024687324cbf4ab2ccd419792fa055eab17e5ada17c9564487982dbdcdb06bad96c153d738afd3bcd3ac6ad73edc53014cf67b505be24c76882d0541dc16b92f2964243ee", 0x79, 0x3ff, 0x0, 0x1, r7}]) r8 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SMI(r9, 0xaeb7) r10 = dup2(r9, r2) ioctl$KDSKBLED(r10, 0x4b65, 0x7) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0xffffffffffffffff, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r9, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r10, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={0x0, 0x5af9}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r10, 0x84, 0x7b, &(0x7f0000000140)={r11, 0x7e}, 0x8) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0a0000120800000088b070") 11:35:31 executing program 1: r0 = socket$inet_sctp(0x2, 0x1000000000000005, 0x84) socket$packet(0x11, 0x2, 0x300) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e20, 0xfc6, @ipv4={[], [], @multicast1}, 0x100000000}}}, 0x0) 11:35:31 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03', 0x2}) 11:35:31 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x86ddffff, 0x0, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:35:31 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 11:35:31 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04', 0x2}) 11:35:31 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x88470000, 0x0, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:35:34 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x40200, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000100)={0x0, 0x1, 0x0, [], &(0x7f00000000c0)=0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x9) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000000)=@req3={0x6000000, 0x3, 0x6000000, 0x3}, 0x1c) setsockopt$packet_int(r1, 0x107, 0x9, &(0x7f0000000080), 0x4) 11:35:34 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 11:35:34 executing program 1: r0 = socket$inet_sctp(0x2, 0x1000000000000005, 0x84) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x8100, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000240)={r1, &(0x7f00000000c0)="3d688f4847d0be2402e7a34a8e7d20ba9769ff4153343c3d331fb1122fb0c3194b152ef6e04b1ebc5bdbbde01dab6fbaede4ca37019d1257e8ee90efdf81d56331902451ffdf32c2128c0e7c02f907663aa0fe9212e3b48ea6695db8fc08873cc99f7e94e8315b8b2ca192bf", &(0x7f0000000140)=""/218}, 0x18) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000300)={0x0, @in={{0x2, 0x0, @multicast1}}}, 0x0) r2 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x800, 0x4000) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x43, 0x3}, 0x10) 11:35:34 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f0000000140)='/dev/snd/pcmC#D#c\x00', 0x1, 0x100) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000000180)={0x100000, 0xa000}) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000080)=0xc) getpgid(r3) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x240000, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r4, 0xc040564a, &(0x7f0000000100)={0x1ee5, 0x0, 0x0, 0x7, 0x9c9a, 0x1f, 0x7fffffff, 0x1}) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0a0000120800000088b070") 11:35:34 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@', 0x2}) 11:35:34 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x88480000, 0x0, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:35:34 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x88640000, 0x0, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:35:34 executing program 1: r0 = socket$inet_sctp(0x2, 0x1000000000000005, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x2, 0x5, 0x1}, &(0x7f0000000040)=0x10) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000080)={0x0, 0x26, "2fbd09eb1188824900cf25f79d50140eb26b226a8f9a0e5fae5a2fb3b9a515784fbdfb252515"}, &(0x7f00000000c0)=0x2e) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000100)={r1, @in6={{0xa, 0x4e23, 0x0, @local, 0x2}}}, 0x0) 11:35:34 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`', 0x2}) 11:35:34 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 11:35:34 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x80) setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000000c0), 0x4) ioctl$KVM_SMI(r3, 0xaeb7) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x8, 0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a0000120800000088b070") 11:35:34 executing program 1: r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x3, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000100)=0x10000, 0x4) connect$bt_rfcomm(r0, &(0x7f0000000040)={0x1f, {0x0, 0x400, 0x9, 0x3, 0x1, 0x40}, 0x1}, 0xa) r1 = socket$inet_sctp(0x2, 0x80000020005, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x3f, 0x400, 0x3}, &(0x7f00000000c0)=0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000001c0)={r0, 0x50, &(0x7f0000000140)={0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000200)=r3, 0x4) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000300)={r2, @in={{0x2, 0x0, @multicast1}}}, 0x0) [ 671.290419] *** Guest State *** [ 671.306605] CR0: actual=0x0000000000050032, shadow=0x0000000000050012, gh_mask=fffffffffffffff7 [ 671.345827] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 671.375696] CR3 = 0x0000000000000000 [ 671.385310] RSP = 0x0000000000000000 RIP = 0x0000000000008000 [ 671.399270] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 671.413072] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 671.426289] net_ratelimit: 6 callbacks suppressed [ 671.426300] protocol 88fb is buggy, dev hsr_slave_0 [ 671.430068] CS: sel=0x3000, attr=0x08093, limit=0xffffffff, base=0x0000000000030000 [ 671.431231] protocol 88fb is buggy, dev hsr_slave_1 [ 671.444056] DS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 671.476279] SS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 671.484278] ES: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 671.517392] FS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 671.535796] GS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 671.557250] GDTR: limit=0x00000000, base=0x0000000000000000 [ 671.581741] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 671.596302] protocol 88fb is buggy, dev hsr_slave_0 [ 671.601402] protocol 88fb is buggy, dev hsr_slave_1 [ 671.610695] IDTR: limit=0x00000000, base=0x0000000000000000 [ 671.633807] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 671.646330] EFER = 0x0000000000006000 PAT = 0x0007040600070406 [ 671.652754] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 671.686225] Interruptibility = 00000008 ActivityState = 00000000 [ 671.692487] *** Host State *** [ 671.695681] RIP = 0xffffffff811b3710 RSP = 0xffff8880583378b8 [ 671.720190] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 671.732249] FSBase=00007f45eb8ae700 GSBase=ffff8880ae900000 TRBase=fffffe0000003000 [ 671.753810] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 671.771543] CR0=0000000080050033 CR3=0000000095a4f000 CR4=00000000001426e0 [ 671.792794] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201360 [ 671.812741] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 671.833430] *** Control State *** [ 671.840961] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 671.856307] EntryControls=0000d1ff ExitControls=002fefff [ 671.861780] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 671.896218] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 671.902926] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 671.916409] reason=80000021 qualification=0000000000000000 [ 671.928549] IDTVectoring: info=00000000 errcode=00000000 [ 671.934195] TSC Offset = 0xfffffe964019c39f [ 671.941978] EPT pointer = 0x000000008d9be01e [ 672.546257] protocol 88fb is buggy, dev hsr_slave_0 [ 672.546285] protocol 88fb is buggy, dev hsr_slave_1 [ 672.551348] protocol 88fb is buggy, dev hsr_slave_1 [ 672.556480] protocol 88fb is buggy, dev hsr_slave_0 [ 672.561532] protocol 88fb is buggy, dev hsr_slave_0 [ 672.566521] protocol 88fb is buggy, dev hsr_slave_1 11:35:36 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x2, 0x300) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20\x00', 0x800, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f0000000140)={0x0, 0xb, "5c706d161a606b9e3a9dd7"}, &(0x7f0000000180)=0x13) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f00000001c0)={r3, 0xff}, 0x8) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000000)=@req3={0x6000000, 0x3, 0x6000000, 0x3}, 0x1c) setsockopt$packet_int(r1, 0x107, 0x9, &(0x7f0000000080), 0x4) r4 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x3, 0x2) ioctl$PPPIOCSNPMODE(r4, 0x4008744b, &(0x7f00000000c0)={0x283}) 11:35:36 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x88a8ffff, 0x0, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:35:36 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xc3', 0x2}) 11:35:36 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 11:35:36 executing program 1: r0 = socket$inet_sctp(0x2, 0x1000000000000005, 0x84) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x200000, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f0000000200)=0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)) mkdirat$cgroup(r1, &(0x7f0000000400)='syz0\x00', 0x1ff) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000240)={r2, 0x8000}, &(0x7f0000000280)=0x8) r3 = accept(r0, &(0x7f0000000000)=@hci, &(0x7f0000000080)=0x80) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f00000000c0)={0x0, 0x3, 0x20, 0x99bc, 0xfffffffffffffffe}, &(0x7f0000000100)=0x18) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000140)={r4, 0x8b, 0x7, 0x80, 0x100, 0x5f5}, 0x14) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000300)={0x0, @in={{0x2, 0x0, @multicast1}}}, 0x0) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f00000002c0)=0x401) 11:35:36 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SMI(r3, 0xaeb7) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x8400, 0x0) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000100)={0x7, &(0x7f00000000c0)=[{0x7ff, 0xff, 0x1ff, 0x7ff}, {0x8, 0x80, 0x7858, 0x3}, {0x3, 0x5, 0x4, 0x5}, {0x0, 0x0, 0x1000, 0xfff}, {0x2, 0x4, 0x3, 0x5}, {0x2, 0x1, 0x7, 0x1}, {0xff, 0xfffffffffffff000, 0x3, 0x2}]}, 0x10) getsockopt$EBT_SO_GET_INIT_INFO(r4, 0x0, 0x82, &(0x7f00000001c0)={'nat\x00'}, &(0x7f0000000240)=0x78) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x9260473726d86f96, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a0000120800000088b070") setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r4, 0x28, 0x0, &(0x7f0000000180)=0x3, 0x8) 11:35:36 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x88caffff, 0x0, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:35:36 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 11:35:36 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\xe8', 0x2}) [ 673.668711] *** Guest State *** [ 673.672037] CR0: actual=0x0000000000050032, shadow=0x0000000000050012, gh_mask=fffffffffffffff7 11:35:36 executing program 1: r0 = dup(0xffffffffffffffff) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000000)=0x8001, 0x4) eventfd2(0x5, 0x80801) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000300)={0x0, @in={{0x2, 0x0, @multicast1}}}, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000140)={0x647, 0xeb6, 0xc0000, 0x2, 0x1b, 0x3, 0x7fff, 0x1, 0x7069eb5c, 0x4, 0x8b, 0x2}) ioctl$IMCLEAR_L2(r0, 0x80044946, &(0x7f0000000100)=0x4) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000080)=@assoc_value={r1, 0x10000}, 0x8) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @initdev, @empty}, &(0x7f00000000c0)=0xc) [ 673.718352] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 673.742440] CR3 = 0x0000000000000000 [ 673.746529] RSP = 0x0000000000000000 RIP = 0x0000000000008000 [ 673.752585] RFLAGS=0x00000002 DR7 = 0x0000000000000400 11:35:36 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x88ffffff, 0x0, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:35:36 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) [ 673.776329] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 673.816912] CS: sel=0x3000, attr=0x08093, limit=0xffffffff, base=0x0000000000030000 [ 673.859054] DS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 673.889985] SS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 673.909868] ES: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 673.930320] FS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 673.951793] GS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 673.991904] GDTR: limit=0x00000000, base=0x0000000000000000 [ 674.000094] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 674.026336] IDTR: limit=0x00000000, base=0x0000000000000000 [ 674.043510] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 674.064954] EFER = 0x0000000000006000 PAT = 0x0007040600070406 [ 674.080496] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 674.099215] Interruptibility = 00000008 ActivityState = 00000000 [ 674.113343] *** Host State *** [ 674.121131] RIP = 0xffffffff811b3710 RSP = 0xffff88809116f8b8 [ 674.135024] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 674.150486] FSBase=00007f45eb8ae700 GSBase=ffff8880ae900000 TRBase=fffffe0000003000 [ 674.167368] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 674.181148] CR0=0000000080050033 CR3=0000000050ac4000 CR4=00000000001426e0 [ 674.202279] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87201360 [ 674.222274] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 674.228538] *** Control State *** [ 674.232071] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 674.244014] EntryControls=0000d1ff ExitControls=002fefff [ 674.249601] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 674.261889] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 674.268711] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 674.296287] reason=80000021 qualification=0000000000000000 [ 674.306484] IDTVectoring: info=00000000 errcode=00000000 [ 674.325205] TSC Offset = 0xfffffe94fc922cd4 [ 674.335383] EPT pointer = 0x000000008ca9901e 11:35:38 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000000)=@req3={0x6000000, 0x3, 0x6000000, 0x3}, 0x1c) setsockopt$packet_int(r1, 0x107, 0x9, &(0x7f0000000080), 0x4) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='uid_map\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000000c0)=[@in={0x2, 0x4e21, @empty}, @in6={0xa, 0x4e22, 0x200, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}, @in6={0xa, 0x4e22, 0x1, @rand_addr="8c135f8dad91fa8c0d349a31afcfa3df", 0x3c3c}], 0x48) 11:35:38 executing program 1: r0 = socket$inet_sctp(0x2, 0x1000000000000005, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000300)={0x0, @in={{0x2, 0x0, @multicast1}}}, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x6, 0x200180) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0x6, 0x10001}) 11:35:38 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 11:35:38 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xf5', 0x2}) 11:35:38 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x89060000, 0x0, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:35:38 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SMI(r3, 0xaeb7) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r5 = dup(r4) ioctl$sock_bt_cmtp_CMTPCONNADD(r5, 0x400443c8, &(0x7f0000000000)={r4}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a0000120800000088b070") 11:35:38 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd', 0x2}) 11:35:38 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x89ffffff, 0x0, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:35:38 executing program 1: r0 = socket$inet_sctp(0x2, 0x1000000000000005, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x1, 0x218, [0x20000040, 0x0, 0x0, 0x20000070, 0x20000228], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xacfe319b2f0374ba}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x8035, 'veth1_to_bridge\x00', 'bridge_slave_1\x00', 'rose0\x00', 'veth1\x00', @random="56abfde84c82", [0x0, 0xff, 0x0, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, [0x0, 0xff, 0xff, 0xff, 0xff], 0xe0, 0x150, 0x188, [@rateest={'rateest\x00', 0x48, {{'bond_slave_0\x00', 'caif0\x00', 0x1b, 0x2, 0xa8e5, 0xffffffff, 0x7, 0x2, 0x4, 0x4}}}]}, [@snat={'snat\x00', 0x10, {{@dev={[], 0x11}}}}, @arpreply={'arpreply\x00', 0x10, {{@broadcast, 0xfffffffffffffffe}}}]}, @arpreply={'arpreply\x00', 0x10, {{@empty, 0xffffffffffffffff}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}]}, 0x290) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000300)={0x0, @in={{0x2, 0x0, @multicast1}}}, 0x0) 11:35:38 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) [ 675.204366] *** Guest State *** [ 675.220003] CR0: actual=0x0000000000050032, shadow=0x0000000000050012, gh_mask=fffffffffffffff7 [ 675.242786] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 675.261867] CR3 = 0x0000000000000000 [ 675.265723] RSP = 0x0000000000000000 RIP = 0x0000000000008000 11:35:38 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xfe', 0x2}) [ 675.306251] kernel msg: ebtables bug: please report to author: bad policy [ 675.308406] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 675.332823] kernel msg: ebtables bug: please report to author: bad policy [ 675.344937] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 11:35:38 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) [ 675.377187] CS: sel=0x3000, attr=0x08093, limit=0xffffffff, base=0x0000000000030000 [ 675.415748] DS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 675.450362] SS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 675.467287] ES: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 675.482998] FS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 675.495413] GS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 675.510500] GDTR: limit=0x00000000, base=0x0000000000000000 [ 675.520604] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 675.532156] IDTR: limit=0x00000000, base=0x0000000000000000 [ 675.542120] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 675.554142] EFER = 0x0000000000006000 PAT = 0x0007040600070406 [ 675.571831] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 675.586152] Interruptibility = 00000008 ActivityState = 00000000 [ 675.603938] *** Host State *** [ 675.612915] RIP = 0xffffffff811b3710 RSP = 0xffff8880878178b8 [ 675.631858] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 675.652483] FSBase=00007f45eb8ae700 GSBase=ffff8880ae900000 TRBase=fffffe0000033000 [ 675.671825] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 675.685649] CR0=0000000080050033 CR3=000000004f882000 CR4=00000000001426e0 [ 675.709287] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87201360 [ 675.729213] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 675.735388] *** Control State *** [ 675.755247] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 675.781951] EntryControls=0000d1ff ExitControls=002fefff [ 675.787583] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 675.812026] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 675.818853] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 675.826519] reason=80000021 qualification=0000000000000000 [ 675.841996] IDTVectoring: info=00000000 errcode=00000000 [ 675.859931] TSC Offset = 0xfffffe942955fd37 [ 675.875570] EPT pointer = 0x000000005820601e [ 676.706245] net_ratelimit: 7 callbacks suppressed [ 676.706253] protocol 88fb is buggy, dev hsr_slave_0 [ 676.706294] protocol 88fb is buggy, dev hsr_slave_1 [ 676.711191] protocol 88fb is buggy, dev hsr_slave_1 [ 676.716316] protocol 88fb is buggy, dev hsr_slave_0 [ 676.721332] protocol 88fb is buggy, dev hsr_slave_0 [ 676.726330] protocol 88fb is buggy, dev hsr_slave_1 [ 676.731328] protocol 88fb is buggy, dev hsr_slave_1 11:35:41 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000000)=@req3={0x6000000, 0x3, 0x6000000, 0x3}, 0x1c) setsockopt$packet_int(r1, 0x107, 0x9, &(0x7f0000000080), 0x4) 11:35:41 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0xa0008000, 0x0, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:35:41 executing program 1: r0 = socket$inet_sctp(0x2, 0x1000000000000005, 0x84) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dlm-control\x00', 0x2a082, 0x0) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000340)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e22, 0xfffffffffffff2fe, @rand_addr="d0c6561c520b6302a7613013efc7e438", 0x400}}, 0x3, 0x8, 0x9, 0x6, 0x3}, &(0x7f00000000c0)=0x98) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0x1, 0x4, [0x1000, 0x6, 0x40, 0x7ff]}, &(0x7f0000000200)=0x10) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000240)={r2, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x15}}}}, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) setsockopt$packet_int(r3, 0x107, 0xb, &(0x7f0000000140)=0x4, 0x4) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x10280, 0x0) 11:35:41 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\xfd\xfd\xff\xff', 0x2}) 11:35:41 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)}], 0x1}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 11:35:41 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SMI(r3, 0xaeb7) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) fsync(r0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a0000120800000088b070") 11:35:41 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0xac141400, 0x0, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:35:41 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)}], 0x1}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 11:35:41 executing program 1: r0 = socket$inet_sctp(0x2, 0x2, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000300)={0x0, @in={{0x2, 0x0, @multicast1}}}, 0x0) 11:35:41 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\xc3\xff\xff\xff', 0x2}) 11:35:41 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0xfdffffff, 0x0, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:35:41 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x84) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f00000001c0)={0x6a, 0x3abd7ef, 0x5, 0x9}, 0x10) prctl$PR_GET_DUMPABLE(0x3) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f00000000c0)=""/244) ioctl$KVM_SMI(r4, 0xaeb7) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a0000120800000088b070") [ 678.273233] *** Guest State *** [ 678.281854] CR0: actual=0x0000000000050032, shadow=0x0000000000050012, gh_mask=fffffffffffffff7 [ 678.319890] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 678.333515] CR3 = 0x0000000000000000 [ 678.340964] RSP = 0x0000000000000000 RIP = 0x0000000000008000 [ 678.350263] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 678.359288] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 678.366115] CS: sel=0x3000, attr=0x08093, limit=0xffffffff, base=0x0000000000030000 [ 678.379982] DS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 678.392188] SS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 678.405908] ES: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 678.415321] FS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 678.448984] GS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 678.466428] GDTR: limit=0x00000000, base=0x0000000000000000 [ 678.482419] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 678.501966] IDTR: limit=0x00000000, base=0x0000000000000000 [ 678.521262] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 678.536304] EFER = 0x0000000000006000 PAT = 0x0007040600070406 [ 678.549644] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 678.566270] Interruptibility = 00000008 ActivityState = 00000000 [ 678.581440] *** Host State *** [ 678.584744] RIP = 0xffffffff811b3710 RSP = 0xffff888057bbf8b8 [ 678.601907] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 678.616227] FSBase=00007f45eb8ae700 GSBase=ffff8880ae900000 TRBase=fffffe0000003000 [ 678.631880] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 678.644565] CR0=0000000080050033 CR3=0000000088ce2000 CR4=00000000001426e0 [ 678.659424] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201360 [ 678.672868] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 678.685720] *** Control State *** [ 678.689312] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 678.706271] EntryControls=0000d1ff ExitControls=002fefff [ 678.721527] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 678.733192] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 678.745658] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 678.752604] reason=80000021 qualification=0000000000000000 [ 678.764849] IDTVectoring: info=00000000 errcode=00000000 [ 678.770671] TSC Offset = 0xfffffe928755363b [ 678.775120] EPT pointer = 0x000000004aae001e [ 678.786296] protocol 88fb is buggy, dev hsr_slave_0 [ 678.786347] protocol 88fb is buggy, dev hsr_slave_1 [ 678.791419] protocol 88fb is buggy, dev hsr_slave_1 11:35:43 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup(r1) ioctl$PPPIOCDISCONN(r2, 0x7439) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000000)=@req3={0x6000000, 0x3, 0x6000000, 0x3}, 0x1c) setsockopt$packet_int(r1, 0x107, 0x9, &(0x7f0000000080), 0xfffffd22) mkdir(&(0x7f000082f000)='./control\x00', 0x0) r3 = open(&(0x7f000080dff6)='./control\x00', 0x0, 0x0) r4 = userfaultfd(0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000bc8000)={0xaa, 0x70}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000bf7000/0x1000)=nil, 0x1000}, 0x1}) r5 = open(&(0x7f000080dff6)='./control\x00', 0x0, 0x0) r6 = userfaultfd(0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000bc8000)={0xaa, 0x70}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000034d000/0x1000)=nil, 0x1000}, 0x1}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) dup2(r5, r6) dup2(r3, r4) r7 = shmget$private(0x0, 0x4000, 0x54000e08, &(0x7f0000ff9000/0x4000)=nil) shmctl$SHM_LOCK(r7, 0xb) 11:35:43 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)}], 0x1}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 11:35:43 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\xf5\xff\xff\xff', 0x2}) 11:35:43 executing program 1: r0 = socket$inet_sctp(0x2, 0x1000000000000005, 0x84) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'bcsf0\x00', 0x2001}) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000300)={0x0, @in={{0x2, 0x0, @multicast1}}}, 0x0) 11:35:43 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0xfeffffff, 0x0, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:35:43 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$EVIOCGABS0(r3, 0x80184540, &(0x7f00000000c0)=""/54) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) fsetxattr(r2, &(0x7f0000000100)=@known='com.apple.FinderInfo\x00', &(0x7f0000000140)='/dev/kvm\x00', 0x9, 0x1) ioctl$KVM_SMI(r4, 0xaeb7) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f00000001c0)={0x0, 0x7, 0x0, 0x10000, 'syz1\x00', 0xb1}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x3c, &(0x7f0000000200)=[@in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e24, 0x9, @remote, 0x1}]}, &(0x7f0000000280)=0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f00000002c0)={r5, 0x100000001, 0xa8e}, &(0x7f0000000300)=0x8) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) setrlimit(0x4, &(0x7f0000000180)={0xfff, 0x1}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a0000120800000088b070") 11:35:43 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0xffffa888, 0x0, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:35:43 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\xfe\xff\xff\xff', 0x2}) 11:35:43 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="2e0000002e008183ad5de0713c444d0007000000100003", 0x17}], 0x1}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) [ 680.612550] *** Guest State *** [ 680.633693] CR0: actual=0x0000000000050032, shadow=0x0000000000050012, gh_mask=fffffffffffffff7 [ 680.656363] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 11:35:43 executing program 1: r0 = socket$inet_sctp(0x2, 0x1000000000000005, 0x84) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x80000, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000140)='tls\x00', 0x4) ioctl$VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000100)={0xab, 0x43353039, 0x3, @discrete={0x1f, 0x80000001}}) ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, &(0x7f0000000040)={0x0, {0x2, 0x4e21, @multicast2}, {0x2, 0x4e22, @remote}, {0x2, 0x4e21, @broadcast}, 0x2, 0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000)='batadv0\x00', 0x80000000, 0x0, 0x2}) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000300)={0x0, @in={{0x2, 0x0, @multicast1}}}, 0x0) 11:35:43 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0xffffca88, 0x0, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) [ 680.713719] CR3 = 0x0000000000000000 11:35:43 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00', 0x2}) [ 680.749970] RSP = 0x0000000000000000 RIP = 0x0000000000008000 [ 680.765020] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 680.790133] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 680.812271] CS: sel=0x3000, attr=0x08093, limit=0xffffffff, base=0x0000000000030000 [ 680.843959] DS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 680.866787] SS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 680.890894] ES: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 680.923156] FS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 680.945789] GS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 680.966003] GDTR: limit=0x00000000, base=0x0000000000000000 [ 680.988650] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 681.012377] IDTR: limit=0x00000000, base=0x0000000000000000 [ 681.040003] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 681.063369] EFER = 0x0000000000006000 PAT = 0x0007040600070406 [ 681.071928] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 681.083397] Interruptibility = 00000008 ActivityState = 00000000 [ 681.091893] *** Host State *** [ 681.095213] RIP = 0xffffffff811b3710 RSP = 0xffff8880381bf8b8 [ 681.105227] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 681.113827] FSBase=00007f45eb8ae700 GSBase=ffff8880ae900000 TRBase=fffffe0000033000 [ 681.125561] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 681.133630] CR0=0000000080050033 CR3=00000000a4740000 CR4=00000000001426e0 [ 681.144688] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87201360 [ 681.154406] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 681.164490] *** Control State *** [ 681.170174] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 681.181318] EntryControls=0000d1ff ExitControls=002fefff [ 681.189194] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 681.200337] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 681.209366] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 681.216108] reason=80000021 qualification=0000000000000000 [ 681.226635] IDTVectoring: info=00000000 errcode=00000000 [ 681.232253] TSC Offset = 0xfffffe9144c53af2 [ 681.241671] EPT pointer = 0x00000000a612201e [ 681.269698] *** Guest State *** [ 681.273011] CR0: actual=0x0000000000050032, shadow=0x0000000000050012, gh_mask=fffffffffffffff7 [ 681.296416] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 681.318285] CR3 = 0x0000000000000000 [ 681.322090] RSP = 0x0000000000000000 RIP = 0x0000000000008000 [ 681.336903] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 681.342899] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 681.366283] CS: sel=0x3000, attr=0x08093, limit=0xffffffff, base=0x0000000000030000 [ 681.388030] DS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 681.406391] SS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 681.414383] ES: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 681.436323] FS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 681.455710] GS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 681.476321] GDTR: limit=0x00000000, base=0x0000000000000000 [ 681.484317] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 681.506391] IDTR: limit=0x00000000, base=0x0000000000000000 [ 681.514576] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 681.543587] EFER = 0x0000000000006000 PAT = 0x0007040600070406 [ 681.552701] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 681.564041] Interruptibility = 00000008 ActivityState = 00000000 [ 681.572997] *** Host State *** [ 681.579393] RIP = 0xffffffff811b3710 RSP = 0xffff8880381bf8b8 [ 681.585514] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 681.595173] FSBase=00007f45eb8ae700 GSBase=ffff8880ae800000 TRBase=fffffe0000033000 [ 681.606067] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 681.615178] CR0=0000000080050033 CR3=00000000a4740000 CR4=00000000001426f0 [ 681.625270] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87201360 [ 681.635216] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 681.644535] *** Control State *** [ 681.651007] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 681.660937] EntryControls=0000d1ff ExitControls=002fefff [ 681.669717] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 681.679726] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 681.690655] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 681.700366] reason=80000021 qualification=0000000000000000 [ 681.709749] IDTVectoring: info=00000000 errcode=00000000 [ 681.715346] TSC Offset = 0xfffffe90e6306297 [ 681.722755] EPT pointer = 0x00000000429c601e 11:35:45 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000000)=@req3={0x6000000, 0x3, 0x6000000, 0x3}, 0x1c) ioctl$sock_ifreq(r0, 0x89a3, &(0x7f0000000100)={'bcsh0\x00', @ifru_mtu=0x2}) setsockopt$packet_int(r1, 0x107, 0x9, &(0x7f0000000080), 0x4) timer_create(0x3, &(0x7f0000000040)={0x0, 0x3b, 0x2, @tid=0xffffffffffffffff}, &(0x7f00000000c0)=0x0) timer_delete(r2) 11:35:45 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="2e0000002e008183ad5de0713c444d0007000000100003", 0x17}], 0x1}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 11:35:45 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x3}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000080)={r1, @in6={{0xa, 0x4e24, 0x5, @mcast2, 0x5e758e07}}, 0x0, 0x1, 0x3, 0xa5, 0x3}, &(0x7f0000000140)=0x98) 11:35:45 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0xffffdd86, 0x0, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:35:45 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', 0x2}) 11:35:45 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SMI(r3, 0xaeb7) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a0000120800000088b070") r4 = socket$nl_route(0x10, 0x3, 0x0) write(r4, &(0x7f0000000000)="fc00000048000700ab092500090007000aab26b2e3bf089e5338e29321000100ff0100000005d0000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc000200ffffffff000000002fdf0d11512fd633d44000000000008934d07302ade01720d7d5bbc91a3e2e80772c05defd5a32e280fc83ab82f605f70c9ddef6fe082038f4f8b29d3ef3d92c8b170e5bba4a463ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d25b0350b0041f0d48f6f0000080548deac270e33429f39d789445eb81d1f96577de8f5ba50da", 0xfc) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x105000, 0x0) ioctl$VIDIOC_QBUF(r5, 0xc058560f, &(0x7f00000000c0)={0x7, 0x4, 0x4, 0x80000000, {0x77359400}, {0x4, 0x2, 0x49d, 0x4, 0x1ff, 0x1, "5a82426a"}, 0x800, 0x3, @offset=0xfbf, 0x4}) 11:35:45 executing program 1: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x10000, 0x0) r1 = socket$inet_sctp(0x2, 0x100000000008000c, 0x84) r2 = shmget$private(0x0, 0xc000, 0x1008, &(0x7f0000ff4000/0xc000)=nil) r3 = pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xc, r3) perf_event_open$cgroup(&(0x7f0000000100)={0x5, 0x70, 0x2, 0x1, 0x9e, 0x6, 0x0, 0x10001, 0x401, 0x8, 0x1f, 0x1000, 0x3, 0x9, 0x4, 0x1, 0x7ff, 0x8001, 0x0, 0x3, 0x8000, 0x2, 0x2000000, 0x4c1, 0xfbff, 0x6615, 0xe58d, 0x80000000, 0x7e04, 0x0, 0x0, 0x5, 0x7ff, 0x4, 0x1, 0x10001, 0x9, 0x814, 0x0, 0xc3, 0x0, @perf_config_ext={0x7, 0x3f}, 0x1000, 0x0, 0x6, 0x6, 0x2, 0xb935, 0x3}, r0, 0x5, r0, 0x5) shmctl$SHM_UNLOCK(r2, 0xc) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000040)={0x7fff, 0x0, 0xb, 0x2, 0x80, 0x6, 0x1f, 0x5, 0x0}, &(0x7f0000000080)=0x20) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f00000000c0)=r4, 0x4) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000300)={0x0, @in={{0x2, 0x0, @multicast1}}}, 0x0) 11:35:45 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00', 0x2}) 11:35:45 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0xfffff000, 0x0, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) [ 682.472134] *** Guest State *** [ 682.475497] CR0: actual=0x0000000000050032, shadow=0x0000000000050012, gh_mask=fffffffffffffff7 11:35:45 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="2e0000002e008183ad5de0713c444d0007000000100003", 0x17}], 0x1}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) [ 682.522219] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 682.558624] CR3 = 0x0000000000000000 11:35:45 executing program 1: arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000000)) r0 = socket$inet_sctp(0x2, 0x1000000000000005, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000300)={0x0, @in={{0x2, 0x0, @multicast1}}}, 0x0) [ 682.576288] RSP = 0x0000000000000000 RIP = 0x0000000000008000 [ 682.606274] RFLAGS=0x00000002 DR7 = 0x0000000000000400 11:35:45 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04', 0x2}) [ 682.632837] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 682.661816] CS: sel=0x3000, attr=0x08093, limit=0xffffffff, base=0x0000000000030000 [ 682.686263] DS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 682.706161] SS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 682.740531] ES: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 682.770341] FS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 682.778527] GS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 682.796301] GDTR: limit=0x00000000, base=0x0000000000000000 [ 682.810538] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 682.833393] IDTR: limit=0x00000000, base=0x0000000000000000 [ 682.856327] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 682.876248] EFER = 0x0000000000006000 PAT = 0x0007040600070406 [ 682.896256] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 682.903801] Interruptibility = 00000008 ActivityState = 00000000 [ 682.926264] *** Host State *** [ 682.929584] RIP = 0xffffffff811b3710 RSP = 0xffff8880577678b8 [ 682.935640] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 682.946265] net_ratelimit: 12 callbacks suppressed [ 682.946273] protocol 88fb is buggy, dev hsr_slave_0 [ 682.946289] protocol 88fb is buggy, dev hsr_slave_0 [ 682.951252] protocol 88fb is buggy, dev hsr_slave_1 [ 682.951347] protocol 88fb is buggy, dev hsr_slave_0 [ 682.956357] protocol 88fb is buggy, dev hsr_slave_1 [ 682.961392] protocol 88fb is buggy, dev hsr_slave_1 [ 682.966478] protocol 88fb is buggy, dev hsr_slave_0 [ 682.986294] FSBase=00007f45eb8ae700 GSBase=ffff8880ae800000 TRBase=fffffe0000003000 [ 682.986525] protocol 88fb is buggy, dev hsr_slave_1 [ 682.994324] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 683.006248] CR0=0000000080050033 CR3=000000004955f000 CR4=00000000001426f0 [ 683.026383] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201360 [ 683.046274] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 683.052443] *** Control State *** [ 683.055983] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 683.076246] EntryControls=0000d1ff ExitControls=002fefff [ 683.081803] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 683.106252] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 683.113041] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 683.132013] reason=80000021 qualification=0000000000000000 [ 683.146248] IDTVectoring: info=00000000 errcode=00000000 [ 683.162142] TSC Offset = 0xfffffe90468c49a5 [ 683.175748] EPT pointer = 0x000000008d92b01e [ 683.906275] protocol 88fb is buggy, dev hsr_slave_0 [ 683.911409] protocol 88fb is buggy, dev hsr_slave_1 11:35:47 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="2e0000002e008183ad5de0713c444d00070000001000034000ff39a0053582c137153e", 0x23}], 0x1}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 11:35:47 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0xffffff84, 0x0, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:35:47 executing program 1: r0 = socket$inet_sctp(0x2, 0x1000000000000005, 0x84) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000)={0x9a68, 0x9d8, 0x6, 0x7ff, 0xa146, 0x34, 0x7, 0x40, 0x7fffffff, 0x101, 0x488967fd}, 0xb) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000300)={0x0, @in={{0x2, 0x0, @multicast1}}}, 0x0) 11:35:47 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04', 0x2}) 11:35:47 executing program 0: r0 = dup(0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000040)) prctl$PR_CAP_AMBIENT(0x2f, 0x6, 0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$packet(0x11, 0x0, 0x300) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x0, 0x0) getresuid(&(0x7f00000004c0), &(0x7f0000000140), &(0x7f00000003c0)=0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f00000000c0)='9p\x00', 0x20000, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@posixacl='posixacl'}], [{@seclabel='seclabel'}, {@smackfsdef={'smackfsdef'}}, {@uid_eq={'uid', 0x3d, r5}}, {@obj_user={'obj_user'}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@hash='hash'}, {@fowner_lt={'fowner<', r5}}]}}) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000180)=0x8, &(0x7f0000000240)=0x1) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000000)=@req3={0x6000000, 0x3, 0x6000000, 0x3}, 0x1c) setsockopt$packet_int(r3, 0x107, 0x9, &(0x7f0000000080), 0x4) 11:35:47 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x20400, 0x100) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffff9c, 0xc0106426, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x0}, {}]}) ioctl$DRM_IOCTL_GET_CTX(r4, 0xc0086423, &(0x7f0000000140)={r5}) ioctl$KVM_SMI(r3, 0xaeb7) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a0000120800000088b070") 11:35:47 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0xffffff88, 0x0, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:35:47 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00', 0x2}) [ 684.724245] *** Guest State *** 11:35:47 executing program 1: r0 = socket$inet_sctp(0x2, 0x1000000000000005, 0x84) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000040)={'nat\x00', 0x0, 0x0, 0x0, [], 0x3, &(0x7f0000000000)=[{}, {}, {}], 0x0, [{}, {}, {}]}, 0xa8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000300)={0x0, @in={{0x2, 0x0, @multicast1}}}, 0x0) 11:35:47 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="2e0000002e008183ad5de0713c444d00070000001000034000ff39a0053582c137153e", 0x23}], 0x1}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) [ 684.753586] CR0: actual=0x0000000000050032, shadow=0x0000000000050012, gh_mask=fffffffffffffff7 [ 684.776801] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 11:35:47 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) fsetxattr$security_evm(r0, &(0x7f0000000040)='security.evm\x00', &(0x7f00000000c0)=@v2={0x3, 0x2, 0x2, 0x4, 0x80, "e2a39001e463d5c5584b8610c75c1bf0a1c41279deeab705dd6c34b4e757651f3c19e69779e64c65249f260377ecba6ede4435ee2184092ebf2e9eeec6fdb7f1da7fb4907eea0033b4eb3a588fd771bdd28ba3c9d406eadaa5a7552a4481b9ab25470037f8fa25085eade63b6e028bb505dfe795c2dea15a8f7d488d765edabe"}, 0x8a, 0x1) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000000)=@req3={0x6000000, 0x3, 0x6000000, 0x3}, 0x1c) setsockopt$packet_int(r1, 0x107, 0x9, &(0x7f0000000080), 0x4) [ 684.806435] CR3 = 0x0000000000000000 11:35:47 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0xffffff89, 0x0, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) [ 684.826844] kernel msg: ebtables bug: please report to author: Wrong nr of counters [ 684.828998] RSP = 0x0000000000000000 RIP = 0x0000000000008000 11:35:48 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00', 0x2}) 11:35:48 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="2e0000002e008183ad5de0713c444d00070000001000034000ff39a0053582c137153e", 0x23}], 0x1}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) [ 684.876536] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 684.884121] kernel msg: ebtables bug: please report to author: Wrong nr of counters [ 684.901915] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 684.912045] CS: sel=0x3000, attr=0x08093, limit=0xffffffff, base=0x0000000000030000 [ 684.934490] DS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 684.956389] SS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 11:35:48 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="2e0000002e008183ad5de0713c444d00070000001000034000ff39a0053582c137153e37835b3f0004", 0x29}], 0x1}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 11:35:48 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0xfffffffd, 0x0, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:35:48 executing program 1: r0 = socket$inet_sctp(0x2, 0x1000000000000002, 0x84) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000000)) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000300)={0x0, @in={{0x2, 0x0, @multicast1}}}, 0x0) [ 684.977428] ES: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 684.985574] FS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 685.063516] GS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 685.085850] GDTR: limit=0x00000000, base=0x0000000000000000 [ 685.097733] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 685.114738] IDTR: limit=0x00000000, base=0x0000000000000000 [ 685.144273] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 685.162488] EFER = 0x0000000000006000 PAT = 0x0007040600070406 [ 685.175873] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 685.192502] Interruptibility = 00000008 ActivityState = 00000000 [ 685.206337] *** Host State *** [ 685.209687] RIP = 0xffffffff811b3710 RSP = 0xffff8880479cf8b8 [ 685.226425] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 685.246309] FSBase=00007f45eb8ae700 GSBase=ffff8880ae800000 TRBase=fffffe0000003000 [ 685.254271] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 685.276284] CR0=0000000080050033 CR3=0000000058495000 CR4=00000000001426f0 [ 685.283450] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201360 [ 685.296551] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 685.316280] *** Control State *** [ 685.319874] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 685.336289] EntryControls=0000d1ff ExitControls=002fefff [ 685.341883] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 685.366282] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 685.373093] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 685.392355] reason=80000021 qualification=0000000000000000 [ 685.412069] IDTVectoring: info=00000000 errcode=00000000 [ 685.440050] TSC Offset = 0xfffffe8f10601d8b [ 685.444384] EPT pointer = 0x0000000027f1d01e 11:35:48 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SMI(r3, 0xaeb7) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a0000120800000088b070") 11:35:48 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00', 0x2}) 11:35:48 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="2e0000002e008183ad5de0713c444d00070000001000034000ff39a0053582c137153e37835b3f0004", 0x29}], 0x1}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 11:35:48 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0xfffffffe, 0x0, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:35:48 executing program 1: r0 = socket$inet_sctp(0x2, 0x1000000000000005, 0x84) accept$inet(0xffffffffffffffff, &(0x7f0000000740)={0x2, 0x0, @dev}, &(0x7f0000000780)=0x10) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f00000000c0)) chown(&(0x7f00000001c0)='./file0\x00', r3, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="020000000100000000000000040000000000000008000200", @ANYRES32=0x0, @ANYBLOB="080000002c25185a9b54661601000000d5064ba8df0f291155097a5e94c87f1ad1aebb845e04da209f954696c77124fa8b8a168f64ed67f2f92b07090ffef23bdcdeb9e0fb97366e2eb235f8f90a26bee25c2f5a946ee19804d47e49648290d9f3625cfaae9966b0e66400137a3a61240e10d4106067be54ace5e9272eccd55f8ad6542d7641373c7ee570ff295efd7e8cd25d8ff1f0bb8a88043b4047a6394be973f0f55db93fef", @ANYRES32=r4, @ANYBLOB="10000200000000002000000000000000"], 0x34, 0x1) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) lstat(&(0x7f0000000600)='./file0/file0\x00', &(0x7f0000000540)) ioprio_set$uid(0x3, r3, 0x8000) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000240)=""/246) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', &(0x7f0000000480)='bpf\x00', 0x2, &(0x7f0000000640)={[{@mode={'mode', 0x3d, 0x4}}, {@mode={'mode'}}, {@mode={'mode', 0x3d, 0x3ff}}, {@mode={'mode', 0x3d, 0x6}}, {@mode={'mode'}}], [{@audit='audit'}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}]}) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40047451, &(0x7f0000000000)=""/174) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000300)={0x0, @in={{0x2, 0x0, @multicast1}}}, 0x0) [ 685.751905] *** Guest State *** [ 685.755236] CR0: actual=0x0000000000050032, shadow=0x0000000000050012, gh_mask=fffffffffffffff7 [ 685.805058] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 685.840694] CR3 = 0x0000000000000000 [ 685.855878] RSP = 0x0000000000000000 RIP = 0x0000000000008000 [ 685.876007] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 685.896105] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 685.922515] CS: sel=0x3000, attr=0x08093, limit=0xffffffff, base=0x0000000000030000 [ 685.945113] DS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 685.979055] SS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 685.989909] ES: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 686.000996] FS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 686.012056] GS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 686.022870] GDTR: limit=0x00000000, base=0x0000000000000000 [ 686.034510] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 686.049991] IDTR: limit=0x00000000, base=0x0000000000000000 [ 686.061135] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 686.072081] EFER = 0x0000000000006000 PAT = 0x0007040600070406 [ 686.081439] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 686.092068] Interruptibility = 00000008 ActivityState = 00000000 [ 686.111835] *** Host State *** [ 686.115045] RIP = 0xffffffff811b3710 RSP = 0xffff8880489178b8 [ 686.131928] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 686.138399] FSBase=00007f45eb8ae700 GSBase=ffff8880ae900000 TRBase=fffffe0000033000 [ 686.174195] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 686.185479] CR0=0000000080050033 CR3=0000000058495000 CR4=00000000001426e0 [ 686.198328] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87201360 [ 686.205080] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 686.214165] *** Control State *** [ 686.220554] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 686.230213] EntryControls=0000d1ff ExitControls=002fefff [ 686.235756] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 686.246008] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 686.255830] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 686.265574] reason=80000021 qualification=0000000000000000 [ 686.275066] IDTVectoring: info=00000000 errcode=00000000 [ 686.283579] TSC Offset = 0xfffffe8e86f363e9 [ 686.291023] EPT pointer = 0x0000000031ac601e 11:35:49 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x84000, 0x0) ioctl$TCXONC(r0, 0x540a, 0x3f) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000000)=@req3={0x6000000, 0x3, 0x6000000, 0x3}, 0x1c) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f0000000140)={[0x2000, 0xf004, 0x0, 0x3000], 0x1000, 0x48, 0x40}) setsockopt$packet_int(r1, 0x107, 0x9, &(0x7f0000000080), 0x4) 11:35:49 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00', 0x2}) 11:35:49 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="2e0000002e008183ad5de0713c444d00070000001000034000ff39a0053582c137153e37835b3f0004", 0x29}], 0x1}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 11:35:49 executing program 1: r0 = socket$inet_sctp(0x2, 0x1000000000000005, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000300)={0x0, @in={{0x2, 0x0, @multicast1}}}, 0x0) getgroups(0x8, &(0x7f0000000080)=[0xee01, 0xffffffffffffffff, 0xee01, 0x0, 0xee00, 0xee00, 0x0, 0xee01]) getresgid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)=0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgroups(0x6, &(0x7f00000002c0)=[r1, r2, r3, r4, r5, r6]) r7 = dup3(r0, r0, 0x80000) ioctl$VT_RESIZE(r7, 0x5609, &(0x7f0000000040)={0x7, 0x3, 0xd55f}) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r7, 0x80045300, &(0x7f0000000000)) 11:35:49 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x8000a0ffffffff, 0x0, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:35:49 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SMI(r3, 0xaeb7) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f00000000c0)=[@in6={0xa, 0x4e21, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @in={0x2, 0x4e24, @empty}, @in6={0xa, 0x4e22, 0xffff, @mcast1, 0xfffffffffffff185}, @in={0x2, 0x4e22, @multicast1}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e20, @multicast2}, @in6={0xa, 0x4e23, 0x4, @mcast1, 0xfffffffffffffffd}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0xa4) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a0000120800000088b070") [ 686.795805] *** Guest State *** [ 686.803912] CR0: actual=0x0000000000050032, shadow=0x0000000000050012, gh_mask=fffffffffffffff7 [ 686.822589] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 11:35:49 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="2e0000002e008183ad5de0713c444d00070000001000034000ff39a0053582c137153e37835b3f0004000000", 0x2c}], 0x1}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 11:35:49 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0xf0ffffffffffff, 0x0, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:35:49 executing program 1: r0 = socket$inet_sctp(0x2, 0x1000000000000005, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e21, 0x0, @loopback, 0xf5}}}, 0x0) 11:35:49 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00', 0x2}) [ 686.842546] CR3 = 0x0000000000000000 [ 686.882386] RSP = 0x0000000000000000 RIP = 0x0000000000008000 [ 686.899894] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 686.917301] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 11:35:50 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="2e0000002e008183ad5de0713c444d00070000001000034000ff39a0053582c137153e37835b3f0004000000", 0x2c}], 0x1}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) [ 686.937582] CS: sel=0x3000, attr=0x08093, limit=0xffffffff, base=0x0000000000030000 [ 686.963327] DS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 11:35:50 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00', 0x2}) [ 686.991128] SS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 687.029481] ES: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 687.046791] FS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 687.063865] GS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 687.081062] GDTR: limit=0x00000000, base=0x0000000000000000 [ 687.098756] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 687.112362] IDTR: limit=0x00000000, base=0x0000000000000000 [ 687.120565] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 687.128787] EFER = 0x0000000000006000 PAT = 0x0007040600070406 [ 687.135364] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 687.143019] Interruptibility = 00000008 ActivityState = 00000000 [ 687.149721] *** Host State *** [ 687.153082] RIP = 0xffffffff811b3710 RSP = 0xffff888089e4f8b8 [ 687.159274] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 687.165835] FSBase=00007f45eb8ae700 GSBase=ffff8880ae900000 TRBase=fffffe0000033000 [ 687.173858] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 687.179976] CR0=0000000080050033 CR3=0000000095a51000 CR4=00000000001426e0 [ 687.197439] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87201360 [ 687.204316] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 687.216311] *** Control State *** [ 687.224320] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 687.235570] EntryControls=0000d1ff ExitControls=002fefff [ 687.246407] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 687.259037] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 687.271372] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 687.283675] reason=80000021 qualification=0000000000000000 [ 687.295708] IDTVectoring: info=00000000 errcode=00000000 [ 687.306862] TSC Offset = 0xfffffe8df22ad5c7 [ 687.316801] EPT pointer = 0x000000002f44a01e [ 688.066259] net_ratelimit: 17 callbacks suppressed [ 688.066268] protocol 88fb is buggy, dev hsr_slave_0 [ 688.076369] protocol 88fb is buggy, dev hsr_slave_1 [ 688.226293] protocol 88fb is buggy, dev hsr_slave_0 [ 688.231413] protocol 88fb is buggy, dev hsr_slave_1 11:35:52 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000000)=@req3={0x6000000, 0x3, 0x6000000, 0x3}, 0x1c) setsockopt$packet_int(r1, 0x107, 0x9, &(0x7f0000000080), 0x4) r2 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x1, 0x20000) ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f00000000c0)={0x1, 0xfff, [{0x3e8, 0x0, 0x1}]}) 11:35:52 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x100000000000000, 0x0, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:35:52 executing program 1: r0 = socket$inet_sctp(0x2, 0x1000000000000005, 0x84) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x505480, 0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000040)=0xfff) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000300)={0x0, @in={{0x2, 0x0, @multicast1}}}, 0x0) 11:35:52 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="2e0000002e008183ad5de0713c444d00070000001000034000ff39a0053582c137153e37835b3f0004000000", 0x2c}], 0x1}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 11:35:52 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00', 0x2}) 11:35:52 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$int_in(r0, 0x5473, &(0x7f00000000c0)=0x1e32) ioctl$KVM_SMI(r3, 0xaeb7) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) set_mempolicy(0x4003, &(0x7f0000000100)=0x400, 0x3) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) signalfd4(r1, &(0x7f0000000000)={0x4}, 0x8, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = accept$inet(r0, &(0x7f0000000140)={0x2, 0x0, @loopback}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r4, 0x84, 0x15, &(0x7f00000001c0)={0x1}, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a0000120800000088b070") 11:35:52 executing program 1: r0 = socket$inet_sctp(0x2, 0x1000000000000005, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000300)={0x0, @in={{0x2, 0x0, @multicast1}}}, 0x0) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={r1, 0x1000, 0xb, 0xb0, 0x2, 0x81}, 0x14) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS(r2, 0x80605414, &(0x7f00000000c0)=""/245) r3 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x4, 0x101102) ioctl$ASHMEM_GET_SIZE(r3, 0x7704, 0x0) 11:35:52 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="2e0000002e008183ad5de0713c444d00070000001000034000ff39a0053582c137153e37835b3f000400000000", 0x2d}], 0x1}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 11:35:52 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x200000000000000, 0x0, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:35:52 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00', 0x2}) [ 689.269840] *** Guest State *** [ 689.273248] CR0: actual=0x0000000000050032, shadow=0x0000000000050012, gh_mask=fffffffffffffff7 [ 689.292239] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 689.335064] CR3 = 0x0000000000000000 [ 689.354416] RSP = 0x0000000000000000 RIP = 0x0000000000008000 11:35:52 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="2e0000002e008183ad5de0713c444d00070000001000034000ff39a0053582c137153e37835b3f000400000000", 0x2d}], 0x1}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 11:35:52 executing program 1: r0 = socket$inet_sctp(0x2, 0x10400000000, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000300)={0x0, @in={{0x2, 0x0, @multicast1}}}, 0x0) [ 689.383256] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 689.396685] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 689.412406] CS: sel=0x3000, attr=0x08093, limit=0xffffffff, base=0x0000000000030000 [ 689.458981] DS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 689.504913] SS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 689.526451] ES: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 689.546306] FS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 689.561323] GS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 689.582536] GDTR: limit=0x00000000, base=0x0000000000000000 [ 689.626420] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 689.646661] IDTR: limit=0x00000000, base=0x0000000000000000 [ 689.654850] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 689.676301] EFER = 0x0000000000006000 PAT = 0x0007040600070406 [ 689.682902] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 689.706282] Interruptibility = 00000008 ActivityState = 00000000 [ 689.712656] *** Host State *** [ 689.726313] RIP = 0xffffffff811b3710 RSP = 0xffff8880400e78b8 [ 689.732429] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 689.746297] FSBase=00007f45eb8ae700 GSBase=ffff8880ae800000 TRBase=fffffe0000003000 [ 689.756305] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 689.778519] CR0=0000000080050033 CR3=000000002cc43000 CR4=00000000001426f0 [ 689.785570] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87201360 [ 689.826357] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 689.832446] *** Control State *** [ 689.835935] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 689.856241] EntryControls=0000d1ff ExitControls=002fefff [ 689.861731] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 689.886220] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 689.892929] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 689.912292] reason=80000021 qualification=0000000000000000 [ 689.922162] IDTVectoring: info=00000000 errcode=00000000 [ 689.938951] TSC Offset = 0xfffffe8ca2e989ea [ 689.943433] EPT pointer = 0x0000000056e6601e [ 690.146285] protocol 88fb is buggy, dev hsr_slave_0 [ 690.151392] protocol 88fb is buggy, dev hsr_slave_1 11:35:53 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x111040, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000000)=@req3={0x6000000, 0x3, 0x6000000, 0x3}, 0x1c) setsockopt$packet_int(r1, 0x107, 0x9, &(0x7f0000000080), 0x4) 11:35:53 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x300000000000000, 0x0, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:35:53 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00', 0x2}) 11:35:53 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="2e0000002e008183ad5de0713c444d00070000001000034000ff39a0053582c137153e37835b3f000400000000", 0x2d}], 0x1}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 11:35:53 executing program 1: getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x100000000}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000300)={r0, @in6={{0xa, 0x4e23, 0x80000000, @loopback, 0x1}}}, 0x0) 11:35:53 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xb, 0x5, 0x50010) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SMI(r3, 0xaeb7) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) r4 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x3, 0x2) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) r5 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x101000, 0x0) ioctl$sock_x25_SIOCDELRT(r5, 0x890c, &(0x7f00000000c0)={@remote={[], 0x2}, 0x6, 'team0\x00'}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$PIO_FONTRESET(r4, 0x4b6d, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a0000120800000088b070") [ 690.900124] mmap: syz-executor.2 (1333) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. 11:35:54 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x400000000000000, 0x0, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:35:54 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xffffffffffffffff, 0x0, 0x0) 11:35:54 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00', 0x2}) 11:35:54 executing program 1: r0 = socket$inet_sctp(0x2, 0x1000000000000005, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000300)={0x0, @in={{0x2, 0x0, @multicast1}}}, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x400000, 0x16) write$P9_RCREATE(r1, &(0x7f0000000040)={0x18, 0x73, 0x1, {{0x8, 0x1, 0x6}, 0x21c}}, 0x18) [ 690.957721] *** Guest State *** [ 690.976269] CR0: actual=0x0000000000050032, shadow=0x0000000000050012, gh_mask=fffffffffffffff7 [ 690.986027] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 691.040613] CR3 = 0x0000000000000000 [ 691.044379] RSP = 0x0000000000000000 RIP = 0x0000000000008000 [ 691.078455] RFLAGS=0x00000002 DR7 = 0x0000000000000400 11:35:54 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x600000000000000, 0x0, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:35:54 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00', 0x2}) [ 691.116338] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 691.147183] CS: sel=0x3000, attr=0x08093, limit=0xffffffff, base=0x0000000000030000 [ 691.194445] DS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 691.222292] SS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 691.251532] ES: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 691.266241] protocol 88fb is buggy, dev hsr_slave_0 [ 691.266247] protocol 88fb is buggy, dev hsr_slave_0 [ 691.266290] protocol 88fb is buggy, dev hsr_slave_1 [ 691.271337] protocol 88fb is buggy, dev hsr_slave_1 [ 691.294617] FS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 691.303108] GS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 691.318120] GDTR: limit=0x00000000, base=0x0000000000000000 [ 691.331181] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 691.340672] IDTR: limit=0x00000000, base=0x0000000000000000 [ 691.362371] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 691.370837] EFER = 0x0000000000006000 PAT = 0x0007040600070406 [ 691.383090] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 691.406713] Interruptibility = 00000008 ActivityState = 00000000 [ 691.422125] *** Host State *** [ 691.431855] RIP = 0xffffffff811b3710 RSP = 0xffff88805ad978b8 [ 691.446315] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 691.462201] FSBase=00007f45eb8ae700 GSBase=ffff8880ae800000 TRBase=fffffe0000033000 [ 691.474956] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 691.493544] CR0=0000000080050033 CR3=0000000029e57000 CR4=00000000001426f0 [ 691.513989] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87201360 [ 691.533392] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 691.552784] *** Control State *** [ 691.561259] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 691.585129] EntryControls=0000d1ff ExitControls=002fefff [ 691.596308] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 691.609975] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 691.627915] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 691.644562] reason=80000021 qualification=0000000000000000 [ 691.659879] IDTVectoring: info=00000000 errcode=00000000 [ 691.667507] TSC Offset = 0xfffffe8bb842adac [ 691.672048] EPT pointer = 0x00000000553cf01e [ 691.700211] *** Guest State *** [ 691.711328] CR0: actual=0x0000000000050032, shadow=0x0000000000050012, gh_mask=fffffffffffffff7 [ 691.739077] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 691.786370] CR3 = 0x0000000000000000 [ 691.790110] RSP = 0x0000000000000000 RIP = 0x0000000000008000 [ 691.796089] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 691.836265] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 691.842970] CS: sel=0x3000, attr=0x08093, limit=0xffffffff, base=0x0000000000030000 [ 691.867342] DS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 691.885572] SS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 691.907243] ES: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 691.926346] FS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 691.934345] GS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 691.942682] GDTR: limit=0x00000000, base=0x0000000000000000 [ 691.950935] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 691.959172] IDTR: limit=0x00000000, base=0x0000000000000000 [ 691.967409] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 691.975388] EFER = 0x0000000000006000 PAT = 0x0007040600070406 [ 691.982103] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 691.989896] Interruptibility = 00000008 ActivityState = 00000000 [ 691.996128] *** Host State *** [ 692.000807] RIP = 0xffffffff811b3710 RSP = 0xffff8880285b78b8 [ 692.008482] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 692.015033] FSBase=00007f45eb86c700 GSBase=ffff8880ae800000 TRBase=fffffe0000033000 [ 692.028986] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 692.035044] CR0=0000000080050033 CR3=0000000029e57000 CR4=00000000001426f0 [ 692.045146] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87201360 [ 692.068162] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 692.074231] *** Control State *** [ 692.094747] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 692.119906] EntryControls=0000d1ff ExitControls=002fefff [ 692.125397] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 692.164085] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 692.185553] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 692.204493] reason=80000021 qualification=0000000000000000 [ 692.216284] IDTVectoring: info=00000000 errcode=00000000 [ 692.221833] TSC Offset = 0xfffffe8b514b715b [ 692.236409] EPT pointer = 0x000000002ba2101e 11:35:55 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000000)=@req3={0x6000000, 0x3, 0x6000000, 0x3}, 0x1c) setsockopt$packet_int(r1, 0x107, 0xc, &(0x7f0000000080), 0x4) statfs(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=""/129) socket$nl_generic(0x10, 0x3, 0x10) 11:35:55 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000300)={0x0, @in={{0x2, 0x0, @multicast1}}}, 0x0) 11:35:55 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='coredump_filter\x00') r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10) socket$packet(0x11, 0x3, 0x300) getsockopt$packet_buf(r0, 0x107, 0x16, &(0x7f0000000240)=""/8, &(0x7f0000000280)=0x3f) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x7e0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$inet_tcp(0x2, 0x1, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r4, 0x1, 0x2b, &(0x7f0000f59ffc)=0x5, 0x4) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x3f, &(0x7f00000000c0)=0x6, 0x4) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev}}, 0x1c) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40042406, &(0x7f0000000200)='..cpuset\x00') ioctl$sock_inet_SIOCGIFPFLAGS(r4, 0x8935, &(0x7f0000000380)={'nlmon0\x00', 0x40}) getpid() socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000300)={'ip6gretap0\x00', 0x8}) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"]) setrlimit(0xd, &(0x7f0000000140)={0xc9d9, 0x6}) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) getsockopt$IP_VS_SO_GET_TIMEOUT(r4, 0x0, 0x486, &(0x7f00000001c0), &(0x7f0000000400)=0xc) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6001, 0x1) unlink(&(0x7f0000000440)='./file0\x00') ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r2, 0x3) prctl$PR_SET_THP_DISABLE(0x29, 0xfffffffffffffffe) sendto$inet(r1, 0x0, 0x0, 0x20000802, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='ip6tnl0\x00', 0x10) shutdown(r1, 0x1) 11:35:55 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x700000000000000, 0x0, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:35:55 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00', 0x2}) 11:35:55 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) r3 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x4440, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f00000000c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={'nr', 0x0}, 0x1, [@bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:35:55 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x800000000000000, 0x0, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:35:55 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x2}) 11:35:56 executing program 1: r0 = socket$inet_sctp(0x2, 0x1000000000000005, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @multicast1}}}, 0x0) [ 692.898854] *** Guest State *** [ 692.926685] CR0: actual=0x0000000000050032, shadow=0x0000000000050012, gh_mask=fffffffffffffff7 [ 692.964567] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 11:35:56 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x806000000000000, 0x0, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) [ 693.005892] CR3 = 0x0000000000000000 [ 693.015347] RSP = 0x0000000000000000 RIP = 0x0000000000008000 11:35:56 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x2}) 11:35:56 executing program 1: r0 = socket$inet_sctp(0x2, 0x1000000000000005, 0x84) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x6870, 0x102) getsockopt$llc_int(r1, 0x10c, 0xb, &(0x7f0000000040), &(0x7f0000000080)=0x4) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000300)={0x0, @in={{0x2, 0x0, @multicast1}}}, 0x0) [ 693.046594] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 693.063444] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 693.086698] CS: sel=0x3000, attr=0x08093, limit=0xffffffff, base=0x0000000000030000 [ 693.126632] DS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 693.160802] SS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 693.181295] ES: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 693.207322] FS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 693.246657] GS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 693.262061] GDTR: limit=0x00000000, base=0x0000000000000000 [ 693.283542] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 693.312674] IDTR: limit=0x00000000, base=0x0000000000000000 [ 693.329870] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 693.346244] net_ratelimit: 4 callbacks suppressed [ 693.346252] protocol 88fb is buggy, dev hsr_slave_0 [ 693.346887] protocol 88fb is buggy, dev hsr_slave_0 [ 693.351195] protocol 88fb is buggy, dev hsr_slave_1 [ 693.356784] protocol 88fb is buggy, dev hsr_slave_1 [ 693.361347] protocol 88fb is buggy, dev hsr_slave_0 [ 693.367105] protocol 88fb is buggy, dev hsr_slave_0 [ 693.371423] protocol 88fb is buggy, dev hsr_slave_1 [ 693.372087] EFER = 0x0000000000006000 PAT = 0x0007040600070406 [ 693.376957] protocol 88fb is buggy, dev hsr_slave_1 [ 693.381874] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 693.427093] Interruptibility = 00000008 ActivityState = 00000000 [ 693.446786] *** Host State *** [ 693.450079] RIP = 0xffffffff811b3710 RSP = 0xffff88804e2178b8 [ 693.466256] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 693.506283] FSBase=00007f45eb8ae700 GSBase=ffff8880ae800000 TRBase=fffffe0000003000 [ 693.536250] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 693.566813] CR0=0000000080050033 CR3=0000000053b74000 CR4=00000000001426f0 [ 693.599184] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87201360 [ 693.613610] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 693.643245] *** Control State *** [ 693.663147] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 693.691915] EntryControls=0000d1ff ExitControls=002fefff [ 693.725114] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 693.749965] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 693.789788] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 693.832045] reason=80000021 qualification=0000000000000000 [ 693.871936] IDTVectoring: info=00000000 errcode=00000000 [ 693.892023] TSC Offset = 0xfffffe8aad6dace2 [ 693.904971] EPT pointer = 0x000000005704701e [ 694.306287] protocol 88fb is buggy, dev hsr_slave_0 [ 694.311518] protocol 88fb is buggy, dev hsr_slave_1 11:35:58 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00', 0x2}) 11:35:58 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0xb00000000000000, 0x0, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:35:58 executing program 1: socket$inet_sctp(0x2, 0x5, 0x84) msgget(0x0, 0x1) r0 = socket$inet_sctp(0x2, 0x1000000000000005, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={0x0, 0xac}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000000c0)={r1, @in={{0x2, 0x4e24, @multicast1}}}, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000300)={0x0, @in={{0x2, 0x0, @multicast1}}}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0xff, @remote, 0x1ff}, @in={0x2, 0x4e22, @local}], 0x2c) r2 = syz_open_dev$radio(&(0x7f0000000180)='/dev/radio#\x00', 0x3, 0x2) timerfd_settime(r2, 0x1, &(0x7f00000001c0)={{0x77359400}}, &(0x7f0000000200)) 11:35:58 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x200401, 0x0) ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f00000000c0)=""/146) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000240)={'mangle\x00', 0xff, "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"}, &(0x7f0000000180)=0x123) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000000)=@req3={0x6000000, 0x3, 0x6000000, 0x3}, 0x1c) setsockopt$packet_int(r2, 0x107, 0x9, &(0x7f0000000080), 0x4) 11:35:58 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='coredump_filter\x00') r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10) socket$packet(0x11, 0x3, 0x300) getsockopt$packet_buf(r0, 0x107, 0x16, &(0x7f0000000240)=""/8, &(0x7f0000000280)=0x3f) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x7e0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$inet_tcp(0x2, 0x1, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r4, 0x1, 0x2b, &(0x7f0000f59ffc)=0x5, 0x4) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x3f, &(0x7f00000000c0)=0x6, 0x4) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev}}, 0x1c) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40042406, &(0x7f0000000200)='..cpuset\x00') ioctl$sock_inet_SIOCGIFPFLAGS(r4, 0x8935, &(0x7f0000000380)={'nlmon0\x00', 0x40}) getpid() socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000300)={'ip6gretap0\x00', 0x8}) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"]) setrlimit(0xd, &(0x7f0000000140)={0xc9d9, 0x6}) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) getsockopt$IP_VS_SO_GET_TIMEOUT(r4, 0x0, 0x486, &(0x7f00000001c0), &(0x7f0000000400)=0xc) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6001, 0x1) unlink(&(0x7f0000000440)='./file0\x00') ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r2, 0x3) prctl$PR_SET_THP_DISABLE(0x29, 0xfffffffffffffffe) sendto$inet(r1, 0x0, 0x0, 0x20000802, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='ip6tnl0\x00', 0x10) shutdown(r1, 0x1) 11:35:58 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SMI(r3, 0xaeb7) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a0000120800000088b070") r4 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x800) getsockopt$netrom_NETROM_T2(r4, 0x103, 0x2, &(0x7f0000000200)=0x5, &(0x7f0000000240)=0x4) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000000c0)={{0xf001, 0x1f002, 0x3, 0xfff, 0x1000, 0x0, 0x3, 0xfffffffffffffa09, 0x1, 0x100, 0xca, 0x4}, {0x106002, 0x10f001, 0x0, 0x2, 0x98, 0x8, 0x0, 0x9, 0x9c, 0xf8, 0x4}, {0x6000, 0x2000, 0xf, 0x100000000, 0x8, 0x3, 0x0, 0x1, 0xf912, 0x7f, 0x0, 0xffff}, {0x0, 0x4, 0xf, 0x6, 0x9, 0xffffffffffffffff, 0x3, 0x4b8, 0x2, 0x2, 0x5e, 0x7fffffff}, {0x2, 0x5000, 0x10, 0x400, 0x1f, 0x9411, 0x101, 0x0, 0x7ff, 0x2, 0x1000, 0x3ff}, {0x7004, 0x0, 0xe, 0x9, 0x6, 0x1, 0x9, 0x47, 0x0, 0x4, 0x9, 0x3}, {0x10d000, 0x2, 0xf, 0x9, 0x5, 0x0, 0x1f, 0x400, 0x7ff, 0x8, 0x37f, 0x81}, {0x4, 0xf002, 0x7d7f8a5f12579116, 0x100000001, 0x6, 0x10000, 0x1b, 0x6, 0x5, 0x0, 0x4, 0x400}, {0x4000, 0x5002}, {0x10f000, 0xf000}, 0x50000, 0x0, 0x1, 0x2, 0x1, 0x2100, 0x10000, [0x4d, 0x9, 0x81a0, 0x7]}) 11:35:58 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x00', 0x2}) 11:35:58 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0xd00000000000000, 0x0, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:35:58 executing program 1: r0 = socket$inet_sctp(0x2, 0x1000000000000005, 0x84) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x20000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f00000000c0)={0x7, 0x8, 0xfa00, {r2, 0x3}}, 0x10) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000300)={0x0, @in={{0x2, 0x0, @multicast1}}}, 0x0) fstat(r0, &(0x7f0000000100)) [ 695.784310] *** Guest State *** [ 695.799150] CR0: actual=0x0000000000050032, shadow=0x0000000000050012, gh_mask=fffffffffffffff7 [ 695.831122] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 695.852993] CR3 = 0x0000000000000000 [ 695.858986] RSP = 0x0000000000000000 RIP = 0x0000000000008000 [ 695.866744] RFLAGS=0x00000002 DR7 = 0x0000000000000400 11:35:59 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x2}) [ 695.886728] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 695.912146] CS: sel=0x3000, attr=0x08093, limit=0xffffffff, base=0x0000000000030000 11:35:59 executing program 1: r0 = socket$inet_sctp(0x2, 0x1000000000000005, 0x84) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000300)={0x0, @in={{0x2, 0x0, @multicast1}}}, 0x0) [ 695.953991] DS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 11:35:59 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x1100000000000000, 0x0, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) [ 696.001715] SS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 11:35:59 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe8\x03\x00', 0x2}) [ 696.052019] ES: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 696.089725] FS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 11:35:59 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x1400000000000000, 0x0, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) [ 696.123293] GS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 696.160647] GDTR: limit=0x00000000, base=0x0000000000000000 11:35:59 executing program 1: r0 = socket$inet_sctp(0x2, 0x1000000000000005, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000300)={0x0, @in={{0x2, 0x0, @multicast1}}}, 0x0) close(r0) [ 696.214759] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 696.251502] IDTR: limit=0x00000000, base=0x0000000000000000 [ 696.270788] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 696.293495] EFER = 0x0000000000006000 PAT = 0x0007040600070406 [ 696.313277] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 696.326902] Interruptibility = 00000008 ActivityState = 00000000 [ 696.333371] *** Host State *** [ 696.341502] RIP = 0xffffffff811b3710 RSP = 0xffff888047d2f8b8 [ 696.348704] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 696.355316] FSBase=00007f45eb8ae700 GSBase=ffff8880ae800000 TRBase=fffffe0000003000 [ 696.369047] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 696.382500] CR0=0000000080050033 CR3=000000002d074000 CR4=00000000001426f0 [ 696.392597] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201360 [ 696.402114] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 696.419274] *** Control State *** [ 696.427297] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 696.445120] EntryControls=0000d1ff ExitControls=002fefff [ 696.455184] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 696.474719] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 696.493902] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 696.514879] reason=80000021 qualification=0000000000000000 [ 696.527160] IDTVectoring: info=00000000 errcode=00000000 [ 696.532654] TSC Offset = 0xfffffe8923754eb5 [ 696.550548] EPT pointer = 0x00000000a533001e [ 696.591837] *** Guest State *** [ 696.595144] CR0: actual=0x000000008005003f, shadow=0x000000008005001f, gh_mask=fffffffffffffff7 [ 696.651887] CR4: actual=0x0000000000002068, shadow=0x0000000000000028, gh_mask=ffffffffffffe871 [ 696.691886] CR3 = 0x0000000000000000 [ 696.700544] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 696.720303] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 696.739952] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 696.758930] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 696.782015] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 696.812385] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 696.835139] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 696.857500] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 696.879742] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 696.901422] GDTR: limit=0x00000000, base=0x0000000000000000 [ 696.924178] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 696.938415] IDTR: limit=0x00000000, base=0x0000000000000000 [ 696.950703] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 696.960795] EFER = 0x0000000000006500 PAT = 0x0007040600070406 [ 696.971465] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 696.981550] Interruptibility = 00000000 ActivityState = 00000000 [ 696.992231] *** Host State *** [ 696.995609] RIP = 0xffffffff811b3710 RSP = 0xffff8880586178b8 [ 697.018234] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 697.037727] FSBase=00007f45eb88d700 GSBase=ffff8880ae800000 TRBase=fffffe0000003000 [ 697.059217] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 697.072110] CR0=0000000080050033 CR3=000000002d074000 CR4=00000000001426f0 [ 697.091873] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201360 [ 697.113674] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 697.126295] *** Control State *** [ 697.129804] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 697.156208] EntryControls=0000d3ff ExitControls=002fefff [ 697.161675] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 697.168911] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 697.175583] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 697.183399] reason=80000021 qualification=0000000000000000 [ 697.190110] IDTVectoring: info=00000000 errcode=00000000 [ 697.195567] TSC Offset = 0xfffffe88b67e9bbe [ 697.200225] EPT pointer = 0x00000000561a501e 11:36:00 executing program 0: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x6000000, 0x3, 0x6000000, 0x3}, 0x1c) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000080), 0x4) 11:36:00 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00', 0x2}) 11:36:00 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='coredump_filter\x00') r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10) socket$packet(0x11, 0x3, 0x300) getsockopt$packet_buf(r0, 0x107, 0x16, &(0x7f0000000240)=""/8, &(0x7f0000000280)=0x3f) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x7e0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$inet_tcp(0x2, 0x1, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r4, 0x1, 0x2b, &(0x7f0000f59ffc)=0x5, 0x4) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x3f, &(0x7f00000000c0)=0x6, 0x4) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev}}, 0x1c) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40042406, &(0x7f0000000200)='..cpuset\x00') ioctl$sock_inet_SIOCGIFPFLAGS(r4, 0x8935, &(0x7f0000000380)={'nlmon0\x00', 0x40}) getpid() socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000300)={'ip6gretap0\x00', 0x8}) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"]) setrlimit(0xd, &(0x7f0000000140)={0xc9d9, 0x6}) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) getsockopt$IP_VS_SO_GET_TIMEOUT(r4, 0x0, 0x486, &(0x7f00000001c0), &(0x7f0000000400)=0xc) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6001, 0x1) unlink(&(0x7f0000000440)='./file0\x00') ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r2, 0x3) prctl$PR_SET_THP_DISABLE(0x29, 0xfffffffffffffffe) sendto$inet(r1, 0x0, 0x0, 0x20000802, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='ip6tnl0\x00', 0x10) shutdown(r1, 0x1) 11:36:00 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x1c00000000000000, 0x0, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:36:00 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x200, 0x103000) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000000), &(0x7f00000000c0)=0x4) r1 = socket$inet_sctp(0x2, 0x1000000000000005, 0x84) r2 = syz_open_dev$vcsn(&(0x7f00000001c0)='/dev/vcs#\x00', 0x20, 0x200401) pipe2(&(0x7f0000000100), 0x80000) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e24, @remote}}, 0xff, 0x0, 0x6f0, 0x2}, &(0x7f0000000080)=0x98) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000003c0)={r3, @in={{0x2, 0x4e20, @empty}}}, 0x0) 11:36:00 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SMI(r3, 0xaeb7) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$LOOP_SET_DIRECT_IO(r3, 0x4c08, 0x4) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_G_TUNER(r4, 0xc054561d, &(0x7f0000000100)={0x9, "b822327668165f89f96466bca79adfd4a1ff343276cd695c39c87ff4dd9c7d04", 0x3, 0x4b0, 0x18, 0x8, 0x8, 0x4, 0x101, 0x3d7edd8b}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f00000000c0)=0x1b3, 0x4) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x10000, 0x10) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a0000120800000088b070") 11:36:01 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x2000000000000000, 0x0, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:36:01 executing program 1: r0 = socket$inet_sctp(0x2, 0x1000000000000005, 0x84) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x40485404, &(0x7f0000000040)={{0x3, 0x1, 0x800, 0x2}, 0x5, 0x2}) r3 = dup2(r0, r2) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000140)={0x0, @aes256}) ioctl$VIDIOC_G_SELECTION(r2, 0xc040565e, &(0x7f00000001c0)={0x7, 0x102, 0x1, {0x3, 0x2, 0x7, 0x5}}) syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x4, 0x2000) fsync(r3) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000240)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80800800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r4, 0x32, 0x70bd2d, 0x25dfdbfd, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000854}, 0x0) ioctl$VIDIOC_S_MODULATOR(r2, 0x40445637, &(0x7f00000000c0)={0x20, "d785de5638268004570cdf5cc63068ebdaf5e631dc29471cca03b0d586334f55", 0x14, 0x8001, 0x8, 0x6, 0x5}) socket$can_raw(0x1d, 0x3, 0x1) 11:36:01 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x00', 0x2}) [ 697.948625] *** Guest State *** [ 697.953651] CR0: actual=0x0000000000050032, shadow=0x0000000000050012, gh_mask=fffffffffffffff7 [ 698.016858] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 11:36:01 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\xe8\x00', 0x2}) 11:36:01 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x8040, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f00000003c0)={'broute\x00', 0x0, 0x4, 0x2, [], 0x6, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000280)=""/2}, &(0x7f00000002c0)=0x78) r1 = socket$inet_sctp(0x2, 0x1000000000000005, 0x84) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)="2b459fff48c45b98af6a31d796f29529b9a701168f7c752b089feb73952da31c4b46c81668ddff64f0caa6b91e4b51bbac8f25897a6df7902559e8015ae7be12dc5b6f8e74f9ba9d42ad12403bd9449d68e4056c10eb0d538c3924267b9fdc60fced15dd47a63e60ef01ffc7dde5b42c1e6592216c2109675940b94832b37ac7d6081870f12c92334dbe9d6e76c38b1126e679ca14eb8d1c761611444bb6b3dae10e0d8c729ae26a", 0xa8, r1}, 0x68) r2 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000300)={0x0, @in={{0x2, 0x0, @multicast1}}}, 0x0) write$P9_RLINK(r2, &(0x7f0000000180)={0x7, 0x47, 0x2}, 0x7) 11:36:01 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x2100000000000000, 0x0, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) [ 698.098051] CR3 = 0x0000000000000000 [ 698.127597] RSP = 0x0000000000000000 RIP = 0x0000000000008000 [ 698.169109] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 698.208913] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 698.234819] CS: sel=0x3000, attr=0x08093, limit=0xffffffff, base=0x0000000000030000 [ 698.248843] DS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 698.257325] SS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 698.265542] ES: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 698.284243] FS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 698.293698] GS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 698.306664] GDTR: limit=0x00000000, base=0x0000000000000000 [ 698.314795] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 698.323991] IDTR: limit=0x00000000, base=0x0000000000000000 [ 698.333821] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 698.350641] EFER = 0x0000000000006000 PAT = 0x0007040600070406 [ 698.365181] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 698.384267] Interruptibility = 00000008 ActivityState = 00000000 [ 698.400949] *** Host State *** [ 698.408862] RIP = 0xffffffff811b3710 RSP = 0xffff888027f278b8 [ 698.424039] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 698.439645] FSBase=00007f45eb8ae700 GSBase=ffff8880ae800000 TRBase=fffffe0000033000 [ 698.458913] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 698.467461] net_ratelimit: 21 callbacks suppressed [ 698.467520] protocol 88fb is buggy, dev hsr_slave_0 [ 698.474034] CR0=0000000080050033 CR3=0000000035c19000 CR4=00000000001426f0 [ 698.478058] protocol 88fb is buggy, dev hsr_slave_1 [ 698.491364] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87201360 [ 698.507206] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 698.522338] *** Control State *** [ 698.531571] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 698.557419] EntryControls=0000d1ff ExitControls=002fefff [ 698.575299] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 698.597497] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 698.615307] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 698.626291] protocol 88fb is buggy, dev hsr_slave_0 [ 698.631397] protocol 88fb is buggy, dev hsr_slave_1 [ 698.642190] reason=80000021 qualification=0000000000000000 [ 698.660589] IDTVectoring: info=00000000 errcode=00000000 [ 698.675450] TSC Offset = 0xfffffe87feb577d0 [ 698.689557] EPT pointer = 0x000000005c41101e [ 699.586267] protocol 88fb is buggy, dev hsr_slave_0 [ 699.586299] protocol 88fb is buggy, dev hsr_slave_1 [ 699.591463] protocol 88fb is buggy, dev hsr_slave_1 [ 699.596433] protocol 88fb is buggy, dev hsr_slave_0 [ 699.601553] protocol 88fb is buggy, dev hsr_slave_0 [ 699.606447] protocol 88fb is buggy, dev hsr_slave_1 11:36:02 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000000)=@req3={0x6000000, 0x3, 0x6000000, 0x3}, 0x1c) r2 = fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, r2, 0x1ff, 0x10) setsockopt$packet_int(r1, 0x107, 0x9, &(0x7f0000000080), 0x4) 11:36:02 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00', 0x2}) 11:36:02 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x2800000000000000, 0x0, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:36:02 executing program 1: r0 = socket$inet_sctp(0x2, 0x1000000000000005, 0x84) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000000)={0x0, 0xb55, 0x1, [0x3]}, &(0x7f0000000040)=0xa) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={r1, 0x1, 0x20}, 0xc) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000300)={0x0, @in={{0x2, 0x0, @multicast1}}}, 0x0) 11:36:02 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='coredump_filter\x00') r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10) socket$packet(0x11, 0x3, 0x300) getsockopt$packet_buf(r0, 0x107, 0x16, &(0x7f0000000240)=""/8, &(0x7f0000000280)=0x3f) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x7e0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$inet_tcp(0x2, 0x1, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r4, 0x1, 0x2b, &(0x7f0000f59ffc)=0x5, 0x4) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x3f, &(0x7f00000000c0)=0x6, 0x4) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev}}, 0x1c) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40042406, &(0x7f0000000200)='..cpuset\x00') ioctl$sock_inet_SIOCGIFPFLAGS(r4, 0x8935, &(0x7f0000000380)={'nlmon0\x00', 0x40}) getpid() socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000300)={'ip6gretap0\x00', 0x8}) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"]) setrlimit(0xd, &(0x7f0000000140)={0xc9d9, 0x6}) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) getsockopt$IP_VS_SO_GET_TIMEOUT(r4, 0x0, 0x486, &(0x7f00000001c0), &(0x7f0000000400)=0xc) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6001, 0x1) unlink(&(0x7f0000000440)='./file0\x00') ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r2, 0x3) prctl$PR_SET_THP_DISABLE(0x29, 0xfffffffffffffffe) sendto$inet(r1, 0x0, 0x0, 0x20000802, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='ip6tnl0\x00', 0x10) shutdown(r1, 0x1) 11:36:02 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x61, 0x0) getsockopt$inet6_dccp_int(r2, 0x21, 0x17, &(0x7f0000000140), &(0x7f0000000180)=0x4) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(r5, 0x40086432, &(0x7f00000000c0)=0xfdc9) ioctl$KVM_SMI(r4, 0xaeb7) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f00000001c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, {}, {0x0, 0x0, 0x4}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a0000120800000088b070") 11:36:02 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x2900000000000000, 0x0, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) [ 699.808998] *** Guest State *** [ 699.812337] CR0: actual=0x0000000000050032, shadow=0x0000000000050012, gh_mask=fffffffffffffff7 [ 699.836229] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 11:36:02 executing program 1: r0 = socket$inet_sctp(0x2, 0xfffffffffffffffd, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000300)={0x0, @in={{0x2, 0x0, @multicast1}}}, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x2, 0x40) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x18) 11:36:03 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00', 0x2}) [ 699.856862] CR3 = 0x0000000000000000 [ 699.886871] RSP = 0x0000000000000000 RIP = 0x0000000000008000 [ 699.925735] RFLAGS=0x00000002 DR7 = 0x0000000000000400 11:36:03 executing program 1: r0 = socket$inet_sctp(0x2, 0x1000000000000005, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000300)={0x0, @in={{0x2, 0x0, @multicast1}}}, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x100, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f0000000080)={'raw\x00', 0x2, [{}, {}]}, 0x48) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r1, 0xc040564b, &(0x7f0000000040)={0x7, 0x0, 0x301f, 0x40, 0x1, {0xacd1, 0x400}}) 11:36:03 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x2b00000000000000, 0x0, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) [ 699.956360] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 699.984341] CS: sel=0x3000, attr=0x08093, limit=0xffffffff, base=0x0000000000030000 11:36:03 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00', 0x2}) [ 700.040714] DS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 700.066497] SS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 700.108578] ES: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 700.156378] FS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 700.182071] GS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 700.204276] GDTR: limit=0x00000000, base=0x0000000000000000 [ 700.224869] LDTR: sel=0x0004, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 700.244270] IDTR: limit=0x00000000, base=0x0000000000000000 [ 700.263665] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 700.284146] EFER = 0x0000000000006000 PAT = 0x0007040600070406 [ 700.300465] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 700.319242] Interruptibility = 00000008 ActivityState = 00000000 [ 700.334607] *** Host State *** [ 700.343624] RIP = 0xffffffff811b3710 RSP = 0xffff88804796f8b8 [ 700.364290] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 700.382042] FSBase=00007f45eb8ae700 GSBase=ffff8880ae800000 TRBase=fffffe0000033000 [ 700.405724] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 700.420801] CR0=0000000080050033 CR3=0000000051114000 CR4=00000000001426f0 [ 700.430826] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201360 [ 700.443352] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 700.449579] *** Control State *** [ 700.453122] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 700.465678] EntryControls=0000d1ff ExitControls=002fefff [ 700.472305] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 700.485182] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 700.491995] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 700.504233] reason=80000021 qualification=0000000000000000 [ 700.510714] IDTVectoring: info=00000000 errcode=00000000 [ 700.522015] TSC Offset = 0xfffffe86fd61f9fe [ 700.526490] EPT pointer = 0x00000000a48ed01e 11:36:05 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000000)=@req3={0x6000000, 0x3, 0x6000000, 0x3}, 0x1c) setsockopt$packet_int(r1, 0x107, 0x9, &(0x7f0000000080), 0x4) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x40000, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000000c0)={0x0, 0x2}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000140)={r3, 0x3}, 0x8) 11:36:05 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x2c00000000000000, 0x0, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:36:05 executing program 1: r0 = socket$inet_sctp(0x2, 0x1000000000000005, 0x84) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/full\x00', 0x502fff, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000040)={0x0, 0x1, "89"}, &(0x7f0000000080)=0x9) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000000)={0x7, 0xffffffffffffffff, 0xff, 0xfffffffffffffffb, 0x8, 0x92, 0x566, 0x8001, 0x4, 0x400}) write$smack_current(r1, &(0x7f0000000140)='/dev/full\x00', 0xa) r3 = add_key(&(0x7f0000000180)='big_key\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000200)="a6b3e94eea893f80cb210ff2361ee6dc7c362716", 0x14, 0xfffffffffffffffa) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000240)={r3, 0x80000000, 0x8}, 0x0, &(0x7f00000003c0)="5f1caa90d5a03096b83035fca6992de364763db4083066e035e05394c1c4939daed8c8a7170d04632928c93634bd54145f2ac75362aad508762579c678e7d5b2628ea5fd0c3341cc97446441c0287f084dd5ab6a482d4921a3a4fcec08ef1ac678f677e936d3e088baddf49281f00a6b9bbbc00d9c6b486a4f94f08ae9428ec7778a95bed763c51a36331b1a55cea13af3977fded1e0c4bf9d88419f5e3ad15b8e9c606f58ff0698113a12551d417b81fa2dc2d4dd6396c670c21dbeea236eef35e8180f818304a704fb73edc497c6c9b7e74b351a4be726bf", &(0x7f0000000280)="09929f5cf82fcb6c4ca438d309ec237dcd4b6c9c98d132c9aad2a9abd1441b5212289025") setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={r2, 0x8}, 0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000300)={0x0, @in={{0x2, 0x0, @multicast1}}}, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/rtc0\x00', 0x0, 0x0) 11:36:05 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00', 0x2}) 11:36:05 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='coredump_filter\x00') r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10) socket$packet(0x11, 0x3, 0x300) getsockopt$packet_buf(r0, 0x107, 0x16, &(0x7f0000000240)=""/8, &(0x7f0000000280)=0x3f) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x7e0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$inet_tcp(0x2, 0x1, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r4, 0x1, 0x2b, &(0x7f0000f59ffc)=0x5, 0x4) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x3f, &(0x7f00000000c0)=0x6, 0x4) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev}}, 0x1c) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40042406, &(0x7f0000000200)='..cpuset\x00') ioctl$sock_inet_SIOCGIFPFLAGS(r4, 0x8935, &(0x7f0000000380)={'nlmon0\x00', 0x40}) getpid() socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000300)={'ip6gretap0\x00', 0x8}) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"]) setrlimit(0xd, &(0x7f0000000140)={0xc9d9, 0x6}) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) getsockopt$IP_VS_SO_GET_TIMEOUT(r4, 0x0, 0x486, &(0x7f00000001c0), &(0x7f0000000400)=0xc) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6001, 0x1) unlink(&(0x7f0000000440)='./file0\x00') ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r2, 0x3) prctl$PR_SET_THP_DISABLE(0x29, 0xfffffffffffffffe) sendto$inet(r1, 0x0, 0x0, 0x20000802, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='ip6tnl0\x00', 0x10) shutdown(r1, 0x1) 11:36:05 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SMI(r3, 0xaeb7) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000003c0)={{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x77ba}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0xd002, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a0000120800000088b070") openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) 11:36:05 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x2f00000000000000, 0x0, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:36:05 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00', 0x2}) [ 702.210635] *** Guest State *** [ 702.213968] CR0: actual=0x0000000000050032, shadow=0x0000000000050012, gh_mask=fffffffffffffff7 11:36:05 executing program 1: [ 702.276909] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 702.324210] CR3 = 0x0000000000000000 11:36:05 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x3201000000000000, 0x0, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:36:05 executing program 1: [ 702.376611] RSP = 0x0000000000000000 RIP = 0x0000000000008000 [ 702.382631] RFLAGS=0x00000002 DR7 = 0x0000000000000400 11:36:05 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00', 0x2}) [ 702.470424] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 702.520456] CS: sel=0x3000, attr=0x08093, limit=0xffffffff, base=0x0000000000030000 [ 702.566772] DS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 702.607215] SS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 702.615326] ES: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 702.653492] FS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 702.678106] GS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 702.686098] GDTR: limit=0x00000000, base=0x0000000000000000 [ 702.699798] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 702.709857] IDTR: limit=0x00000000, base=0x0000000000000000 [ 702.721896] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 702.731898] EFER = 0x0000000000006000 PAT = 0x0007040600070406 [ 702.742190] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 702.751839] Interruptibility = 00000008 ActivityState = 00000000 [ 702.762055] *** Host State *** [ 702.765346] RIP = 0xffffffff811b3710 RSP = 0xffff8880a7af78b8 [ 702.773314] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 702.783637] FSBase=00007f45eb8ae700 GSBase=ffff8880ae800000 TRBase=fffffe0000003000 [ 702.798583] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 702.807987] CR0=0000000080050033 CR3=0000000030de4000 CR4=00000000001426f0 [ 702.815117] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201360 [ 702.834214] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 702.849982] *** Control State *** [ 702.853452] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 702.878179] EntryControls=0000d1ff ExitControls=002fefff [ 702.883660] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 702.896363] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 702.903210] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 702.918835] reason=80000021 qualification=0000000000000000 [ 702.936025] IDTVectoring: info=00000000 errcode=00000000 [ 702.953060] TSC Offset = 0xfffffe85b33754e9 [ 702.963447] EPT pointer = 0x0000000042b8f01e [ 703.746248] net_ratelimit: 17 callbacks suppressed [ 703.746257] protocol 88fb is buggy, dev hsr_slave_0 [ 703.746400] protocol 88fb is buggy, dev hsr_slave_1 [ 703.751260] protocol 88fb is buggy, dev hsr_slave_1 [ 703.756538] protocol 88fb is buggy, dev hsr_slave_0 [ 703.761406] protocol 88fb is buggy, dev hsr_slave_0 [ 703.766399] protocol 88fb is buggy, dev hsr_slave_1 [ 703.771401] protocol 88fb is buggy, dev hsr_slave_1 [ 704.706279] protocol 88fb is buggy, dev hsr_slave_0 [ 704.711389] protocol 88fb is buggy, dev hsr_slave_1 [ 704.866285] protocol 88fb is buggy, dev hsr_slave_0 11:36:08 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000000)=@req={0x8, 0x800, 0x800, 0x9}, 0xfffffffffffffe5e) setsockopt$packet_int(r1, 0x107, 0x9, &(0x7f0000000080), 0x4) 11:36:08 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x3a00000000000000, 0x0, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:36:08 executing program 1: 11:36:08 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='coredump_filter\x00') r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10) socket$packet(0x11, 0x3, 0x300) getsockopt$packet_buf(r0, 0x107, 0x16, &(0x7f0000000240)=""/8, &(0x7f0000000280)=0x3f) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x7e0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$inet_tcp(0x2, 0x1, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r4, 0x1, 0x2b, &(0x7f0000f59ffc)=0x5, 0x4) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x3f, &(0x7f00000000c0)=0x6, 0x4) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev}}, 0x1c) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40042406, &(0x7f0000000200)='..cpuset\x00') ioctl$sock_inet_SIOCGIFPFLAGS(r4, 0x8935, &(0x7f0000000380)={'nlmon0\x00', 0x40}) getpid() socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000300)={'ip6gretap0\x00', 0x8}) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"]) setrlimit(0xd, &(0x7f0000000140)={0xc9d9, 0x6}) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) getsockopt$IP_VS_SO_GET_TIMEOUT(r4, 0x0, 0x486, &(0x7f00000001c0), &(0x7f0000000400)=0xc) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6001, 0x1) unlink(&(0x7f0000000440)='./file0\x00') ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r2, 0x3) prctl$PR_SET_THP_DISABLE(0x29, 0xfffffffffffffffe) sendto$inet(r1, 0x0, 0x0, 0x20000802, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='ip6tnl0\x00', 0x10) shutdown(r1, 0x1) 11:36:08 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff', 0x2}) 11:36:08 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SMI(r3, 0xaeb7) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) setsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f00000001c0)=@int=0x3, 0x4) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a0000120800000088b070") syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f00000000c0)="66ba4200ecf30f0fa00ccd00009ed8e10f20c035000000400f22c066baf80cb8903e898bef66bafc0ced66baf80cb81e731c85ef66bafc0cec0f0018c4e2f91d42edb8a70e00000f23c00f21f835000006000f23f866262e0f07", 0x5a}], 0x1, 0x22, &(0x7f0000000140)=[@cstype3={0x5, 0xe}, @cstype3={0x5, 0xe}], 0x2) 11:36:08 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03', 0x2}) 11:36:08 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x3c00000000000000, 0x0, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:36:08 executing program 1: [ 705.037430] *** Guest State *** [ 705.040773] CR0: actual=0x0000000000050032, shadow=0x0000000000050012, gh_mask=fffffffffffffff7 11:36:08 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x2841, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x3, 0x0, &(0x7f00000000c0)=""/25, &(0x7f0000000100)=""/48, &(0x7f0000000240)=""/228, 0x1000}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000000)=@req3={0x6000000, 0x3, 0x6000000, 0x3}, 0x1c) setsockopt$packet_int(r2, 0x107, 0x9, &(0x7f0000000080), 0x4) [ 705.091245] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 11:36:08 executing program 1: 11:36:08 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff', 0x2}) 11:36:08 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x3f00000000000000, 0x0, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) [ 705.210925] CR3 = 0x0000000000000000 [ 705.256848] RSP = 0x0000000000000000 RIP = 0x0000000000008000 [ 705.287862] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 705.322463] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 705.358799] CS: sel=0x3000, attr=0x08093, limit=0xffffffff, base=0x0000000000030000 11:36:08 executing program 1: 11:36:08 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd', 0x2}) 11:36:08 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='coredump_filter\x00') r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10) socket$packet(0x11, 0x3, 0x300) getsockopt$packet_buf(r0, 0x107, 0x16, &(0x7f0000000240)=""/8, &(0x7f0000000280)=0x3f) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x7e0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$inet_tcp(0x2, 0x1, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r4, 0x1, 0x2b, &(0x7f0000f59ffc)=0x5, 0x4) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x3f, &(0x7f00000000c0)=0x6, 0x4) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev}}, 0x1c) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40042406, &(0x7f0000000200)='..cpuset\x00') ioctl$sock_inet_SIOCGIFPFLAGS(r4, 0x8935, &(0x7f0000000380)={'nlmon0\x00', 0x40}) getpid() socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000300)={'ip6gretap0\x00', 0x8}) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"]) setrlimit(0xd, &(0x7f0000000140)={0xc9d9, 0x6}) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) getsockopt$IP_VS_SO_GET_TIMEOUT(r4, 0x0, 0x486, &(0x7f00000001c0), &(0x7f0000000400)=0xc) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6001, 0x1) unlink(&(0x7f0000000440)='./file0\x00') ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r2, 0x3) prctl$PR_SET_THP_DISABLE(0x29, 0xfffffffffffffffe) sendto$inet(r1, 0x0, 0x0, 0x20000802, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='ip6tnl0\x00', 0x10) shutdown(r1, 0x1) 11:36:08 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x4000000000000000, 0x0, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) [ 705.424146] DS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 705.466360] SS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 705.505768] ES: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 705.543085] FS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 705.578936] GS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 705.600251] GDTR: limit=0x00000000, base=0x0000000000000000 [ 705.631767] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 705.656652] IDTR: limit=0x00000000, base=0x0000000000000000 [ 705.681623] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 705.706361] EFER = 0x0000000000006000 PAT = 0x0007040600070406 [ 705.727415] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 705.762727] Interruptibility = 00000008 ActivityState = 00000000 [ 705.806409] *** Host State *** [ 705.809787] RIP = 0xffffffff811b3710 RSP = 0xffff888048dc78b8 [ 705.846419] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 705.876362] FSBase=00007f45eb8ae700 GSBase=ffff8880ae800000 TRBase=fffffe0000003000 [ 705.901655] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 705.932030] CR0=0000000080050033 CR3=000000009682c000 CR4=00000000001426f0 [ 705.976424] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201360 [ 706.001362] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 706.016519] *** Control State *** [ 706.024635] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 706.041784] EntryControls=0000d1ff ExitControls=002fefff [ 706.061803] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 706.086257] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 706.092953] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 706.126252] reason=80000021 qualification=0000000000000000 [ 706.132704] IDTVectoring: info=00000000 errcode=00000000 [ 706.156217] TSC Offset = 0xfffffe8431f90937 [ 706.160571] EPT pointer = 0x0000000031e9d01e 11:36:09 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SMI(r3, 0xaeb7) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000000c0)={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x1, @broadcast}, 0x8, {0x2, 0x4e20, @loopback}, 'bond_slave_0\x00'}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000000500)={0x0, 0x0, 0x2080}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a0000120800000088b070") 11:36:09 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="1aad02090103"], 0x6) write$binfmt_aout(r1, &(0x7f0000000400), 0x20) sendfile(r0, r1, &(0x7f0000000000), 0x11) 11:36:09 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x4305000000000000, 0x0, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:36:09 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff', 0x2}) [ 706.352729] *** Guest State *** [ 706.356142] CR0: actual=0x0000000000050032, shadow=0x0000000000050012, gh_mask=fffffffffffffff7 [ 706.368905] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 706.396319] CR3 = 0x0000000000000000 [ 706.400605] RSP = 0x0000000000000000 RIP = 0x0000000000008000 [ 706.416350] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 706.422454] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 706.436968] CS: sel=0x3000, attr=0x08093, limit=0xffffffff, base=0x0000000000030000 [ 706.456305] DS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 706.477097] SS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 706.485252] ES: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 706.506296] FS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 706.526298] GS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 706.534402] GDTR: limit=0x00000000, base=0x0000000000000000 [ 706.556289] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 706.564399] IDTR: limit=0x00000000, base=0x0000000000000000 [ 706.579624] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 706.587790] EFER = 0x0000000000006000 PAT = 0x0007040600070406 [ 706.594325] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 706.601934] Interruptibility = 00000008 ActivityState = 00000000 [ 706.609132] *** Host State *** [ 706.612455] RIP = 0xffffffff811b3710 RSP = 0xffff888028bc78b8 [ 706.618892] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 706.625428] FSBase=00007f45eb8ae700 GSBase=ffff8880ae900000 TRBase=fffffe0000033000 [ 706.633425] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 706.639495] CR0=0000000080050033 CR3=000000009d719000 CR4=00000000001426e0 [ 706.646718] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87201360 [ 706.653523] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 706.659774] *** Control State *** [ 706.663348] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 706.670198] EntryControls=0000d1ff ExitControls=002fefff [ 706.675777] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 706.682858] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 706.689690] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 706.696421] reason=80000021 qualification=0000000000000000 [ 706.702852] IDTVectoring: info=00000000 errcode=00000000 [ 706.716270] TSC Offset = 0xfffffe837aa3ba77 [ 706.720722] EPT pointer = 0x000000005664b01e [ 706.748090] *** Guest State *** [ 706.767197] CR0: actual=0x000000008005003f, shadow=0x000000008005001f, gh_mask=fffffffffffffff7 [ 706.810679] CR4: actual=0x0000000000002068, shadow=0x0000000000000028, gh_mask=ffffffffffffe871 [ 706.846310] CR3 = 0x0000000000000000 [ 706.850163] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 706.867212] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 706.873287] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 706.880118] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 706.888250] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 706.896348] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 706.904411] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 706.912539] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 706.920680] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 706.936248] GDTR: limit=0x00000000, base=0x0000000000000000 [ 706.951266] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 706.973029] IDTR: limit=0x00000000, base=0x0000000000000000 [ 706.986368] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 707.006255] EFER = 0x0000000000006500 PAT = 0x0007040600070406 [ 707.012753] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 707.020327] Interruptibility = 00000000 ActivityState = 00000000 [ 707.027862] *** Host State *** [ 707.031170] RIP = 0xffffffff811b3710 RSP = 0xffff88804627f8b8 [ 707.037270] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 707.043765] FSBase=00007f45eb88d700 GSBase=ffff8880ae800000 TRBase=fffffe0000033000 [ 707.051691] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 707.066263] CR0=0000000080050033 CR3=000000009d719000 CR4=00000000001426f0 [ 707.073377] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87201360 [ 707.088209] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 707.094277] *** Control State *** [ 707.112647] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 707.127156] EntryControls=0000d3ff ExitControls=002fefff [ 707.132707] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 707.146254] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 707.160036] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 707.171336] reason=80000021 qualification=0000000000000000 [ 707.193632] IDTVectoring: info=00000000 errcode=00000000 [ 707.206315] TSC Offset = 0xfffffe834188cf48 [ 707.210733] EPT pointer = 0x000000002994201e 11:36:10 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x6, 0x10000) ioctl$VIDIOC_QUERYMENU(r1, 0xc02c5625, &(0x7f00000000c0)={0x100000001, 0x5, @value=0x7}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000000)=@req3={0x6000000, 0x3, 0x6000000, 0x3}, 0x1c) setsockopt$packet_int(r2, 0x107, 0x9, &(0x7f0000000080), 0x4) 11:36:10 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000140)=[{r1}], 0x1, 0x0, &(0x7f0000000200)={0x9}, 0x8) 11:36:10 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x800e000000000000, 0x0, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:36:10 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\xfd\xfd\xff', 0x2}) 11:36:10 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="1aad02090103"], 0x6) write$binfmt_aout(r1, &(0x7f0000000400), 0x20) sendfile(r0, r1, &(0x7f0000000000), 0x11) 11:36:10 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SMI(r1, 0xaeb7) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) fcntl$dupfd(r0, 0x406, r4) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x100000, 0x0, 0x6500}) ioctl$KVM_RUN(r4, 0xae80, 0x0) utimes(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000100)={{0x77359400}, {0x0, 0x7530}}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a0000120800000088b070") readahead(r0, 0x4, 0x4) 11:36:10 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="1aad02090103"], 0x6) write$binfmt_aout(r1, &(0x7f0000000400), 0x20) sendfile(r0, r1, &(0x7f0000000000), 0x11) 11:36:10 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc3\xff\xff', 0x2}) 11:36:10 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x8035000000000000, 0x0, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:36:10 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf5\xff\xff', 0x2}) 11:36:10 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000000)=@req3={0x6000000, 0x3, 0x6000000, 0x3}, 0x1c) setsockopt$packet_int(r2, 0x107, 0x9, &(0x7f0000000080), 0x4) r3 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000240)={0x0, 0x1000, "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"}, &(0x7f0000000040)=0x1008) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f00000000c0)={0x9, 0x8001, 0x3, 0x7, r4}, 0x10) 11:36:10 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="1aad02090103"], 0x6) write$binfmt_aout(r1, &(0x7f0000000400), 0x20) sendfile(r0, r1, &(0x7f0000000000), 0x11) 11:36:10 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x8100000000000000, 0x0, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:36:11 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="1aad020901034b"], 0x7) sendfile(r0, r1, &(0x7f0000000000), 0x11) 11:36:11 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SMI(r3, 0xaeb7) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a0000120800000088b070") personality(0x5000007) 11:36:11 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\xfe\xff\xff', 0x2}) 11:36:11 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="1aad02090103"], 0x6) sendfile(r0, r1, &(0x7f0000000000), 0x11) 11:36:11 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x84ffffff00000000, 0x0, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:36:11 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x86ddffff00000000, 0x0, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:36:11 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="1aad02090103"], 0x6) sendfile(r0, r1, &(0x7f0000000000), 0x11) [ 708.391528] *** Guest State *** [ 708.394850] CR0: actual=0x0000000000050032, shadow=0x0000000000050012, gh_mask=fffffffffffffff7 [ 708.394873] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 708.394880] CR3 = 0x0000000000000000 [ 708.394889] RSP = 0x0000000000000000 RIP = 0x0000000000008000 [ 708.394903] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 708.394920] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 11:36:11 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00', 0x2}) 11:36:11 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="565f0000000300"], 0x7) sendfile(r0, r1, &(0x7f0000000000), 0x11) [ 708.432597] CS: sel=0x3000, attr=0x08093, limit=0xffffffff, base=0x0000000000030000 [ 708.496488] DS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 708.523583] SS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 708.565089] ES: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 708.609129] FS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 708.632433] GS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 708.649709] GDTR: limit=0x00000000, base=0x0000000000000000 [ 708.676316] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 708.684398] IDTR: limit=0x00000000, base=0x0000000000000000 [ 708.692547] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 708.706253] EFER = 0x0000000000006000 PAT = 0x0007040600070406 [ 708.717091] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 708.736269] Interruptibility = 00000008 ActivityState = 00000000 [ 708.742597] *** Host State *** [ 708.745867] RIP = 0xffffffff811b3710 RSP = 0xffff88804746f8b8 [ 708.751976] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 708.766300] FSBase=00007f45eb8ae700 GSBase=ffff8880ae800000 TRBase=fffffe0000033000 [ 708.774198] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 708.780228] CR0=0000000080050033 CR3=00000000482e5000 CR4=00000000001426f0 [ 708.796282] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87201360 [ 708.806263] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 708.816251] *** Control State *** [ 708.826261] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 708.847061] EntryControls=0000d1ff ExitControls=002fefff [ 708.852625] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 708.866253] net_ratelimit: 20 callbacks suppressed [ 708.866261] protocol 88fb is buggy, dev hsr_slave_0 [ 708.866269] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 708.866280] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 708.871304] protocol 88fb is buggy, dev hsr_slave_1 [ 708.886258] reason=80000021 qualification=0000000000000000 [ 708.916270] IDTVectoring: info=00000000 errcode=00000000 [ 708.926266] TSC Offset = 0xfffffe8265b006ac [ 708.936264] EPT pointer = 0x0000000028fde01e [ 709.026617] protocol 88fb is buggy, dev hsr_slave_0 [ 709.031822] protocol 88fb is buggy, dev hsr_slave_1 [ 709.986247] protocol 88fb is buggy, dev hsr_slave_0 [ 709.986300] protocol 88fb is buggy, dev hsr_slave_1 [ 709.991362] protocol 88fb is buggy, dev hsr_slave_1 [ 709.996536] protocol 88fb is buggy, dev hsr_slave_0 [ 710.001565] protocol 88fb is buggy, dev hsr_slave_0 [ 710.006566] protocol 88fb is buggy, dev hsr_slave_1 11:36:13 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x4, 0x400) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cachefiles\x00', 0x1, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000240)=0x3, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x600000000) r1 = socket$packet(0x11, 0x2, 0x300) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0xac002, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000000)=@req3={0x6000000, 0x3, 0x6000000, 0x3}, 0x1c) syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x800) setsockopt$packet_int(r1, 0x107, 0x109, &(0x7f0000000080)=0x6, 0x4) 11:36:13 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x8847000000000000, 0x0, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:36:13 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="1aad02090103"], 0x6) sendfile(r0, r1, &(0x7f0000000000), 0x11) 11:36:13 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', 0x2}) 11:36:13 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="565f0000000300"], 0x7) sendfile(r0, r1, &(0x7f0000000000), 0x11) 11:36:13 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SMI(r3, 0xaeb7) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a0000120800000088b070") r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x400, 0x0) ioctl$SIOCGETLINKNAME(r4, 0x89e0, &(0x7f00000000c0)={0x4}) 11:36:13 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="565f0000000300"], 0x7) sendfile(r0, r1, &(0x7f0000000000), 0x11) 11:36:13 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0) write$binfmt_aout(r1, &(0x7f0000000400), 0x20) sendfile(r0, r1, &(0x7f0000000000), 0x11) 11:36:13 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x8848000000000000, 0x0, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) [ 710.322049] *** Guest State *** [ 710.325378] CR0: actual=0x0000000000050032, shadow=0x0000000000050012, gh_mask=fffffffffffffff7 [ 710.346120] Unknown ioctl 35090 11:36:13 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00', 0x2}) [ 710.367923] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 710.413021] CR3 = 0x0000000000000000 [ 710.428825] RSP = 0x0000000000000000 RIP = 0x0000000000008000 [ 710.451902] RFLAGS=0x00000002 DR7 = 0x0000000000000400 11:36:13 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0) write$binfmt_aout(r1, &(0x7f0000000400), 0x20) sendfile(r0, r1, &(0x7f0000000000), 0x11) 11:36:13 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00', 0x2}) [ 710.486418] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 710.515082] CS: sel=0x3000, attr=0x08093, limit=0xffffffff, base=0x0000000000030000 [ 710.546878] DS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 710.567280] SS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 710.585506] ES: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 710.604837] FS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 710.622923] GS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 710.646542] GDTR: limit=0x00000000, base=0x0000000000000000 [ 710.667270] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 710.675266] IDTR: limit=0x00000000, base=0x0000000000000000 [ 710.714702] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 710.738221] EFER = 0x0000000000006000 PAT = 0x0007040600070406 [ 710.758119] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 710.778155] Interruptibility = 00000008 ActivityState = 00000000 [ 710.798951] *** Host State *** [ 710.809947] RIP = 0xffffffff811b3710 RSP = 0xffff8880331378b8 [ 710.825077] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 710.844886] FSBase=00007f45eb8ae700 GSBase=ffff8880ae800000 TRBase=fffffe0000033000 [ 710.858296] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 710.864350] CR0=0000000080050033 CR3=0000000031e6f000 CR4=00000000001426f0 [ 710.875384] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87201360 [ 710.885147] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 710.894119] *** Control State *** [ 710.900775] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 710.910395] EntryControls=0000d1ff ExitControls=002fefff [ 710.916008] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 710.925874] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 710.939291] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 710.946141] reason=80000021 qualification=0000000000000000 [ 710.953469] IDTVectoring: info=00000000 errcode=00000000 [ 710.959215] TSC Offset = 0xfffffe815e217897 [ 710.963706] EPT pointer = 0x000000009185301e [ 711.144463] Unknown ioctl 35090 11:36:15 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000000)=@req3={0x6000000, 0x3, 0x6000000, 0x3}, 0x1c) setsockopt$packet_int(r1, 0x107, 0x9, &(0x7f0000000080), 0x4) 11:36:15 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="565f0000000300"], 0x7) sendfile(r0, r1, &(0x7f0000000000), 0x11) 11:36:15 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x8864000000000000, 0x0, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:36:15 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00', 0x2}) 11:36:15 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0) write$binfmt_aout(r1, &(0x7f0000000400), 0x20) sendfile(r0, r1, &(0x7f0000000000), 0x11) 11:36:15 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SMI(r3, 0xaeb7) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c00000009000000010000000f0000000000000000300000000000000e00000016", 0x31, 0x1400}], 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a0000120800000088b070") 11:36:15 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0) sendfile(r0, r1, &(0x7f0000000000), 0x11) 11:36:16 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00', 0x2}) 11:36:16 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x88a8ffff00000000, 0x0, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:36:16 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="1aad02090103"], 0x6) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000400), 0x20) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000000), 0x11) [ 712.896298] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 712.903539] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock 11:36:16 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000000)=@req3={0x6000000, 0x3, 0x6000000, 0x3}, 0x1c) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x0, 0x0) write$FUSE_OPEN(r2, &(0x7f00000000c0)={0x20, 0x0, 0x3, {0x0, 0x4}}, 0x20) setsockopt$packet_int(r1, 0x107, 0x9, &(0x7f0000000080), 0x4) 11:36:16 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x88caffff00000000, 0x0, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) [ 712.962710] F2FS-fs (loop2): Wrong secs_per_zone / total_sections (15, 14) [ 713.002189] *** Guest State *** 11:36:16 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0) sendfile(r0, r1, &(0x7f0000000000), 0x11) 11:36:16 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00', 0x2}) 11:36:16 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="1aad02090103"], 0x6) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000400), 0x20) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000000), 0x11) [ 713.021157] CR0: actual=0x0000000000050032, shadow=0x0000000000050012, gh_mask=fffffffffffffff7 11:36:16 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x88ffffff00000000, 0x0, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) [ 713.080470] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 713.092712] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 713.102045] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) 11:36:16 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0) sendfile(r0, r1, &(0x7f0000000000), 0x11) [ 713.150335] CR3 = 0x0000000000000000 [ 713.155145] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 713.204208] RSP = 0x0000000000000000 RIP = 0x0000000000008000 [ 713.220990] F2FS-fs (loop2): Wrong secs_per_zone / total_sections (15, 14) [ 713.235736] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 713.264773] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 713.270826] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 713.303886] CS: sel=0x3000, attr=0x08093, limit=0xffffffff, base=0x0000000000030000 [ 713.337209] DS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 713.358602] SS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 713.381096] ES: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 713.411414] FS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 713.435135] GS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 713.457604] GDTR: limit=0x00000000, base=0x0000000000000000 [ 713.476755] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 713.496971] IDTR: limit=0x00000000, base=0x0000000000000000 [ 713.515035] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 713.526374] EFER = 0x0000000000006000 PAT = 0x0007040600070406 [ 713.544558] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 713.567297] Interruptibility = 00000008 ActivityState = 00000000 [ 713.586289] *** Host State *** [ 713.589609] RIP = 0xffffffff811b3710 RSP = 0xffff8880328778b8 [ 713.601246] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 713.613739] FSBase=00007f45eb88d700 GSBase=ffff8880ae900000 TRBase=fffffe0000003000 [ 713.635746] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 713.656347] CR0=0000000080050033 CR3=00000000434a5000 CR4=00000000001426e0 [ 713.668581] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201360 [ 713.675589] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 713.702596] *** Control State *** [ 713.720666] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 713.749218] EntryControls=0000d1ff ExitControls=002fefff [ 713.768347] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 713.788234] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 713.808310] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 713.814899] reason=80000021 qualification=0000000000000000 [ 713.848134] IDTVectoring: info=00000000 errcode=00000000 [ 713.853614] TSC Offset = 0xfffffe7ffe1692df [ 713.880134] EPT pointer = 0x0000000026e5001e 11:36:17 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x4) write$P9_RMKDIR(r3, &(0x7f00000001c0)={0x14, 0x49, 0x2, {0x4}}, 0x14) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000100)="67660f1b16ba200066b8c3e2000066efbad104ed0f070f22dcbaf80c66b8f3edf48166efbafc0cecf40f20e7f30f0198000066b9df0200000f32", 0x3a}], 0x1, 0x62, &(0x7f0000000180), 0x0) ioctl$KVM_SMI(r4, 0xaeb7) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x0, 0x4000) ioctl$CAPI_SET_FLAGS(r5, 0x80044324, &(0x7f00000000c0)=0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a0000120800000088b070") prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0xc) 11:36:17 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="565f0000000300"], 0x7) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000000), 0x11) 11:36:17 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="1aad02090103"], 0x6) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000400), 0x20) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000000), 0x11) 11:36:17 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00', 0x2}) 11:36:17 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x8906000000000000, 0x0, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) [ 714.144182] *** Guest State *** [ 714.147683] net_ratelimit: 17 callbacks suppressed [ 714.147691] protocol 88fb is buggy, dev hsr_slave_0 [ 714.147749] protocol 88fb is buggy, dev hsr_slave_1 [ 714.147832] protocol 88fb is buggy, dev hsr_slave_0 [ 714.148021] protocol 88fb is buggy, dev hsr_slave_1 [ 714.156256] protocol 88fb is buggy, dev hsr_slave_0 [ 714.178299] protocol 88fb is buggy, dev hsr_slave_1 [ 714.181407] CR0: actual=0x0000000000050032, shadow=0x0000000000050012, gh_mask=fffffffffffffff7 [ 714.183386] protocol 88fb is buggy, dev hsr_slave_0 [ 714.197319] protocol 88fb is buggy, dev hsr_slave_1 [ 714.202175] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 714.222936] CR3 = 0x0000000000000000 [ 714.235041] RSP = 0x0000000000000f80 RIP = 0x0000000000008000 [ 714.254763] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 714.275002] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 714.295359] CS: sel=0x3000, attr=0x08093, limit=0xffffffff, base=0x0000000000030000 [ 714.321459] DS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 714.344765] SS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 714.359370] ES: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 714.370757] FS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 714.382539] GS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 714.394516] GDTR: limit=0x00000000, base=0x0000000000000000 [ 714.405716] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 714.419738] IDTR: limit=0x00000000, base=0x0000000000000000 [ 714.429923] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 714.441977] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 714.450678] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 714.462255] Interruptibility = 00000008 ActivityState = 00000000 [ 714.471041] *** Host State *** [ 714.474359] RIP = 0xffffffff811b3710 RSP = 0xffff88802b7af8b8 [ 714.484690] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 714.493314] FSBase=00007f45eb8ae700 GSBase=ffff8880ae800000 TRBase=fffffe0000003000 [ 714.505398] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 714.513641] CR0=0000000080050033 CR3=000000002f6fa000 CR4=00000000001426f0 [ 714.524768] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201360 [ 714.533845] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 714.544151] *** Control State *** [ 714.555157] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ca [ 714.566294] EntryControls=0000d1ff ExitControls=002fefff [ 714.571859] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 714.606263] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 714.626259] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 714.632927] reason=80000021 qualification=0000000000000000 [ 714.656258] IDTVectoring: info=00000000 errcode=00000000 [ 714.661809] TSC Offset = 0xfffffe7f51ca67ed [ 714.676262] EPT pointer = 0x000000003e3eb01e [ 714.729386] *** Guest State *** [ 714.732731] CR0: actual=0x0000000000050032, shadow=0x0000000000050012, gh_mask=fffffffffffffff7 [ 714.766348] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 714.786302] CR3 = 0x0000000000000000 [ 714.790128] RSP = 0x0000000000000000 RIP = 0x0000000000008000 [ 714.806493] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 714.812743] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 714.836340] CS: sel=0x3000, attr=0x08093, limit=0xffffffff, base=0x0000000000030000 [ 714.866299] DS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 714.889457] SS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 714.906348] ES: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 714.926282] FS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 714.934366] GS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 714.956284] GDTR: limit=0x00000000, base=0x0000000000000000 [ 714.976288] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 714.984363] IDTR: limit=0x00000000, base=0x0000000000000000 [ 715.006270] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 715.026262] EFER = 0x0000000000006000 PAT = 0x0007040600070406 [ 715.033226] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 715.041174] Interruptibility = 00000008 ActivityState = 00000000 [ 715.047748] *** Host State *** [ 715.051034] RIP = 0xffffffff811b3710 RSP = 0xffff88803470f8b8 [ 715.057333] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 715.063834] FSBase=00007f45eb88d700 GSBase=ffff8880ae800000 TRBase=fffffe0000033000 [ 715.071996] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 715.078213] CR0=0000000080050033 CR3=000000002f6fa000 CR4=00000000001426f0 [ 715.085318] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87201360 [ 715.092337] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 715.098707] *** Control State *** [ 715.102241] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 715.106272] protocol 88fb is buggy, dev hsr_slave_0 [ 715.114018] protocol 88fb is buggy, dev hsr_slave_1 [ 715.116242] EntryControls=0000d1ff ExitControls=002fefff [ 715.124582] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 715.147020] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 715.153785] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 715.176268] reason=80000021 qualification=0000000000000000 [ 715.182687] IDTVectoring: info=00000000 errcode=00000000 [ 715.196244] TSC Offset = 0xfffffe7effedb73e [ 715.200661] EPT pointer = 0x000000005347901e 11:36:19 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000000)=@req3={0x6000000, 0x3, 0x6000000, 0x3}, 0x1c) setsockopt$packet_int(r1, 0x107, 0x9, &(0x7f0000000080), 0x4) 11:36:19 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x89ffffff00000000, 0x0, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:36:19 executing program 1: r0 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0) write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1aad02090103"], 0x6) write$binfmt_aout(r0, &(0x7f0000000400), 0x20) sendfile(0xffffffffffffffff, r0, &(0x7f0000000000), 0x11) 11:36:19 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="565f0000000300"], 0x7) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000000), 0x11) 11:36:19 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00', 0x2}) 11:36:19 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0a0000120800009a88b070") 11:36:19 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="565f0000000300"], 0x7) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000000), 0x11) [ 716.146097] *** Guest State *** 11:36:19 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0xac14140000000000, 0x0, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:36:19 executing program 1: r0 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0) write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1aad02090103"], 0x6) write$binfmt_aout(r0, &(0x7f0000000400), 0x20) sendfile(0xffffffffffffffff, r0, &(0x7f0000000000), 0x11) 11:36:19 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00', 0x2}) [ 716.166292] CR0: actual=0x0000000000050032, shadow=0x0000000000050012, gh_mask=fffffffffffffff7 [ 716.222736] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 716.233620] CR3 = 0x0000000000000000 [ 716.244128] RSP = 0x0000000000000000 RIP = 0x0000000000008000 [ 716.250753] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 716.262972] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 11:36:19 executing program 4: r0 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0) write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="565f0000000300"], 0x7) sendfile(0xffffffffffffffff, r0, &(0x7f0000000000), 0x11) 11:36:19 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00', 0x2}) [ 716.270115] CS: sel=0x3000, attr=0x08093, limit=0xffffffff, base=0x0000000000030000 [ 716.284203] DS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 716.292705] SS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 716.335913] ES: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 716.359853] FS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 716.391674] GS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 716.425341] GDTR: limit=0x00000000, base=0x0000000000000000 [ 716.453025] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 716.465008] IDTR: limit=0x00000000, base=0x0000000000000000 [ 716.475335] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 716.490013] EFER = 0x0000000000006000 PAT = 0x0007040600070406 [ 716.500055] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 716.511310] Interruptibility = 00000008 ActivityState = 00000000 [ 716.520017] *** Host State *** [ 716.523306] RIP = 0xffffffff811b3710 RSP = 0xffff88802b57f8b8 [ 716.533316] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 716.542074] FSBase=00007f45eb8ae700 GSBase=ffff8880ae800000 TRBase=fffffe0000003000 [ 716.553710] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 716.561791] CR0=0000000080050033 CR3=000000004540a000 CR4=00000000001426f0 [ 716.572569] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201360 [ 716.590071] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 716.609912] *** Control State *** [ 716.613465] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 716.622405] EntryControls=0000d1ff ExitControls=002fefff [ 716.638085] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 716.645095] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 716.656292] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 716.667633] reason=80000021 qualification=0000000000000000 [ 716.684154] IDTVectoring: info=00000000 errcode=00000000 [ 716.697622] TSC Offset = 0xfffffe7e3d10ee48 [ 716.708812] EPT pointer = 0x000000003d4cb01e 11:36:21 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) r0 = perf_event_open(&(0x7f0000000240)={0x7, 0x70, 0x0, 0x2, 0x8, 0x6, 0x0, 0xfffffffffffeffff, 0x10020, 0x2, 0x0, 0x3, 0x2, 0x1ff, 0x2, 0x7, 0x2, 0xa052, 0x7, 0xfffffffffffffff7, 0x0, 0x5, 0x0, 0x10000, 0x4f, 0x7, 0x8, 0xfffffffffffffffc, 0xa966, 0x80000001, 0x80, 0x9, 0x4, 0x2, 0x6, 0x1, 0x0, 0x2, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000180), 0x7}, 0x4002, 0x3, 0x1, 0x2, 0x800, 0x1c, 0x5}, 0xffffffffffffffff, 0xc, 0xffffffffffffff9c, 0x3) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400202) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000000)=@req3={0x6000000, 0x3, 0x6000000, 0x3}, 0x1c) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x240202, 0x1) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0x8) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x4e23, @empty}, 0x10) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000140)={r3, 0x9}, 0x8) 11:36:21 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0xfdffffff00000000, 0x0, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:36:21 executing program 1: r0 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0) write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1aad02090103"], 0x6) write$binfmt_aout(r0, &(0x7f0000000400), 0x20) sendfile(0xffffffffffffffff, r0, &(0x7f0000000000), 0x11) 11:36:21 executing program 4: r0 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0) write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="565f0000000300"], 0x7) sendfile(0xffffffffffffffff, r0, &(0x7f0000000000), 0x11) 11:36:21 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00', 0x2}) 11:36:21 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup2(r0, r0) ioctl$KVM_DEASSIGN_DEV_IRQ(r1, 0x4040ae75, &(0x7f0000000000)={0xd, 0x639, 0x3, 0x404}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SMI(r4, 0xaeb7) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a0000120800000088b070") 11:36:21 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0xfeffffff00000000, 0x0, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:36:21 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00', 0x2}) 11:36:21 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x101006, 0x0) r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="1aad02090103"], 0x6) write$binfmt_aout(r1, &(0x7f0000000400), 0x20) sendfile(r0, r1, &(0x7f0000000000), 0x11) 11:36:21 executing program 4: r0 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0) write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="565f0000000300"], 0x7) sendfile(0xffffffffffffffff, r0, &(0x7f0000000000), 0x11) [ 718.821115] *** Guest State *** [ 718.829967] CR0: actual=0x0000000000050032, shadow=0x0000000000050012, gh_mask=fffffffffffffff7 [ 718.839667] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 11:36:22 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x101006, 0x0) r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="1aad02090103"], 0x6) write$binfmt_aout(r1, &(0x7f0000000400), 0x20) sendfile(r0, r1, &(0x7f0000000000), 0x11) 11:36:22 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x101006, 0x0) r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="565f0000000300"], 0x7) sendfile(r0, r1, &(0x7f0000000000), 0x11) [ 718.906424] CR3 = 0x0000000000000000 [ 718.937818] RSP = 0x0000000000000000 RIP = 0x0000000000008000 [ 718.966852] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 719.000847] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 719.036290] CS: sel=0x3000, attr=0x08093, limit=0xffffffff, base=0x0000000000030000 [ 719.056457] DS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 719.080220] SS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 719.101884] ES: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 719.121469] FS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 719.140892] GS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 719.160221] GDTR: limit=0x00000000, base=0x0000000000000000 [ 719.176233] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 719.184224] IDTR: limit=0x00000000, base=0x0000000000000000 [ 719.216248] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 719.224251] EFER = 0x0000000000006000 PAT = 0x0007040600070406 [ 719.247040] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 719.254518] Interruptibility = 00000008 ActivityState = 00000000 [ 719.266297] net_ratelimit: 21 callbacks suppressed [ 719.266304] protocol 88fb is buggy, dev hsr_slave_0 [ 719.276205] *** Host State *** [ 719.276426] protocol 88fb is buggy, dev hsr_slave_1 [ 719.280408] RIP = 0xffffffff811b3710 RSP = 0xffff88805b72f8b8 [ 719.295304] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 719.312034] FSBase=00007f45eb8ae700 GSBase=ffff8880ae800000 TRBase=fffffe0000033000 [ 719.335799] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 719.352155] CR0=0000000080050033 CR3=000000002d82e000 CR4=00000000001426f0 [ 719.370714] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87201360 [ 719.378552] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 719.384747] *** Control State *** [ 719.388572] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 719.395354] EntryControls=0000d1ff ExitControls=002fefff [ 719.401172] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 719.408439] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 719.415235] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 719.422187] reason=80000021 qualification=0000000000000000 [ 719.428685] protocol 88fb is buggy, dev hsr_slave_0 [ 719.428758] protocol 88fb is buggy, dev hsr_slave_1 [ 719.439363] IDTVectoring: info=00000000 errcode=00000000 [ 719.444928] TSC Offset = 0xfffffe7ccee4d445 [ 719.449618] EPT pointer = 0x000000002b03401e [ 719.474101] *** Guest State *** [ 719.486244] CR0: actual=0x0000000000050032, shadow=0x0000000000050012, gh_mask=fffffffffffffff7 [ 719.495099] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 719.526254] CR3 = 0x0000000000000000 [ 719.556296] RSP = 0x0000000000000000 RIP = 0x0000000000008000 [ 719.576292] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 719.596536] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 719.612305] CS: sel=0x3000, attr=0x08093, limit=0xffffffff, base=0x0000000000030000 [ 719.635400] DS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 719.657741] SS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 719.676289] ES: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 719.696296] FS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 719.706331] GS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 719.714323] GDTR: limit=0x00000000, base=0x0000000000000000 [ 719.746230] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 719.754227] IDTR: limit=0x00000000, base=0x0000000000000000 [ 719.773308] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 719.781709] EFER = 0x0000000000006000 PAT = 0x0007040600070406 [ 719.794284] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 719.802213] Interruptibility = 00000008 ActivityState = 00000000 [ 719.814850] *** Host State *** [ 719.818428] RIP = 0xffffffff811b3710 RSP = 0xffff8880881b78b8 [ 719.824554] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 719.837943] FSBase=00007f45eb88d700 GSBase=ffff8880ae800000 TRBase=fffffe0000033000 [ 719.845865] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 719.868179] CR0=0000000080050033 CR3=000000002d82e000 CR4=00000000001426f0 [ 719.888189] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87201360 [ 719.906303] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 719.912372] *** Control State *** [ 719.915828] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 719.946230] EntryControls=0000d1ff ExitControls=002fefff [ 719.951716] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 719.976306] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 719.983100] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 720.011188] reason=80000021 qualification=0000000000000000 [ 720.032599] IDTVectoring: info=00000000 errcode=00000000 [ 720.044875] TSC Offset = 0xfffffe7c70919d37 [ 720.057220] EPT pointer = 0x000000005485b01e [ 720.386267] protocol 88fb is buggy, dev hsr_slave_0 [ 720.386283] protocol 88fb is buggy, dev hsr_slave_0 [ 720.391501] protocol 88fb is buggy, dev hsr_slave_1 [ 720.396399] protocol 88fb is buggy, dev hsr_slave_1 [ 720.401572] protocol 88fb is buggy, dev hsr_slave_0 [ 720.406500] protocol 88fb is buggy, dev hsr_slave_0 11:36:23 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0xbc3a, 0x143000) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f0000000140)={0x7, 0x5748}) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000000)=@req3={0x6000000, 0x3, 0x6000000, 0x3}, 0x1c) shmget(0x3, 0x4000, 0x10, &(0x7f0000ffa000/0x4000)=nil) setsockopt$packet_int(r2, 0x107, 0x9, &(0x7f0000000080), 0x4) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000100)={0x1, "83"}, 0x2) 11:36:23 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0xffffffffa0008000, 0x0, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:36:23 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00', 0x2}) 11:36:23 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x101006, 0x0) r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="1aad02090103"], 0x6) write$binfmt_aout(r1, &(0x7f0000000400), 0x20) sendfile(r0, r1, &(0x7f0000000000), 0x11) 11:36:23 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x101006, 0x0) r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="565f0000000300"], 0x7) sendfile(r0, r1, &(0x7f0000000000), 0x11) 11:36:23 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x200000000000800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SMI(r3, 0xaeb7) ioctl$KVM_GET_REGS(r3, 0x8090ae81, &(0x7f00000000c0)) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) r4 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x4bf2, 0x800) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x0, 0x0) ioctl$TUNSETFILTEREBPF(r4, 0x800454e1, &(0x7f0000000200)=r4) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a0000120800000088b070") 11:36:23 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0xfffffffffffff000, 0x0, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:36:23 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="1aad02090103"], 0x6) write$binfmt_aout(r1, &(0x7f0000000400), 0x20) sendfile(r0, r1, &(0x7f0000000000), 0x11) 11:36:23 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x101006, 0x0) r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="565f0000000300"], 0x7) sendfile(r0, r1, &(0x7f0000000000), 0x11) [ 720.715660] *** Guest State *** 11:36:23 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00', 0x2}) [ 720.742121] CR0: actual=0x000000008005003f, shadow=0x000000008005001f, gh_mask=fffffffffffffff7 11:36:23 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x2, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:36:23 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) r0 = socket$packet(0x11, 0x2, 0x300) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x6, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000180)=@req3={0xf7e, 0x80000000, 0x0, 0xc473, 0x28, 0x3b, 0x7}, 0x1c) ioctl$TIOCSTI(r1, 0x5412, 0x81) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x6000000, 0x3, 0x6000000, 0x3}, 0x1c) r2 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x40, 0x2) syz_mount_image$iso9660(&(0x7f0000000500)='iso9660\x00', &(0x7f0000000540)='./file0\x00', 0x6, 0x3, &(0x7f0000000800)=[{&(0x7f0000000580)="6f3a5f498761e43cceab2794b6973f4dbaa5e20cee8b4dc5b8aaa9e70414058a9b8a9aecf0f5128757093d999ac6352f21a29d56976bdc2a09f258cd670dc84b56686ecc5ab48ed15fdf1ba89135e9fcc10a260762e2ade5c64cf35770e09193d9e25d52921dd9853955ab9c3a3c8a38f366339e9c24eb9f5759a63389d0d4e624072e9d365d03d4ea410b9c8cab", 0x8e, 0x401}, {&(0x7f0000000640)="ff0b95e0c6099bbba93401ffe92778e878ee1a8956c115ddb679ce5360e9b02158833f9da2bd3bfe965027d53eea9e2bb3262d17acdc2f1e86335e328991562ad6a5ea14bdd41e0dad3e258682d2f34f4d3617040051bbc85e3578e4f729f47070159a6c12a463b2f5269f4588c184fea0414ba549a49b77a59b6a8d945fc4e5c880f216b150ec1b1d22fbe4968f8f81c1ca8937c89fcfdb43d3d2ebdca476dab5efd5de3315b4b9b8716a983b440970b6909a8b1f3e4de38b5a", 0xba, 0x5}, {&(0x7f0000000700)="acaae1520854f53b856b559d9b9858eae244a8c1eee823b59ba726c01f6ee5f0848da97bd7563f782627ab14c042d90914eda3e5320d8070e32fadf5fa015404449b73f4e0d7ad5f8f71a5c9eddb06bd28258646f01ecbbd459a7ce1c9a9ab76b179105b0dfe4ce283a2f0caba14ba3ab0dc6302c52438a012fbc2c2ae33aa9633c301179174d4aacbcec168311dc0e6d1f8ee1f776e03082b0065e3bee1229d09a0f93fb1e221c63cc7f7b3364b044cf8ead4f4b5a9e7dd77f88dd0fee5cb2fea85bff5d7cf27e9003f0acc14621242327a2fe9ac67e91965469dac", 0xdc, 0xab}], 0x1080, &(0x7f0000000880)={[{@block={'block', 0x3d, 0x200}}, {@nojoliet='nojoliet'}]}) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f00000000c0)=""/78) fsetxattr$trusted_overlay_opaque(r2, &(0x7f0000000480)='trusted.overlay.opaque\x00', &(0x7f00000004c0)='y\x00', 0x2, 0x2) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000080), 0x4) r3 = msgget(0x2, 0x20) msgrcv(r3, &(0x7f0000000240)={0x0, ""/255}, 0x107, 0x3, 0x1000) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000001c0)={0xffffffffffffffff}, 0x117, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f00000003c0)={0x14, 0x88, 0xfa00, {r4, 0x30, 0x0, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x90) [ 720.786310] CR4: actual=0x0000000000002068, shadow=0x0000000000000028, gh_mask=ffffffffffffe871 11:36:23 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="1aad02090103"], 0x6) write$binfmt_aout(r1, &(0x7f0000000400), 0x20) sendfile(r0, r1, &(0x7f0000000000), 0x11) 11:36:24 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="565f0000000300"], 0x7) sendfile(r0, r1, &(0x7f0000000000), 0x11) [ 720.847300] CR3 = 0x0000000000000000 [ 720.851037] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 720.866265] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 720.879019] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 11:36:24 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00', 0x2}) 11:36:24 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x3, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) [ 720.896111] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 720.915684] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 720.966538] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 11:36:24 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="1aad02090103"], 0x6) write$binfmt_aout(r1, &(0x7f0000000400), 0x20) sendfile(r0, r1, &(0x7f0000000000), 0x11) [ 721.007507] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 721.028402] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 721.051426] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 721.070735] GDTR: limit=0x00000000, base=0x0000000000000000 [ 721.096655] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 721.104667] IDTR: limit=0x00000000, base=0x0000000000000000 [ 721.136241] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 721.144242] EFER = 0x0000000000006500 PAT = 0x0007040600070406 [ 721.166219] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 721.173710] Interruptibility = 00000000 ActivityState = 00000000 [ 721.206239] *** Host State *** [ 721.209506] RIP = 0xffffffff811b3710 RSP = 0xffff888096eb78b8 [ 721.215508] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 721.236249] FSBase=00007f45eb8ae700 GSBase=ffff8880ae800000 TRBase=fffffe0000003000 [ 721.244079] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 721.259230] CR0=0000000080050033 CR3=000000002ede0000 CR4=00000000001426f0 [ 721.273799] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87201360 [ 721.293548] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 721.312713] *** Control State *** [ 721.319226] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 721.343344] EntryControls=0000d3ff ExitControls=002fefff [ 721.360182] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 721.376297] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 721.382983] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 721.406207] reason=80000021 qualification=0000000000000000 [ 721.412546] IDTVectoring: info=00000000 errcode=00000000 11:36:24 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4040aea0, &(0x7f0000000000)={0x10001, 0x9, 0x1000, 0x0, 0x1000, 0x7fff, 0x400, 0x7, 0xffff, 0x10001, 0x7, 0x299, 0x0, 0x2, 0x4, 0x80000000, 0x4a45, 0xa5, 0xa4aa}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2200000000000}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000800)="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") 11:36:24 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00', 0x2}) 11:36:24 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="565f0000000300"], 0x7) sendfile(r0, r1, &(0x7f0000000000), 0x11) 11:36:24 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x4, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:36:24 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(0x0, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="1aad02090103"], 0x6) write$binfmt_aout(r1, &(0x7f0000000400), 0x20) sendfile(r0, r1, &(0x7f0000000000), 0x11) [ 721.446246] TSC Offset = 0xfffffe7bc68a2e85 [ 721.450636] EPT pointer = 0x0000000097fc001e 11:36:24 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(0x0, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="1aad02090103"], 0x6) write$binfmt_aout(r1, &(0x7f0000000400), 0x20) sendfile(r0, r1, &(0x7f0000000000), 0x11) [ 721.607932] *** Guest State *** [ 721.611413] CR0: actual=0x0000000000050032, shadow=0x0000000000050012, gh_mask=fffffffffffffff7 [ 721.625799] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 721.634983] CR3 = 0x0000000000000000 [ 721.639332] RSP = 0x0000000000000000 RIP = 0x0000000000008000 [ 721.645391] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 721.661173] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 721.675782] CS: sel=0x3000, attr=0x08093, limit=0xffffffff, base=0x0000000000030000 [ 721.725109] DS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 721.782078] SS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 721.808452] ES: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 721.830122] FS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 721.851576] GS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 721.875929] GDTR: limit=0x00000000, base=0x0000000000000000 [ 721.901492] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 721.916338] IDTR: limit=0x00000000, base=0x0000000000000000 [ 721.936285] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 721.944399] EFER = 0x0000000000006000 PAT = 0x0007040600070406 [ 721.966285] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 721.973880] Interruptibility = 00000008 ActivityState = 00000000 [ 721.990165] *** Host State *** [ 721.993384] RIP = 0xffffffff811b3710 RSP = 0xffff888040dcf8b8 [ 722.022697] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 722.050065] FSBase=00007f45eb8ae700 GSBase=ffff8880ae800000 TRBase=fffffe0000033000 [ 722.078218] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 722.084135] CR0=0000000080050033 CR3=0000000097fc0000 CR4=00000000001426f0 [ 722.116309] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201360 [ 722.123155] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 722.146323] *** Control State *** [ 722.149919] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 722.166272] EntryControls=0000d1ff ExitControls=002fefff [ 722.171865] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 722.190035] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 722.210021] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 722.240349] reason=80000021 qualification=0000000000000000 [ 722.258937] IDTVectoring: info=00000000 errcode=00000000 [ 722.264404] TSC Offset = 0xfffffe7b4d1e87dd [ 722.293330] EPT pointer = 0x0000000032dd001e [ 722.321969] *** Guest State *** [ 722.325280] CR0: actual=0x0000000000050032, shadow=0x0000000000050012, gh_mask=fffffffffffffff7 [ 722.356379] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 722.395498] CR3 = 0x0000000000000000 [ 722.399363] RSP = 0x0000000000000000 RIP = 0x0000000000008000 [ 722.443847] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 722.456369] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 722.463159] CS: sel=0x3000, attr=0x08093, limit=0xffffffff, base=0x0000000000030000 [ 722.486897] DS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 722.506298] SS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 722.526316] ES: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 722.554832] FS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 722.583470] GS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 722.609032] GDTR: limit=0x00000000, base=0x0000000000000000 [ 722.635677] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 722.656295] IDTR: limit=0x00000000, base=0x0000000000000000 [ 722.676257] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 722.684331] EFER = 0x0000000000006000 PAT = 0x0007040600070406 [ 722.706256] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 722.713812] Interruptibility = 00000008 ActivityState = 00000000 [ 722.730070] *** Host State *** [ 722.733281] RIP = 0xffffffff811b3710 RSP = 0xffff88802c8678b8 [ 722.755591] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 722.778904] FSBase=00007f45eb88d700 GSBase=ffff8880ae800000 TRBase=fffffe0000033000 [ 722.803711] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 722.822537] CR0=0000000080050033 CR3=0000000097fc0000 CR4=00000000001426f0 [ 722.843650] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87201360 [ 722.856462] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 722.862666] *** Control State *** [ 722.876244] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 722.882995] EntryControls=0000d1ff ExitControls=002fefff [ 722.896269] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 722.916287] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 722.923072] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 722.936415] reason=80000021 qualification=0000000000000000 [ 722.942825] IDTVectoring: info=00000000 errcode=00000000 [ 722.956262] TSC Offset = 0xfffffe7aeb0799d6 [ 722.960996] EPT pointer = 0x0000000090dfa01e 11:36:26 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0xffffffffffffffff, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000000)=@req3={0x6000000, 0x3, 0x6000000, 0x3}, 0x1c) setsockopt$packet_int(r1, 0x107, 0x9, &(0x7f0000000080), 0x4) 11:36:26 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="565f0000000300"], 0x7) sendfile(r0, r1, &(0x7f0000000000), 0x11) 11:36:26 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x2}) 11:36:26 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x6, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:36:26 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(0x0, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="1aad02090103"], 0x6) write$binfmt_aout(r1, &(0x7f0000000400), 0x20) sendfile(r0, r1, &(0x7f0000000000), 0x11) 11:36:26 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SMI(r3, 0xaeb7) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) socket$vsock_dgram(0x28, 0x2, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000003c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a0000120800000088b070") 11:36:27 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x2}) 11:36:27 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="1aad02090103"], 0x6) write$binfmt_aout(r1, &(0x7f0000000400), 0x20) sendfile(r0, r1, &(0x7f0000000000), 0x11) [ 723.968141] *** Guest State *** 11:36:27 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x7, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:36:27 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x4000, 0x0) r1 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x3, 0x602000) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000140)=0x2) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000100)=0x2, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000000)=@req3={0x6000000, 0x3, 0x6000000, 0x3}, 0x1c) setsockopt$packet_int(r2, 0x107, 0x9, &(0x7f0000000080), 0x4) 11:36:27 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(0x0, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="565f0000000300"], 0x7) sendfile(r0, r1, &(0x7f0000000000), 0x11) [ 723.992291] CR0: actual=0x0000000000050032, shadow=0x0000000000050012, gh_mask=fffffffffffffff7 [ 724.027888] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 724.064589] CR3 = 0x0000000000000000 [ 724.080928] RSP = 0x0000000000000000 RIP = 0x0000000000008000 11:36:27 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x8, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:36:27 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="1aad02090103"], 0x6) write$binfmt_aout(r1, &(0x7f0000000400), 0x20) sendfile(r0, r1, &(0x7f0000000000), 0x11) [ 724.108794] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 724.133540] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 11:36:27 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00', 0x2}) 11:36:27 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(0x0, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="565f0000000300"], 0x7) sendfile(r0, r1, &(0x7f0000000000), 0x11) [ 724.151962] CS: sel=0x3000, attr=0x08093, limit=0xffffffff, base=0x0000000000030000 [ 724.170237] DS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 11:36:27 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0xb, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) [ 724.225168] SS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 724.255195] ES: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 11:36:27 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="1aad02090103"], 0x6) write$binfmt_aout(r1, &(0x7f0000000400), 0x20) sendfile(r0, r1, &(0x7f0000000000), 0x11) [ 724.278957] FS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 724.299849] GS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 724.317467] GDTR: limit=0x00000000, base=0x0000000000000000 [ 724.339362] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 724.365794] IDTR: limit=0x00000000, base=0x0000000000000000 [ 724.391952] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 724.417571] EFER = 0x0000000000006000 PAT = 0x0007040600070406 [ 724.431901] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 724.456271] Interruptibility = 00000008 ActivityState = 00000000 [ 724.462610] *** Host State *** [ 724.476272] RIP = 0xffffffff811b3710 RSP = 0xffff8880299cf8b8 [ 724.496271] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 724.502790] FSBase=00007f45eb8ae700 GSBase=ffff8880ae800000 TRBase=fffffe0000003000 [ 724.526300] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 724.532303] CR0=0000000080050033 CR3=0000000037a59000 CR4=00000000001426f0 [ 724.546250] net_ratelimit: 18 callbacks suppressed [ 724.546258] protocol 88fb is buggy, dev hsr_slave_0 [ 724.546432] protocol 88fb is buggy, dev hsr_slave_1 [ 724.551299] protocol 88fb is buggy, dev hsr_slave_1 [ 724.556439] protocol 88fb is buggy, dev hsr_slave_0 [ 724.561338] protocol 88fb is buggy, dev hsr_slave_0 [ 724.566326] protocol 88fb is buggy, dev hsr_slave_1 [ 724.571338] protocol 88fb is buggy, dev hsr_slave_1 [ 724.576813] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201360 [ 724.596261] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 724.616262] *** Control State *** [ 724.619831] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 724.636258] EntryControls=0000d1ff ExitControls=002fefff [ 724.641825] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 724.666266] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 724.673055] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 724.696267] reason=80000021 qualification=0000000000000000 [ 724.702713] IDTVectoring: info=00000000 errcode=00000000 [ 724.716259] TSC Offset = 0xfffffe7a0edf3bdd [ 724.736262] EPT pointer = 0x00000000379a201e 11:36:27 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x200, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_GET_DEBUGREGS(r0, 0x8080aea1, &(0x7f0000000280)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$PIO_SCRNMAP(r3, 0x4b41, &(0x7f0000000240)="99bd910c2a0caf772df548750129f9a09b1bc6b67013df69dd712fe50d8b4f2d310d8c4a4a96284692") ioctl(r0, 0x1000108912, &(0x7f00000000c0)="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") ioctl$CAPI_NCCI_OPENCOUNT(r3, 0x80044326, &(0x7f0000000300)=0x5ad0e3ec) 11:36:27 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x00', 0x2}) 11:36:27 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0) write$binfmt_aout(r1, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000000400), 0x20) sendfile(r0, r1, &(0x7f0000000000), 0x11) 11:36:27 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(0x0, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="565f0000000300"], 0x7) sendfile(r0, r1, &(0x7f0000000000), 0x11) [ 725.516257] protocol 88fb is buggy, dev hsr_slave_0 [ 725.521370] protocol 88fb is buggy, dev hsr_slave_1 [ 725.666322] protocol 88fb is buggy, dev hsr_slave_0 11:36:29 executing program 0: socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setxattr$security_smack_entry(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='security.SMACK64MMAP\x00', &(0x7f0000000280)='/dev/zero\x00', 0xa, 0x2) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$VIDIOC_STREAMON(r1, 0x40045612, &(0x7f00000002c0)=0x9) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000000)=@req3={0x6000000, 0x3, 0x6000000, 0x3}, 0x1c) setsockopt$packet_int(r2, 0x107, 0x9, &(0x7f0000000080), 0x4) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x82, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000100)={0x0, 0xe, "8bf3f12428ec1dcc7cb2bef7bb32"}, &(0x7f0000000140)=0x16) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000180)={r4, 0x1000, 0x30}, &(0x7f00000001c0)=0xc) 11:36:29 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0xd, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:36:29 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="565f0000000300"], 0x7) sendfile(r0, r1, &(0x7f0000000000), 0x11) 11:36:29 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0) write$binfmt_aout(r1, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000000400), 0x20) sendfile(r0, r1, &(0x7f0000000000), 0x11) 11:36:29 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03', 0x2}) 11:36:29 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SMI(r3, 0xaeb7) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x8) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f00000000c0)=0x1ff, 0x8) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a0000120800000088b070") 11:36:29 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe8\x03', 0x2}) [ 726.592123] *** Guest State *** [ 726.605510] CR0: actual=0x0000000000050032, shadow=0x0000000000050012, gh_mask=fffffffffffffff7 11:36:29 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x11, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:36:29 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="565f0000000300"], 0x7) sendfile(r0, r1, &(0x7f0000000000), 0x11) 11:36:29 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0) write$binfmt_aout(r1, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000000400), 0x20) sendfile(r0, r1, &(0x7f0000000000), 0x11) [ 726.634093] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 726.681672] CR3 = 0x0000000000000000 [ 726.693802] RSP = 0x0000000000000000 RIP = 0x0000000000008000 11:36:29 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x14, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) [ 726.728177] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 726.755411] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 11:36:29 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[], 0x0) write$binfmt_aout(r1, &(0x7f0000000400), 0x20) sendfile(r0, r1, &(0x7f0000000000), 0x11) [ 726.782492] CS: sel=0x3000, attr=0x08093, limit=0xffffffff, base=0x0000000000030000 [ 726.805965] DS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 726.830843] SS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 726.858657] ES: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 726.875938] FS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 726.891355] GS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 726.900477] GDTR: limit=0x00000000, base=0x0000000000000000 [ 726.908741] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 726.916945] IDTR: limit=0x00000000, base=0x0000000000000000 [ 726.925102] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 726.933348] EFER = 0x0000000000006000 PAT = 0x0007040600070406 [ 726.940047] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 726.947701] Interruptibility = 00000008 ActivityState = 00000000 [ 726.954089] *** Host State *** [ 726.957533] RIP = 0xffffffff811b3710 RSP = 0xffff88808db578b8 [ 726.963696] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 726.970325] FSBase=00007f45eb8ae700 GSBase=ffff8880ae800000 TRBase=fffffe0000003000 [ 726.978359] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 726.984416] CR0=0000000080050033 CR3=000000003c7b6000 CR4=00000000001426f0 [ 726.991648] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201360 [ 727.006275] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 727.021353] *** Control State *** [ 727.024909] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 727.043960] EntryControls=0000d1ff ExitControls=002fefff [ 727.056282] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 727.069722] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 727.088842] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 727.108852] reason=80000021 qualification=0000000000000000 [ 727.128784] IDTVectoring: info=00000000 errcode=00000000 [ 727.134341] TSC Offset = 0xfffffe78a2a9daab [ 727.158791] EPT pointer = 0x000000002837201e 11:36:31 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000000)=@req3={0x6000000, 0x3, 0x6000000, 0x3}, 0x1c) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x100, 0x0) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000100)={0x1, 0x3}) socket$rds(0x15, 0x5, 0x0) write$P9_RXATTRCREATE(r2, &(0x7f00000000c0)={0x7, 0x21, 0x1}, 0x7) pkey_alloc(0x0, 0x3) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000240)={{{@in6=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f00000001c0)=0xe8) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = getegid() stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x9, &(0x7f00000004c0)=[0xee01, 0x0, 0xee00, 0xee00, 0x0, 0xee00, 0xffffffffffffffff, 0x0, 0xee01]) stat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = getegid() lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f0000000740)={{}, {0x1, 0x6}, [{0x2, 0x1, r3}, {0x2, 0x6, r4}], {0x4, 0x4}, [{0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8, 0x4, r7}, {0x8, 0x4, r8}, {0x8, 0x2, r9}, {0x8, 0x0, r10}, {0x8, 0x2, r11}], {0x10, 0x1}, {0x20, 0x1}}, 0x6c, 0x3) setsockopt$packet_int(r1, 0x107, 0x9, &(0x7f0000000080), 0x4) 11:36:31 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@', 0x2}) 11:36:31 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="565f0000000300"], 0x7) sendfile(r0, r1, &(0x7f0000000000), 0x11) 11:36:31 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[], 0x0) write$binfmt_aout(r1, &(0x7f0000000400), 0x20) sendfile(r0, r1, &(0x7f0000000000), 0x11) 11:36:31 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x1c, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:36:31 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SMI(r3, 0xaeb7) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x240002, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffff9c, 0x84, 0x72, &(0x7f00000000c0)={0x0, 0x7fffffff}, &(0x7f0000000100)=0xc) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000140)={0x2, 0x20c, 0x8, 0x4, r5}, &(0x7f0000000180)=0x10) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a0000120800000088b070") 11:36:31 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0) write$binfmt_aout(r1, 0x0, 0x0) sendfile(r0, r1, &(0x7f0000000000), 0x11) 11:36:31 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x21, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) [ 728.211422] *** Guest State *** [ 728.214894] CR0: actual=0x0000000000050032, shadow=0x0000000000050012, gh_mask=fffffffffffffff7 11:36:31 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[], 0x0) write$binfmt_aout(r1, &(0x7f0000000400), 0x20) sendfile(r0, r1, &(0x7f0000000000), 0x11) 11:36:31 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`', 0x2}) [ 728.255407] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 728.278414] CR3 = 0x0000000000000000 [ 728.296506] RSP = 0x0000000000000000 RIP = 0x0000000000008000 [ 728.310676] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 728.333301] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 11:36:31 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0) write$binfmt_aout(r1, 0x0, 0x0) sendfile(r0, r1, &(0x7f0000000000), 0x11) [ 728.356321] CS: sel=0x3000, attr=0x08093, limit=0xffffffff, base=0x0000000000030000 11:36:31 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x0) write$binfmt_aout(r1, &(0x7f0000000400), 0x20) sendfile(r0, r1, &(0x7f0000000000), 0x11) [ 728.390818] DS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 728.415665] SS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 728.433030] ES: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 728.450360] FS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 728.467972] GS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 728.495203] GDTR: limit=0x00000000, base=0x0000000000000000 [ 728.520470] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 728.538642] IDTR: limit=0x00000000, base=0x0000000000000000 [ 728.555664] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 728.571719] EFER = 0x0000000000006000 PAT = 0x0007040600070406 [ 728.586125] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 728.602721] Interruptibility = 00000008 ActivityState = 00000000 [ 728.615879] *** Host State *** [ 728.622642] RIP = 0xffffffff811b3710 RSP = 0xffff888040a5f8b8 [ 728.635601] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 728.648861] FSBase=00007f45eb8ae700 GSBase=ffff8880ae800000 TRBase=fffffe0000003000 [ 728.664634] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 728.677328] CR0=0000000080050033 CR3=0000000047241000 CR4=00000000001426f0 [ 728.688270] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87201360 [ 728.694960] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 728.717168] *** Control State *** [ 728.721035] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 728.733439] EntryControls=0000d1ff ExitControls=002fefff [ 728.744626] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 728.760839] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 728.780018] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 728.796517] reason=80000021 qualification=0000000000000000 [ 728.804129] IDTVectoring: info=00000000 errcode=00000000 [ 728.815317] TSC Offset = 0xfffffe77c6d4665c [ 728.825326] EPT pointer = 0x00000000944e301e [ 728.852085] *** Guest State *** [ 728.855422] CR0: actual=0x000000008005003f, shadow=0x000000008005001f, gh_mask=fffffffffffffff7 [ 728.866508] CR4: actual=0x0000000000002068, shadow=0x0000000000000028, gh_mask=ffffffffffffe871 [ 728.883345] CR3 = 0x0000000000000000 [ 728.887187] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 728.930810] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 728.946466] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 728.958894] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 728.976262] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 728.996578] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 729.015898] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 729.034138] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 729.047830] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 729.060338] GDTR: limit=0x00000000, base=0x0000000000000000 [ 729.072888] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 729.085438] IDTR: limit=0x00000000, base=0x0000000000000000 [ 729.098092] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 729.109523] EFER = 0x0000000000006500 PAT = 0x0007040600070406 [ 729.116020] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 729.131389] Interruptibility = 00000000 ActivityState = 00000000 [ 729.142194] *** Host State *** [ 729.145476] RIP = 0xffffffff811b3710 RSP = 0xffff888056c378b8 [ 729.157213] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 729.168160] FSBase=00007f45eb86c700 GSBase=ffff8880ae900000 TRBase=fffffe0000003000 [ 729.181604] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 729.187661] CR0=0000000080050033 CR3=0000000047241000 CR4=00000000001426e0 [ 729.202581] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201360 [ 729.211242] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 729.217470] *** Control State *** [ 729.221057] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 729.227874] EntryControls=0000d3ff ExitControls=002fefff [ 729.233451] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 729.240596] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 729.247759] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 729.254471] reason=80000021 qualification=0000000000000000 [ 729.260971] IDTVectoring: info=00000000 errcode=00000000 [ 729.266606] TSC Offset = 0xfffffe776af2b0dd [ 729.271062] EPT pointer = 0x0000000059d9801e [ 729.666305] net_ratelimit: 19 callbacks suppressed [ 729.666314] protocol 88fb is buggy, dev hsr_slave_0 [ 729.676388] protocol 88fb is buggy, dev hsr_slave_1 [ 729.826312] protocol 88fb is buggy, dev hsr_slave_0 [ 729.831426] protocol 88fb is buggy, dev hsr_slave_1 [ 730.786254] protocol 88fb is buggy, dev hsr_slave_0 [ 730.786562] protocol 88fb is buggy, dev hsr_slave_0 [ 730.791420] protocol 88fb is buggy, dev hsr_slave_1 [ 730.796430] protocol 88fb is buggy, dev hsr_slave_1 [ 730.801538] protocol 88fb is buggy, dev hsr_slave_0 [ 730.806535] protocol 88fb is buggy, dev hsr_slave_0 11:36:34 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="2321202e2f66696c6530202f5c202073657c696e7578656d312eebf939697ac0fcb4626f2173656c662d766d6e6574312a2d70726f63776c616e312d5e2020770a3d74218d759ab81af927372b21e4364a9000c0960c5566eee9"], 0x4f) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000000)=@req3={0x6000000, 0x3, 0x6000000, 0x3}, 0x1c) setsockopt$packet_int(r2, 0x107, 0x9, &(0x7f0000000080), 0x4) 11:36:34 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x28, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:36:34 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\xe8', 0x2}) 11:36:34 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0) write$binfmt_aout(r1, 0x0, 0x0) sendfile(r0, r1, &(0x7f0000000000), 0x11) 11:36:34 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x0) write$binfmt_aout(r1, &(0x7f0000000400), 0x20) sendfile(r0, r1, &(0x7f0000000000), 0x11) 11:36:34 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SMI(r3, 0xaeb7) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_PPC_GET_PVINFO(r2, 0x4080aea1, &(0x7f0000000000)=""/60) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a0000120800000088b070") 11:36:34 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x0) write$binfmt_aout(r1, &(0x7f0000000400), 0x20) sendfile(r0, r1, &(0x7f0000000000), 0x11) 11:36:34 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[], 0x0) sendfile(r0, r1, &(0x7f0000000000), 0x11) 11:36:34 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x29, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) [ 730.974814] *** Guest State *** [ 730.988567] CR0: actual=0x0000000000050032, shadow=0x0000000000050012, gh_mask=fffffffffffffff7 11:36:34 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00', 0x2}) [ 731.022467] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 731.086371] CR3 = 0x0000000000000000 [ 731.100049] RSP = 0x0000000000000000 RIP = 0x0000000000008000 11:36:34 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="1aad02"], 0x3) write$binfmt_aout(r1, &(0x7f0000000400), 0x20) sendfile(r0, r1, &(0x7f0000000000), 0x11) 11:36:34 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x2b, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) [ 731.138366] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 731.157920] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 731.189630] CS: sel=0x3000, attr=0x08093, limit=0xffffffff, base=0x0000000000030000 [ 731.212045] DS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 731.239545] SS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 731.255552] ES: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 731.273306] FS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 731.283118] GS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 731.294832] GDTR: limit=0x00000000, base=0x0000000000000000 [ 731.304773] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 731.318450] IDTR: limit=0x00000000, base=0x0000000000000000 [ 731.331820] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 731.343067] EFER = 0x0000000000006000 PAT = 0x0007040600070406 [ 731.352254] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 731.362468] Interruptibility = 00000008 ActivityState = 00000000 [ 731.371720] *** Host State *** [ 731.375002] RIP = 0xffffffff811b3710 RSP = 0xffff888032e178b8 [ 731.383781] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 731.393171] FSBase=00007f45eb8ae700 GSBase=ffff8880ae800000 TRBase=fffffe0000003000 [ 731.403695] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 731.412389] CR0=0000000080050033 CR3=0000000032b16000 CR4=00000000001426f0 [ 731.422180] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201360 [ 731.434592] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 731.443427] *** Control State *** [ 731.449890] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 731.459688] EntryControls=0000d1ff ExitControls=002fefff [ 731.465231] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 731.475603] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 731.485576] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 731.495429] reason=80000021 qualification=0000000000000000 [ 731.504679] IDTVectoring: info=00000000 errcode=00000000 [ 731.513043] TSC Offset = 0xfffffe764a1b59f8 [ 731.520814] EPT pointer = 0x00000000527c201e [ 731.550425] *** Guest State *** [ 731.553753] CR0: actual=0x000000008005003f, shadow=0x000000008005001f, gh_mask=fffffffffffffff7 [ 731.581845] CR4: actual=0x0000000000002068, shadow=0x0000000000000028, gh_mask=ffffffffffffe871 [ 731.604537] CR3 = 0x0000000000000000 [ 731.614083] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 731.630231] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 731.645441] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 731.662481] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 731.681962] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 731.702528] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 731.720832] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 731.740267] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 731.760442] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 731.776225] GDTR: limit=0x00000000, base=0x0000000000000000 [ 731.787845] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 731.795946] IDTR: limit=0x00000000, base=0x0000000000000000 [ 731.804184] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 731.812397] EFER = 0x0000000000006500 PAT = 0x0007040600070406 [ 731.819024] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 731.826841] Interruptibility = 00000000 ActivityState = 00000000 [ 731.833606] *** Host State *** [ 731.837198] RIP = 0xffffffff811b3710 RSP = 0xffff8880a0abf8b8 [ 731.843274] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 731.850095] FSBase=00007f45eb86c700 GSBase=ffff8880ae900000 TRBase=fffffe0000033000 [ 731.858259] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 731.864241] CR0=0000000080050033 CR3=0000000032b16000 CR4=00000000001426e0 [ 731.882590] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87201360 [ 731.897637] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 731.903718] *** Control State *** [ 731.921269] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 731.936233] EntryControls=0000d3ff ExitControls=002fefff [ 731.949864] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 731.966229] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 731.977990] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 731.984676] reason=80000021 qualification=0000000000000000 [ 731.991535] IDTVectoring: info=00000000 errcode=00000000 [ 731.997904] TSC Offset = 0xfffffe75f9f06719 [ 732.002314] EPT pointer = 0x000000005508201e 11:36:35 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) fdatasync(r0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000000)=@req3={0x6000000, 0x3, 0x6000000, 0x3}, 0x1c) setsockopt$packet_int(r1, 0x107, 0x9, &(0x7f0000000080), 0x4) 11:36:35 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[], 0x0) sendfile(r0, r1, &(0x7f0000000000), 0x11) 11:36:35 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00', 0x2}) 11:36:35 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="1aad02"], 0x3) write$binfmt_aout(r1, &(0x7f0000000400), 0x20) sendfile(r0, r1, &(0x7f0000000000), 0x11) 11:36:35 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x2c, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:36:35 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SMI(r3, 0xaeb7) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000003c0)={{}, {0x0, 0x0, 0x0, 0x0, 0x1}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x3ff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000007c0)={0x2710, 0x800007, 0x10000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) r4 = open(&(0x7f0000000000)='./file0\x00', 0x800, 0x40) sendmsg$kcm(r4, &(0x7f0000000740)={&(0x7f00000000c0)=@sco={0x1f, {0xffffffff, 0x7f, 0x2c3c614e, 0x8000, 0x1ff, 0x2}}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000140)="fa1d6fc5ac3155aaa04955bd0c89f2c3db24d3d707af2958f38d1ee32c2ce199f0bbbaee876faafc4674c9f5edf315356672ab288ec911ff5462d934837d8949f1b6aa4730cf5da6c32b5e2f6640bb6d3beb84958b5561a29f52ab30bb61c6c557562515e47ce8360b933ebcb38d1c307a3dd8c75b9431c988fbfd9415a8e7b29ea99c0bcde5bcc754eb48343fdc3ae18398b349d3bbfd5b9e61b85837a9c018a7d296848ca0be5cd9944905ad468e24a2e9da057155e340496d6050949d7013ce3a", 0xc2}, {&(0x7f0000000240)="86651eac4a39d2c65142146c42441b2a6780d1cff37e4ebb45125a7c3e1efb21cec4d5c01a", 0x25}, {&(0x7f0000000280)="3ceae5cf766a40bf8cf8316f1aebb99c8e0b41444ba4fde0237bb13b718af3df752aaf9302a013dfaebbd3fe8a6920ef3c4cbbefb07a8d3d1d6485321f8c840196d5aa105383fe91639844bad881f3019c6b422baee7ad52876aac1b1b18494763e666bb219cb7d280fc8eb45075a8c68f874e1f37d97f686c81f0c665358c64dd4969ade8ef1480febe69170df178330276b7e0c4cc16e7ce8707285f46ff74fd7a5774", 0xa4}, {&(0x7f0000000340)="bf518ccc8a307377f449e94dfdcb49788b5922658e2170871980fb1390e2847b95def33c0a49a693ea1b598abf6103a9abf448dda7faed812e2f63b7fdb9c5293f06884136b36617c024456aaf96f42e0edb314b6a6b33eb9a0a9f061a23468aa5b0625ca4becbea035951accc2ad122b8af4f63680cf40a69be3a8534", 0x7d}], 0x4, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x1f0}, 0x40) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a0000120800000088b070") 11:36:35 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x2f, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) [ 732.607811] *** Guest State *** [ 732.611209] CR0: actual=0x0000000000050032, shadow=0x0000000000050012, gh_mask=fffffffffffffff7 [ 732.636921] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 11:36:35 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="1aad02"], 0x3) write$binfmt_aout(r1, &(0x7f0000000400), 0x20) sendfile(r0, r1, &(0x7f0000000000), 0x11) 11:36:35 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[], 0x0) sendfile(r0, r1, &(0x7f0000000000), 0x11) 11:36:35 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00', 0x2}) [ 732.666804] CR3 = 0x0000000000000000 [ 732.687706] RSP = 0x0000000000000000 RIP = 0x0000000000008000 [ 732.716352] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 732.756342] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 732.776407] CS: sel=0x3000, attr=0x08093, limit=0xffffffff, base=0x0000000000030000 [ 732.797424] DS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 11:36:35 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00', 0x2}) 11:36:35 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x3a, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) [ 732.819643] SS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 732.839970] ES: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 732.870640] FS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 732.899668] GS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 732.957793] GDTR: limit=0x00000000, base=0x0000000000000000 [ 732.983068] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 732.995302] IDTR: limit=0x00000000, base=0x0000000000000000 [ 733.010216] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 733.020596] EFER = 0x0000000000006000 PAT = 0x0007040600070406 [ 733.031747] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 733.041478] Interruptibility = 00000008 ActivityState = 00000000 [ 733.051657] *** Host State *** [ 733.054943] RIP = 0xffffffff811b3710 RSP = 0xffff888054a8f8b8 [ 733.062992] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 733.073271] FSBase=00007f45eb8ae700 GSBase=ffff8880ae900000 TRBase=fffffe0000003000 [ 733.083078] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 733.092820] CR0=0000000080050033 CR3=0000000055c5a000 CR4=00000000001426e0 [ 733.101997] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201360 [ 733.112447] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 733.120553] *** Control State *** [ 733.124098] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 733.134671] EntryControls=0000d1ff ExitControls=002fefff [ 733.142261] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 733.152986] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 733.161713] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 733.181933] reason=80000021 qualification=0000000000000000 [ 733.188321] IDTVectoring: info=00000000 errcode=00000000 [ 733.203976] TSC Offset = 0xfffffe7569d7baa0 [ 733.208374] EPT pointer = 0x000000003009701e 11:36:37 executing program 0: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x100, 0x0) read$FUSE(r0, &(0x7f0000000240), 0x1000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$packet(0x11, 0x2, 0x300) write$binfmt_script(r2, &(0x7f0000001300)={'#! ', './file0', [{0x20, '/proc/capi/capi20ncci\x00'}], 0xa, "272e459f1c8637a1dcd4baea79736c9e2e5d50fc1a7c14399e806442a22a8092944f3391ec0c955eb7d4b9147aefffa6716557cbe08021f17338e406b3fbe6b46f38a9a2bf781ac4d610f28f22a5578f744d8810232aace79fbb7ae88edca0f38cda"}, 0x84) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000000)=@req3={0x6000000, 0x3, 0x6000000, 0x3}, 0x1c) setsockopt$packet_int(r2, 0x107, 0x9, &(0x7f0000000080), 0x4) 11:36:37 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="1aad020901"], 0x5) write$binfmt_aout(r1, &(0x7f0000000400), 0x20) sendfile(r0, r1, &(0x7f0000000000), 0x11) 11:36:37 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x0) sendfile(r0, r1, &(0x7f0000000000), 0x11) 11:36:37 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x3c, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:36:37 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00', 0x2}) 11:36:37 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SMI(r3, 0xaeb7) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) r4 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$KDGKBTYPE(r4, 0x4b33, &(0x7f00000000c0)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a0000120800000088b070") 11:36:37 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x0) sendfile(r0, r1, &(0x7f0000000000), 0x11) 11:36:37 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0xf0, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:36:37 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00', 0x2}) 11:36:37 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="1aad020901"], 0x5) write$binfmt_aout(r1, &(0x7f0000000400), 0x20) sendfile(r0, r1, &(0x7f0000000000), 0x11) 11:36:37 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x132, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:36:37 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SMI(r3, 0xaeb7) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_PPC_ALLOCATE_HTAB(r2, 0xc004aea7, &(0x7f0000000000)=0x4) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {0x200000000}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x80, 0x0) ioctl$TIOCCBRK(r4, 0x5428) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a0000120800000088b070") [ 734.763058] *** Guest State *** [ 734.772176] CR0: actual=0x0000000000050032, shadow=0x0000000000050012, gh_mask=fffffffffffffff7 [ 734.799400] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 734.824818] CR3 = 0x0000000000000000 [ 734.844576] RSP = 0x0000000000000000 RIP = 0x0000000000008000 [ 734.856614] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 734.862717] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 734.874516] CS: sel=0x3000, attr=0x08093, limit=0xffffffff, base=0x0000000000030000 [ 734.883894] DS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 734.897823] SS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 734.905915] ES: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 734.920345] FS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 734.930495] GS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 734.942552] GDTR: limit=0x00000000, base=0x0000000200000000 [ 734.950673] net_ratelimit: 18 callbacks suppressed [ 734.950680] protocol 88fb is buggy, dev hsr_slave_0 [ 734.950744] protocol 88fb is buggy, dev hsr_slave_1 [ 734.950830] protocol 88fb is buggy, dev hsr_slave_0 [ 734.951026] protocol 88fb is buggy, dev hsr_slave_1 [ 734.956261] protocol 88fb is buggy, dev hsr_slave_0 [ 734.967812] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 734.971384] protocol 88fb is buggy, dev hsr_slave_1 [ 734.980097] IDTR: limit=0x00000000, base=0x0000000000000000 [ 734.981514] protocol 88fb is buggy, dev hsr_slave_0 [ 734.991749] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 734.994554] protocol 88fb is buggy, dev hsr_slave_1 [ 735.025556] EFER = 0x0000000000006000 PAT = 0x0007040600070406 [ 735.047208] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 735.067909] Interruptibility = 00000008 ActivityState = 00000000 [ 735.085775] *** Host State *** [ 735.092646] RIP = 0xffffffff811b3710 RSP = 0xffff88802a4bf8b8 [ 735.111732] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 735.131047] FSBase=00007f45eb8ae700 GSBase=ffff8880ae800000 TRBase=fffffe0000003000 [ 735.153766] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 735.174400] CR0=0000000080050033 CR3=00000000489a9000 CR4=00000000001426f0 [ 735.200319] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201360 [ 735.223364] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 735.240017] *** Control State *** [ 735.243503] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 735.268450] EntryControls=0000d1ff ExitControls=002fefff [ 735.273950] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 735.299857] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 735.308679] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 735.315273] reason=80000021 qualification=0000000000000000 [ 735.340301] IDTVectoring: info=00000000 errcode=00000000 [ 735.345768] TSC Offset = 0xfffffe74448a229e [ 735.360075] EPT pointer = 0x000000003049801e [ 735.906292] protocol 88fb is buggy, dev hsr_slave_0 [ 735.911438] protocol 88fb is buggy, dev hsr_slave_1 11:36:40 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$packet(0x11, 0x3, 0x300) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@local, @in6=@dev}}, {{}, 0x0, @in=@multicast2}}, &(0x7f0000000040)=0xe8) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000000)=@req3={0x6000000, 0x3, 0x6000000, 0x3}, 0xffffffffffffff42) setsockopt$packet_int(r2, 0x107, 0x9, &(0x7f0000000080), 0x4) 11:36:40 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x0) sendfile(r0, r1, &(0x7f0000000000), 0x11) 11:36:40 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="1aad020901"], 0x5) write$binfmt_aout(r1, &(0x7f0000000400), 0x20) sendfile(r0, r1, &(0x7f0000000000), 0x11) 11:36:40 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff', 0x2}) 11:36:40 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x300, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:36:40 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SMI(r3, 0xaeb7) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a0000120800000088b070") fstatfs(r2, &(0x7f00000000c0)=""/228) 11:36:40 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="1aad02090103"], 0x6) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000400), 0x20) sendfile(r0, r1, &(0x7f0000000000), 0x11) 11:36:40 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x543, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:36:40 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB='V_\x00\x00'], 0x4) sendfile(r0, r1, &(0x7f0000000000), 0x11) [ 737.303834] *** Guest State *** 11:36:40 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00', 0x2}) 11:36:40 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000000)=@req3={0x6000000, 0x3, 0x6000000, 0x3}, 0x1c) setsockopt$packet_int(r1, 0x107, 0x9, &(0x7f0000000080), 0x4) r2 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x1a, 0x10000) ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f00000000c0)={0x0, 0x0, [0x8000, 0x5, 0x7, 0xffffffff7fffffff]}) [ 737.346330] CR0: actual=0x0000000000050032, shadow=0x0000000000050012, gh_mask=fffffffffffffff7 [ 737.380534] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 11:36:40 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB='V_\x00\x00'], 0x4) sendfile(r0, r1, &(0x7f0000000000), 0x11) 11:36:40 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="1aad02090103"], 0x6) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000400), 0x20) sendfile(r0, r1, &(0x7f0000000000), 0x11) 11:36:40 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x600, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) [ 737.455506] CR3 = 0x0000000000000000 [ 737.470974] RSP = 0x0000000000000000 RIP = 0x0000000000008000 [ 737.483393] RFLAGS=0x00000002 DR7 = 0x0000000000000400 11:36:40 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff', 0x2}) 11:36:40 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB='V_\x00\x00'], 0x4) sendfile(r0, r1, &(0x7f0000000000), 0x11) [ 737.520537] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 737.541640] CS: sel=0x3000, attr=0x08093, limit=0xffffffff, base=0x0000000000030000 [ 737.579780] DS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 11:36:40 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x608, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) [ 737.620233] SS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 737.666472] ES: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 737.680480] FS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 737.705711] GS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 737.746855] GDTR: limit=0x00000000, base=0x0000000000000000 [ 737.755033] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 737.771253] IDTR: limit=0x00000000, base=0x0000000000000000 [ 737.788402] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 737.804387] EFER = 0x0000000000006000 PAT = 0x0007040600070406 [ 737.822775] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 737.862016] Interruptibility = 00000008 ActivityState = 00000000 [ 737.868334] *** Host State *** [ 737.871541] RIP = 0xffffffff811b3710 RSP = 0xffff88808a6c78b8 [ 737.901813] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 737.936331] FSBase=00007f45eb8ae700 GSBase=ffff8880ae900000 TRBase=fffffe0000003000 [ 737.947802] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 737.959550] CR0=0000000080050033 CR3=00000000a064d000 CR4=00000000001426e0 [ 737.974541] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201360 [ 737.989191] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 738.002108] *** Control State *** [ 738.010153] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 738.024841] EntryControls=0000d1ff ExitControls=002fefff [ 738.036240] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 738.056073] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 738.075224] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 738.095384] reason=80000021 qualification=0000000000000000 [ 738.116369] IDTVectoring: info=00000000 errcode=00000000 [ 738.134364] TSC Offset = 0xfffffe72e884dfa6 [ 738.139945] *** Guest State *** [ 738.143256] CR0: actual=0x000000008005003f, shadow=0x000000008005001f, gh_mask=fffffffffffffff7 [ 738.147751] EPT pointer = 0x000000009173601e [ 738.237136] CR4: actual=0x0000000000002068, shadow=0x0000000000000028, gh_mask=ffffffffffffe871 [ 738.246012] CR3 = 0x0000000000000000 [ 738.266388] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 738.276554] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 738.292624] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 738.311715] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 738.321019] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 738.334750] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 738.342867] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 738.376152] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 738.384241] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 738.399676] GDTR: limit=0x00000000, base=0x0000000000000000 [ 738.429178] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 738.449013] IDTR: limit=0x00000000, base=0x0000000000000000 [ 738.466473] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 738.477935] EFER = 0x0000000000006500 PAT = 0x0007040600070406 [ 738.491243] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 738.506612] Interruptibility = 00000000 ActivityState = 00000000 [ 738.519700] *** Host State *** [ 738.526539] RIP = 0xffffffff811b3710 RSP = 0xffff88803f7c78b8 [ 738.539288] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 738.553600] FSBase=00007f45eb84b700 GSBase=ffff8880ae900000 TRBase=fffffe0000003000 [ 738.569304] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 738.582119] CR0=0000000080050033 CR3=00000000a064d000 CR4=00000000001426e0 [ 738.601951] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87201360 [ 738.621914] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 738.641860] *** Control State *** [ 738.645325] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 738.666406] EntryControls=0000d3ff ExitControls=002fefff [ 738.671996] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 738.687034] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 738.700452] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 738.714956] reason=80000021 qualification=0000000000000000 [ 738.728093] IDTVectoring: info=00000000 errcode=00000000 [ 738.739188] TSC Offset = 0xfffffe7277d2d29f [ 738.749164] EPT pointer = 0x0000000041c1201e 11:36:41 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="1aad02090103"], 0x6) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000400), 0x20) sendfile(r0, r1, &(0x7f0000000000), 0x11) 11:36:41 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="565f00000003"], 0x6) sendfile(r0, r1, &(0x7f0000000000), 0x11) 11:36:41 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff', 0x2}) 11:36:41 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x10000, 0x0) ioctl$VIDIOC_G_ENC_INDEX(r4, 0x8818564c, &(0x7f0000000500)) ioctl$KVM_SMI(r3, 0xaeb7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x1000000001, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f0000000040)={'bridge_slave_0\x00', @random="01003a1e2410"}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a0000120800000088b070") 11:36:41 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x689, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) [ 738.983282] *** Guest State *** [ 738.986744] CR0: actual=0x0000000000050032, shadow=0x0000000000050012, gh_mask=fffffffffffffff7 [ 738.995593] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 739.010442] CR3 = 0x0000000000000000 [ 739.014196] RSP = 0x0000000000000000 RIP = 0x0000000000008000 [ 739.021303] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 739.032878] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 739.040887] CS: sel=0x3000, attr=0x08093, limit=0xffffffff, base=0x0000000000030000 [ 739.054311] DS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 739.063485] SS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 739.076117] ES: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 739.085136] FS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 739.098846] GS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 739.110746] GDTR: limit=0x00000000, base=0x0000000000000000 [ 739.121605] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 739.149246] IDTR: limit=0x00000000, base=0x0000000000000000 [ 739.160125] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 739.179868] EFER = 0x0000000000006000 PAT = 0x0007040600070406 11:36:42 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)=0x0) sched_setscheduler(r3, 0x2, &(0x7f00000000c0)=0x7ff) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000000)=@req3={0x6000000, 0x3, 0x6000000, 0x3}, 0x1c) setsockopt$packet_int(r2, 0x107, 0x9, &(0x7f0000000080), 0x4) 11:36:42 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff', 0x2}) 11:36:42 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x700, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:36:42 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="565f00000003"], 0x6) sendfile(r0, r1, &(0x7f0000000000), 0x11) 11:36:42 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="1aad02090103"], 0x6) write$binfmt_aout(r1, 0x0, 0x0) sendfile(r0, r1, &(0x7f0000000000), 0x11) [ 739.192835] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 739.203240] Interruptibility = 00000008 ActivityState = 00000000 [ 739.212360] *** Host State *** [ 739.215637] RIP = 0xffffffff811b3710 RSP = 0xffff88803f7c78b8 [ 739.224537] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 739.234220] FSBase=00007f45eb8ae700 GSBase=ffff8880ae900000 TRBase=fffffe0000033000 11:36:42 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="565f00000003"], 0x6) sendfile(r0, r1, &(0x7f0000000000), 0x11) [ 739.282727] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 11:36:42 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xfd\xfd', 0x2}) 11:36:42 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x806, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:36:42 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="1aad02090103"], 0x6) write$binfmt_aout(r1, 0x0, 0x0) sendfile(r0, r1, &(0x7f0000000000), 0x11) [ 739.337071] CR0=0000000080050033 CR3=0000000044c39000 CR4=00000000001426e0 [ 739.374789] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201360 [ 739.412186] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 739.434073] *** Control State *** [ 739.446818] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 739.456414] EntryControls=0000d1ff ExitControls=002fefff 11:36:42 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc3\xff', 0x2}) [ 739.466795] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 739.531407] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 739.558450] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 739.572753] reason=80000021 qualification=0000000000000000 [ 739.582217] IDTVectoring: info=00000000 errcode=00000000 [ 739.591801] TSC Offset = 0xfffffe720468dbee [ 739.602329] EPT pointer = 0x000000002cc7301e 11:36:42 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SMI(r3, 0xaeb7) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r4, &(0x7f0000000240)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x88, r5, 0x402, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr="143a96b6e6f28f8d32169f25f0dfd1b0"}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7f}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x100}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x100000000}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x80}, 0x8005) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a0000120800000088b070") 11:36:42 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0xb00, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) [ 739.812497] *** Guest State *** [ 739.815836] CR0: actual=0x0000000000050032, shadow=0x0000000000050012, gh_mask=fffffffffffffff7 [ 739.843787] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 739.869505] CR3 = 0x0000000000000000 [ 739.873294] RSP = 0x0000000000000000 RIP = 0x0000000000008000 [ 739.910805] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 739.933506] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 739.951914] CS: sel=0x3000, attr=0x08093, limit=0xffffffff, base=0x0000000000030000 [ 739.974656] DS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 740.002586] SS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 740.013577] ES: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 740.024530] FS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 740.035912] GS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 740.049694] GDTR: limit=0x00000000, base=0x0000000000000000 [ 740.059688] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 740.066266] net_ratelimit: 22 callbacks suppressed [ 740.066274] protocol 88fb is buggy, dev hsr_slave_0 [ 740.071306] IDTR: limit=0x00000000, base=0x0000000000000000 [ 740.072667] protocol 88fb is buggy, dev hsr_slave_1 [ 740.079713] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 740.104130] EFER = 0x0000000000006000 PAT = 0x0007040600070406 [ 740.110690] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 740.129629] Interruptibility = 00000008 ActivityState = 00000000 [ 740.146124] *** Host State *** [ 740.149508] RIP = 0xffffffff811b3710 RSP = 0xffff88802e6078b8 [ 740.168482] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 740.185025] FSBase=00007f45eb8ae700 GSBase=ffff8880ae900000 TRBase=fffffe0000033000 [ 740.203966] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 740.214521] CR0=0000000080050033 CR3=0000000058a07000 CR4=00000000001426e0 [ 740.226304] protocol 88fb is buggy, dev hsr_slave_0 [ 740.231402] protocol 88fb is buggy, dev hsr_slave_1 [ 740.250406] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87201360 [ 740.267113] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 740.273249] *** Control State *** [ 740.288888] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 740.304960] EntryControls=0000d1ff ExitControls=002fefff [ 740.311560] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 740.333114] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 740.349823] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 740.366470] reason=80000021 qualification=0000000000000000 [ 740.383550] IDTVectoring: info=00000000 errcode=00000000 [ 740.394817] TSC Offset = 0xfffffe7191cbb88b [ 740.404734] EPT pointer = 0x000000009b48e01e [ 741.186258] protocol 88fb is buggy, dev hsr_slave_0 [ 741.186279] protocol 88fb is buggy, dev hsr_slave_0 [ 741.191486] protocol 88fb is buggy, dev hsr_slave_1 [ 741.196395] protocol 88fb is buggy, dev hsr_slave_1 [ 741.201578] protocol 88fb is buggy, dev hsr_slave_0 [ 741.206486] protocol 88fb is buggy, dev hsr_slave_0 11:36:45 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000000)=@req3={0x6000000, 0x3, 0x6000000, 0x3}, 0x1c) setsockopt$packet_int(r1, 0x107, 0x9, &(0x7f0000000080), 0x4) r2 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x9, 0x80000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x0, 0x100d}}, 0x20) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x1, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f00000001c0)={0x12, 0x10, 0xfa00, {&(0x7f00000000c0), r3, r4}}, 0x18) 11:36:45 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="1aad02090103"], 0x6) write$binfmt_aout(r1, 0x0, 0x0) sendfile(r0, r1, &(0x7f0000000000), 0x11) 11:36:45 executing program 4: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r0 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0) write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="565f0000000300"], 0x7) sendfile(0xffffffffffffffff, r0, &(0x7f0000000000), 0x11) 11:36:45 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf5\xff', 0x2}) 11:36:45 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0xd00, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:36:45 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KVM_SMI(r3, 0xaeb7) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a0000120800000088b070") 11:36:45 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0xe80, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) [ 742.198060] *** Guest State *** 11:36:45 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xfe\xff', 0x2}) 11:36:45 executing program 1: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r0 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0) write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1aad02090103"], 0x6) write$binfmt_aout(r0, &(0x7f0000000400), 0x20) sendfile(0xffffffffffffffff, r0, &(0x7f0000000000), 0x11) 11:36:45 executing program 4: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r0 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0) write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="565f0000000300"], 0x7) sendfile(0xffffffffffffffff, r0, &(0x7f0000000000), 0x11) [ 742.219048] CR0: actual=0x0000000000050032, shadow=0x0000000000050012, gh_mask=fffffffffffffff7 [ 742.270623] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 742.296062] CR3 = 0x0000000000000000 [ 742.304555] RSP = 0x0000000000000000 RIP = 0x0000000000008000 [ 742.317674] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 742.330566] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 742.345337] CS: sel=0x3000, attr=0x08093, limit=0xffffffff, base=0x0000000000030000 [ 742.362515] DS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 11:36:45 executing program 1: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r0 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0) write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1aad02090103"], 0x6) write$binfmt_aout(r0, &(0x7f0000000400), 0x20) sendfile(0xffffffffffffffff, r0, &(0x7f0000000000), 0x11) 11:36:45 executing program 4: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r0 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0) write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="565f0000000300"], 0x7) sendfile(0xffffffffffffffff, r0, &(0x7f0000000000), 0x11) [ 742.379734] SS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 742.396929] ES: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 742.435754] FS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 742.456704] GS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 742.468203] GDTR: limit=0x00000000, base=0x0000000000000000 [ 742.485258] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 742.502332] IDTR: limit=0x00000000, base=0x0000000000000000 [ 742.526317] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 742.546468] EFER = 0x0000000000006000 PAT = 0x0007040600070406 [ 742.553090] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 742.576300] Interruptibility = 00000008 ActivityState = 00000000 [ 742.582689] *** Host State *** [ 742.586001] RIP = 0xffffffff811b3710 RSP = 0xffff8880582178b8 [ 742.602145] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 742.622072] FSBase=00007f45eb8ae700 GSBase=ffff8880ae800000 TRBase=fffffe0000033000 [ 742.661888] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 742.685266] CR0=0000000080050033 CR3=0000000095793000 CR4=00000000001426f0 [ 742.708449] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87201360 [ 742.715164] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 742.726676] *** Control State *** [ 742.730507] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 742.742093] EntryControls=0000d1ff ExitControls=002fefff [ 742.748868] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 742.755885] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 742.769381] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 742.776059] reason=80000021 qualification=0000000000000000 [ 742.785505] IDTVectoring: info=00000000 errcode=00000000 [ 742.794071] TSC Offset = 0xfffffe704a0b894c [ 742.813158] EPT pointer = 0x00000000a95cd01e 11:36:46 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000000)=@req3={0x6000000, 0x3, 0x6000000, 0x3}, 0x1c) setsockopt$packet_int(r1, 0x107, 0x9, &(0x7f0000000080), 0x4) socketpair(0x19, 0x0, 0x4, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_buf(r2, 0x29, 0x2f, &(0x7f00000000c0)=""/173, &(0x7f0000000180)=0xad) 11:36:46 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04', 0x2}) 11:36:46 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x1100, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:36:46 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="565f0000000300"], 0x7) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000000), 0x11) 11:36:46 executing program 1: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r0 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0) write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1aad02090103"], 0x6) write$binfmt_aout(r0, &(0x7f0000000400), 0x20) sendfile(0xffffffffffffffff, r0, &(0x7f0000000000), 0x11) 11:36:46 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SMI(r3, 0xaeb7) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000000)) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a0000120800000088b070") 11:36:46 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="1aad02090103"], 0x6) write$binfmt_aout(r1, &(0x7f0000000400), 0x20) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000000), 0x11) 11:36:46 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x1400, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:36:46 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b', 0x2}) [ 743.820262] *** Guest State *** [ 743.827890] CR0: actual=0x0000000000050032, shadow=0x0000000000050012, gh_mask=fffffffffffffff7 11:36:47 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="565f0000000300"], 0x7) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000000), 0x11) [ 743.862710] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 743.886929] CR3 = 0x0000000000000000 [ 743.895763] RSP = 0x0000000000000000 RIP = 0x0000000000008000 [ 743.926723] RFLAGS=0x00000002 DR7 = 0x0000000000000400 11:36:47 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="1aad02090103"], 0x6) write$binfmt_aout(r1, &(0x7f0000000400), 0x20) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000000), 0x11) 11:36:47 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x1c00, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) [ 743.976661] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 744.015523] CS: sel=0x3000, attr=0x08093, limit=0xffffffff, base=0x0000000000030000 [ 744.073777] DS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 744.096711] SS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 744.119419] ES: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 744.142060] FS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 744.165120] GS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 744.189947] GDTR: limit=0x00000000, base=0x0000000000000000 [ 744.213264] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 744.234970] IDTR: limit=0x00000000, base=0x0000000000000000 [ 744.259975] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 744.282137] EFER = 0x0000000000006000 PAT = 0x0007040600070406 [ 744.296326] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 744.303800] Interruptibility = 00000008 ActivityState = 00000000 [ 744.329211] *** Host State *** [ 744.332583] RIP = 0xffffffff811b3710 RSP = 0xffff88804abff8b8 [ 744.346127] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 744.364479] FSBase=00007f45eb8ae700 GSBase=ffff8880ae900000 TRBase=fffffe0000003000 [ 744.391872] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 744.412227] CR0=0000000080050033 CR3=000000003fd41000 CR4=00000000001426e0 [ 744.433452] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201360 [ 744.446353] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 744.469580] *** Control State *** [ 744.476522] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 744.502896] EntryControls=0000d1ff ExitControls=002fefff [ 744.529084] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 744.544439] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 744.565824] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 744.588984] reason=80000021 qualification=0000000000000000 [ 744.609925] IDTVectoring: info=00000000 errcode=00000000 [ 744.630053] TSC Offset = 0xfffffe6f6b192817 [ 744.659112] EPT pointer = 0x000000002cf0001e [ 745.346253] net_ratelimit: 17 callbacks suppressed [ 745.346262] protocol 88fb is buggy, dev hsr_slave_0 [ 745.346399] protocol 88fb is buggy, dev hsr_slave_1 [ 745.351344] protocol 88fb is buggy, dev hsr_slave_1 [ 745.356482] protocol 88fb is buggy, dev hsr_slave_0 [ 745.361404] protocol 88fb is buggy, dev hsr_slave_0 [ 745.366389] protocol 88fb is buggy, dev hsr_slave_1 [ 745.371396] protocol 88fb is buggy, dev hsr_slave_1 [ 746.306266] protocol 88fb is buggy, dev hsr_slave_0 [ 746.311418] protocol 88fb is buggy, dev hsr_slave_1 11:36:49 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vfio/vfio\x00', 0x60000, 0x0) r1 = syz_open_dev$amidi(&(0x7f00000001c0)='/dev/amidi#\x00', 0x0, 0x119003) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400207) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000000)=@req3={0x6000000, 0x3, 0x6000000, 0x3}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000200)={0x0, 0xed, 0xff, 0x7f, 0x9}, 0x14) setsockopt$packet_int(r2, 0x107, 0x9, &(0x7f0000000080), 0x4) syz_mount_image$nfs(&(0x7f0000000240)='nfs\x00', &(0x7f0000000280)='./file0\x00', 0x7, 0x4, &(0x7f0000000440)=[{&(0x7f00000002c0), 0x0, 0x1}, {&(0x7f0000000300)="6c22e808188f6fa97352feacbeed753db8094bb84ba5fe7704e9", 0x1a, 0x5}, {&(0x7f0000000340)="3747b90d55010c7c46a41d910308eb656f23bf359ae4c1a21c8eb78a8a3f733506854484519ff3f212780ea7c0ebc5b318f9ce33949ee6d46c0abaedea5e2ee660bc654970a3a37e9c3d3d7437aa872f4e4366d1462740128099fe4901f43f46c81b916e5e332889cb6234ba06fa43a97ca02305f98a0dcc2f76143b099a6aebc6082ea57992bafc05079c69b9d93587b7faf11150be57", 0x97, 0xb3}, {&(0x7f0000000400)="34dec76d50b8f15bbda1d1108972ea5e1b2e92c6ea", 0x15, 0x101}], 0x800000, &(0x7f00000004c0)='/dev/amidi#\x00') r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x80, 0x0) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000100)={[{0x7, 0x8, 0x80, 0xcb8, 0x3, 0x80000001, 0xd529, 0x0, 0x55e9, 0xffff, 0x2, 0x8, 0x4}, {0x436, 0xf0, 0x6, 0x7, 0x40, 0x40000000000000, 0x8, 0x8, 0x0, 0x9a9, 0x10000, 0x0, 0x80}, {0x636b8000000000, 0xc7fd, 0xf93, 0x10001, 0x6c, 0x3, 0xe66, 0x9, 0xfffffffffffff001, 0x1e, 0xad4, 0x5}], 0x6}) 11:36:49 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00', 0x2}) 11:36:49 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="565f0000000300"], 0x7) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000000), 0x11) 11:36:49 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x2000, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:36:49 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="1aad02090103"], 0x6) write$binfmt_aout(r1, &(0x7f0000000400), 0x20) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000000), 0x11) 11:36:49 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000000c0)="d5c2061e51fe0c02d661c70d5168c9517712170d3b0b96d140371a9571a191fc43c98ab5196abd9186696845f7d33474803005823f919969013ad54e47e1ad59c67a65129921f6eac4855a032708278966cad8e6acd81ad486d24c20d9662ad31c92de2eb7446a8df80932017ee9caf93d56ddb2a2f0a087ede304dd4a9743d6640c2aa5571b81310ed2083c8add77e54cf57327e6edfcccf615b2e35f8d2a9abd7e4c5b29213457bf8f3e41556a1062e0a41e4fa33cf029", 0xb8) ioctl$KVM_SMI(r3, 0xaeb7) setsockopt$inet_udp_int(r0, 0x11, 0xb, &(0x7f0000000000)=0x7a0, 0x4) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x2000, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a0000120800000088b070") [ 746.466317] protocol 88fb is buggy, dev hsr_slave_0 11:36:49 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="1aad02090103"], 0x6) write$binfmt_aout(r1, &(0x7f0000000400), 0x20) sendfile(r0, r1, 0x0, 0x11) 11:36:49 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x2100, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:36:49 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00', 0x2}) 11:36:49 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="565f0000000300"], 0x7) sendfile(r0, r1, 0x0, 0x11) 11:36:49 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="1aad02090103"], 0x6) write$binfmt_aout(r1, &(0x7f0000000400), 0x20) sendfile(r0, r1, 0x0, 0x11) 11:36:49 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x2800, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:36:52 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000000)=@req3={0x6000000, 0x3, 0x6000000, 0x3}, 0x1c) setsockopt$packet_int(r1, 0x107, 0x9, &(0x7f0000000080)=0x7, 0x4) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x400, 0x0) 11:36:52 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x4080, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x20110, r4, 0x0) ioctl$KVM_SMI(r3, 0xaeb7) ioctl$KVM_S390_VCPU_FAULT(r4, 0x4008ae52, &(0x7f0000000140)=0xb7) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) accept4$x25(r4, &(0x7f00000000c0)={0x9, @remote}, &(0x7f0000000100)=0x12, 0x80000) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$cgroup_ro(r4, &(0x7f0000000180)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a0000120800000088b070") 11:36:52 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="565f0000000300"], 0x7) sendfile(r0, r1, 0x0, 0x11) 11:36:52 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00', 0x2}) 11:36:52 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="1aad02090103"], 0x6) write$binfmt_aout(r1, &(0x7f0000000400), 0x20) sendfile(r0, r1, 0x0, 0x11) 11:36:52 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x2900, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:36:52 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="1aad02090103"], 0x6) write$binfmt_aout(r1, &(0x7f0000000400), 0x20) sendfile(r0, r1, &(0x7f0000000000), 0x0) 11:36:52 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x2b00, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:36:52 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="565f0000000300"], 0x7) sendfile(r0, r1, 0x0, 0x11) 11:36:52 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00', 0x2}) [ 749.114695] *** Guest State *** [ 749.132751] CR0: actual=0x0000000000050032, shadow=0x0000000000050012, gh_mask=fffffffffffffff7 [ 749.160610] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 11:36:52 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x2c00, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:36:52 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00', 0x2}) [ 749.198984] CR3 = 0x0000000000000000 [ 749.206320] RSP = 0x0000000000000000 RIP = 0x0000000000008000 [ 749.227023] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 749.259147] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 749.293523] CS: sel=0x3000, attr=0x08093, limit=0xffffffff, base=0x0000000000030000 [ 749.317403] DS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 749.343797] SS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 749.355902] ES: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 749.370248] FS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 749.380402] GS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 749.392749] GDTR: limit=0x00000000, base=0x0000000000000000 [ 749.402869] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 749.415103] IDTR: limit=0x00000000, base=0x0000000000000000 [ 749.425273] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 749.448891] EFER = 0x0000000000006000 PAT = 0x0007040600070406 [ 749.465844] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 749.488830] Interruptibility = 00000008 ActivityState = 00000000 [ 749.504851] *** Host State *** [ 749.518993] RIP = 0xffffffff811b3710 RSP = 0xffff888047c8f8b8 [ 749.534997] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 749.546338] FSBase=00007f45eb8ae700 GSBase=ffff8880ae900000 TRBase=fffffe0000003000 [ 749.560942] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 749.574791] CR0=0000000080050033 CR3=000000003261b000 CR4=00000000001426e0 [ 749.589737] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201360 [ 749.604292] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 749.617120] *** Control State *** [ 749.620664] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 749.636235] EntryControls=0000d1ff ExitControls=002fefff [ 749.649667] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 749.664448] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 749.677906] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 749.689017] reason=80000021 qualification=0000000000000000 [ 749.703246] IDTVectoring: info=00000000 errcode=00000000 [ 749.722189] TSC Offset = 0xfffffe6c96e25e65 [ 749.735013] EPT pointer = 0x000000003f4b601e [ 750.466283] net_ratelimit: 20 callbacks suppressed [ 750.466292] protocol 88fb is buggy, dev hsr_slave_0 [ 750.476405] protocol 88fb is buggy, dev hsr_slave_1 [ 750.626328] protocol 88fb is buggy, dev hsr_slave_0 [ 750.631503] protocol 88fb is buggy, dev hsr_slave_1 11:36:54 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000000)=@req3={0x6000000, 0x3, 0x6000000, 0x3}, 0x1c) setsockopt$packet_int(r1, 0x107, 0x9, &(0x7f0000000080), 0x4) getpeername(r1, &(0x7f00000004c0)=@hci={0x1f, 0x0}, &(0x7f0000000540)=0x80) bind$packet(r1, &(0x7f0000000580)={0x11, 0xc, r2, 0x1, 0x101, 0x6, @remote}, 0x14) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') r4 = syz_genetlink_get_family_id$team(&(0x7f0000000100)='team\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x15, 0x2, &(0x7f00000001c0)=@raw=[@ldst={0x1, 0x3, 0x1, 0xf, 0x1, 0x6, 0x10}, @jmp={0x5, 0x9, 0x0, 0x5, 0xb, 0xfffffffffffffffc, 0x10}], &(0x7f0000000240)='syzkaller\x00', 0x1, 0x7a, &(0x7f0000000280)=""/122, 0x41f00, 0x1, [], r2}, 0x48) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000b00)=ANY=[@ANYBLOB="b4040000", @ANYRES16=r4, @ANYBLOB="080009000000fddbdf250300000008000100", @ANYRES32=r2, @ANYBLOB="7c000200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000300000008000600", @ANYRES32=r2, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000800030003000000080004000001000008000100", @ANYRES32=r2, @ANYBLOB="7c01020040000100240001006d6f646500000000000000000000000000000000000000000000000000000000080003000500000010000400726f756e64726f62696e000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b00000008000400800000000800070000000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000900000008000600", @ANYRES32=r2, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b0000000800040006000000080007000000000040000100240001006d6f64650000000000000000000000000000000000000000000000000000000008000300050000001000040062726f61646361737400000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000800030003000000080004000000000008000100", @ANYRES32=r2, @ANYBLOB="f801020040000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000900000008000600", @ANYRES32=r2, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004000800000008000600", @ANYRES32=r2, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r2, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000700000008000600", @ANYRES32=r2, @ANYBLOB="3c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000000c00040068617368000000003c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000000c000400686173680000000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b00000008000400090000000800070000000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000200000008000600", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="4400020040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r2, @ANYBLOB="080007000000000008000100", @ANYRES32=r2, @ANYBLOB="4400020040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r2, @ANYBLOB="080007000000000026394504188379bb71562df9c4cb4154f08958f8964a6838e1e1e3507621b8c9e8e4cd4c78b630b3578d9ded9b999a6d7e74abdfe7864f32bebd5ad78d768b0bd8795cf01775ae3c5f7f9c565a29e27f12c271ffc4a362b23b760264c4e19c9b431ff26904f79d57acc2bfe6fdda7b85be8ca9aa2b4ca70000000000000000000000000000"], 0x4b4}, 0x1, 0x0, 0x0, 0x800}, 0x40) 11:36:54 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="565f0000000300"], 0x7) sendfile(r0, r1, &(0x7f0000000000), 0x0) 11:36:54 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="1aad02090103"], 0x6) write$binfmt_aout(r1, &(0x7f0000000400), 0x20) sendfile(r0, r1, &(0x7f0000000000), 0x0) 11:36:54 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00', 0x2}) 11:36:54 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x2f00, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:36:54 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SMI(r3, 0xaeb7) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xf}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) r4 = syz_open_procfs(0xffffffffffffffff, 0xfffffffffffffffe) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_GET(r4, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000500)={0x130, r5, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x14, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}]}, @TIPC_NLA_BEARER={0x9c, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x55}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x8ad, @ipv4={[], [], @local}, 0xf9}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x1, @mcast1, 0x100000001}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x1, @loopback, 0x7}}, {0x14, 0x2, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x25}}}}}]}, @TIPC_NLA_BEARER={0x14, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_NET={0x58, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7fff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xe206}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x800}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x80}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffffffffffffa}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x84}, 0x40080) ioctl$KVM_GET_MSRS(r3, 0xc008ae88, &(0x7f0000000280)=ANY=[@ANYBLOB="0400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fc59fcfa8f1831f5309d27b0e506910070c9b49771d0101e00000000000000000000"]) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000140)="66b8a5008ee0c744240000000000c744240202000000c7442406000000000f01142465191126673e0f01cf66b824018ed0c4e21d9204590fc7186466660f3a40db050f30f30f51443000", 0x4a}], 0x1, 0x71, &(0x7f00000001c0)=[@cstype3={0x5, 0x1}], 0x1) ioctl(r0, 0x800000000007ff, &(0x7f0000000240)="522011001288b070") 11:36:54 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="565f0000000300"], 0x7) sendfile(r0, r1, &(0x7f0000000000), 0x0) 11:36:54 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x3201, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:36:54 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00', 0x2}) 11:36:54 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="1aad02090103"], 0x6) write$binfmt_aout(r1, &(0x7f0000000400), 0x20) sendfile(r0, r1, &(0x7f0000000000), 0x0) [ 751.576120] *** Guest State *** [ 751.582271] CR0: actual=0x0000000000050032, shadow=0x0000000000050012, gh_mask=fffffffffffffff7 [ 751.586289] protocol 88fb is buggy, dev hsr_slave_0 [ 751.591218] protocol 88fb is buggy, dev hsr_slave_0 [ 751.596214] protocol 88fb is buggy, dev hsr_slave_1 [ 751.601204] protocol 88fb is buggy, dev hsr_slave_1 [ 751.606276] protocol 88fb is buggy, dev hsr_slave_0 [ 751.611278] protocol 88fb is buggy, dev hsr_slave_0 [ 751.622823] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 751.648543] CR3 = 0x0000000000000000 [ 751.661353] RSP = 0x0000000000000000 RIP = 0x0000000000008000 [ 751.685727] RFLAGS=0x00000002 DR7 = 0x0000000000000400 11:36:54 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x3580, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) [ 751.707584] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 751.731334] CS: sel=0x3000, attr=0x08093, limit=0xffffffff, base=0x0000000000030000 11:36:54 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000200)='./file0\x00', 0x0) fallocate(r0, 0x10, 0x0, 0x2000003) [ 751.755230] DS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 751.782362] SS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 751.809574] ES: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 751.838285] FS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 751.855570] GS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 751.872780] GDTR: limit=0x00000000, base=0x0000000000000000 [ 751.900873] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 751.933375] IDTR: limit=0x00000000, base=0x0000000000000000 [ 751.950542] TR: sel=0x000f, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 751.967650] EFER = 0x0000000000006000 PAT = 0x0007040600070406 [ 751.982034] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 751.997535] Interruptibility = 00000008 ActivityState = 00000000 [ 752.010585] *** Host State *** [ 752.017256] RIP = 0xffffffff811b3710 RSP = 0xffff8880558c78b8 [ 752.030174] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 752.045608] FSBase=00007f45eb8ae700 GSBase=ffff8880ae800000 TRBase=fffffe0000003000 [ 752.064613] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 752.078394] CR0=0000000080050033 CR3=00000000873e5000 CR4=00000000001426f0 [ 752.094424] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201360 [ 752.110113] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 752.124036] *** Control State *** [ 752.132129] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 752.147793] EntryControls=0000d1ff ExitControls=002fefff [ 752.159634] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 752.175736] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 752.191605] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 752.206247] reason=80000021 qualification=0000000000000000 [ 752.220615] IDTVectoring: info=00000000 errcode=00000000 [ 752.232884] TSC Offset = 0xfffffe6b44928ff9 [ 752.242998] EPT pointer = 0x0000000046b7801e [ 752.316895] *** Guest State *** [ 752.321670] CR0: actual=0x000000008005003f, shadow=0x000000008005001f, gh_mask=fffffffffffffff7 [ 752.356297] CR4: actual=0x0000000000002068, shadow=0x0000000000000028, gh_mask=ffffffffffffe871 [ 752.377972] CR3 = 0x0000000000000000 [ 752.381702] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 752.406868] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 752.427152] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 752.461919] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 752.488074] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 752.531284] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 752.539759] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 752.566356] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 752.586278] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 752.594363] GDTR: limit=0x00000000, base=0x0000000000000000 [ 752.616281] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 752.636276] IDTR: limit=0x00000000, base=0x0000000000000000 [ 752.644361] TR: sel=0x000f, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 752.666259] EFER = 0x0000000000006500 PAT = 0x0007040600070406 [ 752.676531] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 752.696268] Interruptibility = 00000000 ActivityState = 00000000 [ 752.702607] *** Host State *** [ 752.716264] RIP = 0xffffffff811b3710 RSP = 0xffff8880558c78b8 [ 752.722346] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 752.746258] FSBase=00007f45eb8ae700 GSBase=ffff8880ae800000 TRBase=fffffe0000033000 [ 752.754172] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 752.776303] CR0=0000000080050033 CR3=00000000873e5000 CR4=00000000001426f0 [ 752.783440] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87201360 [ 752.806258] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 752.812420] *** Control State *** [ 752.815955] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 752.836283] EntryControls=0000d3ff ExitControls=002fefff [ 752.841849] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 752.856262] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 752.876270] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 752.882956] reason=80000021 qualification=0000000000000000 [ 752.896261] IDTVectoring: info=00000000 errcode=00000000 [ 752.906491] TSC Offset = 0xfffffe6adc984fde [ 752.916467] EPT pointer = 0x000000005861d01e 11:36:57 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x420600, 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000180)="4c397bcbcf30e23dc82a61897d41f783cff2c94bbe8a3145eacc00addfd5c035b044f1a922b465a66139ce0f7cd321a8788f1e2dede2c4c01d11e892cf9a5ec54258ce7b5b671c7f214b38a3363a3d09fa05f5f845e138958fd8880c0f974c1e51") r1 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x1f, 0x1) connect$bt_rfcomm(r1, &(0x7f00000000c0)={0x1f, {0x6, 0x7, 0x4, 0x81, 0x3, 0x4}, 0x5}, 0xa) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000000)=@req3={0x6000000, 0x3, 0x6000000, 0x3}, 0x1c) setsockopt$packet_int(r2, 0x107, 0x9, &(0x7f0000000080), 0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') 11:36:57 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="565f0000000300"], 0x7) sendfile(r0, r1, &(0x7f0000000000), 0x0) 11:36:57 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00', 0x2}) 11:36:57 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x3a00, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:36:57 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='io\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) 11:36:57 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SMI(r3, 0xaeb7) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a0000120800000088b070") 11:36:57 executing program 4: 11:36:57 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x3c00, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:36:57 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00', 0x2}) 11:36:58 executing program 4: 11:36:58 executing program 1: 11:36:58 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, &(0x7f0000001280)) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SMI(r3, 0xaeb7) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) r5 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x9, 0x1) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, r5) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000180)="913555a43bf56be17095a4c28eb9f376d2cd533f3c15cefa0ed6d3d5a51c241820e99e178c8507f663e1b1bfc3d62301458e23c5c737ca59b6cfe196e357b50caccae0dfbebf5a5b6d2f716f5bd2f92a42b8dbff55b2987646363cb0dd8ceccbc5e5dfb9827781b5c78dc873ab8862d329d58fbb8b4ea9cb72be739d6e9d481b21f22be900f56452bde2c4f8821fdec759721db76148cd90ee1998a9f03678724cf2ed0270ee3800000000") [ 755.746256] net_ratelimit: 17 callbacks suppressed [ 755.746265] protocol 88fb is buggy, dev hsr_slave_0 [ 755.746273] protocol 88fb is buggy, dev hsr_slave_0 [ 755.746368] protocol 88fb is buggy, dev hsr_slave_1 [ 755.751278] protocol 88fb is buggy, dev hsr_slave_1 [ 755.756420] protocol 88fb is buggy, dev hsr_slave_0 [ 755.761422] protocol 88fb is buggy, dev hsr_slave_0 [ 755.766551] protocol 88fb is buggy, dev hsr_slave_1 [ 755.771423] protocol 88fb is buggy, dev hsr_slave_1 11:36:59 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0xc001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x200040004001ff) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000000)=@req3={0x6000000, 0x3, 0x6000000, 0x3}, 0x1c) setsockopt$packet_int(r1, 0x107, 0x9, &(0x7f0000000080), 0x4) 11:36:59 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x3f00, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:36:59 executing program 1: 11:36:59 executing program 4: 11:36:59 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00', 0x2}) 11:36:59 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SMI(r3, 0xaeb7) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {0x0, 0xffffffffffffffff}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a0000120800000088b070") 11:36:59 executing program 1: 11:36:59 executing program 4: openat$random(0xffffffffffffff9c, &(0x7f0000000300)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000180)=""/40, 0xffffffffffffff59, 0x2) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, 0x0) 11:36:59 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x4000, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:36:59 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00', 0x2}) [ 756.476728] *** Guest State *** [ 756.492565] CR0: actual=0x0000000000050032, shadow=0x0000000000050012, gh_mask=fffffffffffffff7 [ 756.536740] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 756.577318] CR3 = 0x0000000000000000 11:36:59 executing program 1: pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") close(r2) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f0000000040)=0x72, 0x4) bind$inet(r4, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) vmsplice(r1, &(0x7f0000006840)=[{&(0x7f0000005c00)="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", 0x1ff}], 0x1, 0x0) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) splice(r0, 0x0, r2, 0x0, 0xe211, 0x0) 11:36:59 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x4305, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) [ 756.598751] RSP = 0x0000000000000000 RIP = 0x0000000000008000 [ 756.626107] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 756.649935] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 756.687669] CS: sel=0x3000, attr=0x08093, limit=0xffffffff, base=0x0000000000030000 [ 756.706295] protocol 88fb is buggy, dev hsr_slave_0 [ 756.711437] protocol 88fb is buggy, dev hsr_slave_1 [ 756.717374] DS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 756.741854] SS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 756.770149] ES: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 756.790163] FS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 756.801306] GS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 756.812566] GDTR: limit=0x00000000, base=0x0000000000000000 [ 756.823382] LDTR: sel=0x0000, attr=0x10000, limit=0xffffffff, base=0x0000000000000000 [ 756.834223] IDTR: limit=0x00000000, base=0x0000000000000000 [ 756.844997] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 756.855886] EFER = 0x0000000000006000 PAT = 0x0007040600070406 [ 756.865148] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 756.881249] Interruptibility = 00000008 ActivityState = 00000000 [ 756.887613] *** Host State *** [ 756.890909] RIP = 0xffffffff811b3710 RSP = 0xffff888047a2f8b8 [ 756.902931] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 756.910654] FSBase=00007f45eb8ae700 GSBase=ffff8880ae900000 TRBase=fffffe0000003000 [ 756.932804] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 756.951781] CR0=0000000080050033 CR3=000000002cbc3000 CR4=00000000001426e0 [ 756.973042] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201360 [ 756.992907] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 757.006320] *** Control State *** [ 757.009934] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 757.023685] EntryControls=0000d1ff ExitControls=002fefff [ 757.035186] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 757.049136] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 757.062547] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 757.075252] reason=80000021 qualification=0000000000000000 [ 757.087576] IDTVectoring: info=00000000 errcode=00000000 [ 757.096584] TSC Offset = 0xfffffe68a24621ec [ 757.106295] EPT pointer = 0x00000000581c801e 11:37:01 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) fsetxattr$trusted_overlay_redirect(r0, &(0x7f00000000c0)='trusted.overlay.redirect\x00', &(0x7f0000000180)='./file0\x00', 0x8, 0x3) r2 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x200) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r2, 0x10e, 0x8, &(0x7f0000000100)=0xfff, 0x4) syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000000)=@req3={0x6000000, 0x3, 0x6000000, 0x3}, 0x1c) setsockopt$packet_int(r1, 0x107, 0x9, &(0x7f0000000080), 0x4) 11:37:01 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00', 0x2}) 11:37:01 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.current\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f0000000240)={{0x2, 0x1, 0x7fff, 0x1, 0x5}, 0x6, 0x8, 'id1\x00', 'timer0\x00', 0x0, 0x6, 0xfffffffffffffffa, 0x7, 0x3}) r2 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="5500000018007fafb72d1cb2a4a280930206000000a843096c26234d2500080008000a00080000000000a3c728f1c46b7b31afdc1338d54400009b84136ef75afb83de448daa7227c43ab8220000bf0cec6bab91d4", 0x55}], 0x1}, 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r3 = openat$cgroup_int(0xffffffffffffff9c, &(0x7f00000000c0)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x6f9, 0x12) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000001300)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-generic\x00'}, 0x58) r5 = accept$alg(r2, 0x0, 0x0) fcntl$setstatus(r5, 0x4, 0x2800) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000100)='./file0\x00') syz_open_dev$loop(0x0, 0x4, 0x81) getsockname$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000340)=0x1c) syz_genetlink_get_family_id$ipvs(0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) 11:37:01 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x4788, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:37:01 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x101400, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f0000000140)={0x0, 0x3f, 0x49}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) read(r0, &(0x7f0000000400)=""/167, 0xa7) read$eventfd(0xffffffffffffffff, &(0x7f0000000200), 0xffffffffffffff04) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r2 = eventfd(0x3) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000001840)={0x2000, &(0x7f0000001800), 0x1, r2, 0xd}) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000340)=0x1, 0xfffffffffffffdcd) ioctl$int_in(r2, 0x5452, 0xfffffffffffffffe) inotify_init() ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) modify_ldt$read_default(0x2, 0x0, 0x0) lsetxattr$trusted_overlay_origin(0x0, &(0x7f00000000c0)='trusted.overlay.origin\x00', &(0x7f0000000180)='y\x00', 0x2, 0x1) write$input_event(r2, &(0x7f0000000000)={{}, 0x17, 0x200, 0xff}, 0x18) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x88000, 0x0) ioctl$TUNGETSNDBUF(r3, 0x800454d3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f00000003c0)=[{0x0, 0xfffffffffffffd48}], 0x1) rmdir(&(0x7f00000001c0)='./file1\x00') setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000240)={0x4c, 0x7, 0xa35f, 0x6, 0x4}, 0x14) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8200003) getpeername$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x0, 0x0, @mcast1}, 0x0) 11:37:01 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SMI(r3, 0xaeb7) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) fsetxattr$trusted_overlay_upper(r3, &(0x7f0000000000)='trusted.overlay.upper\x00', &(0x7f00000000c0)={0x0, 0xfb, 0xd6, 0x6, 0x6, "b803d5e489bea3d004ee48127eb683cb", "abe64070692c48284b9fbc5d9af85eaae4e2b147142ced923a6273a14d35853b8f6f4c13bcd42bbd578be806101e33dc58a2f6fd4ab4844af7d11ed9e9f00f8b973f421acd567c41a5b8c36a7bb84c09eeb249cd5f2f1731cd75ac8596ef5187ef0870a2f73f4a5b619611d19b415fdd685b4bd512b0d1c90b6220bc8fe453080b397a78ca808f30e4871ed351b8afc441453362ca9b12d40ad5a8347ca7b9c8145d15bc0afabdc4706c1fafba065399a9062634c69aca158dd54bd8c566249755"}, 0xd6, 0x1) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a0000120800000088b070") [ 758.005643] Unknown ioctl -2147199789 11:37:01 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x4888, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:37:01 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00', 0x2}) [ 758.028860] *** Guest State *** [ 758.032184] CR0: actual=0x0000000000050032, shadow=0x0000000000050012, gh_mask=fffffffffffffff7 [ 758.079773] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 11:37:01 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000000)=@req3={0x6000000, 0x3, 0x6000000, 0x3}, 0x1c) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f00000003c0)={0x0, 0x1ff}, &(0x7f0000000400)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000440)={r3, 0x8, 0x91, "3c4deeac32903d43bde3f2f4a28a84c9c0947a916d473743a9d35b8e72f6476e5471b895b137fa8a7b8201dd81c252454c0e70266c14f9b5264817e9da1135f5921ff22a2cf7c62417ab78d4b7003d0e91bb552c0f6a98f5f073e73d8cd735eb3da0152b8c89c7bc7ce68976e7abf36e6b4403ca41dceea3cc20dec8965e8bfd6e2155ff87054fa88d704abc58bc09912f"}, 0x99) recvmsg$kcm(r2, &(0x7f0000000380)={&(0x7f0000000140)=@generic, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/126, 0x7e}, {&(0x7f00000002c0)=""/96, 0x60}], 0x2, &(0x7f0000000340)=""/51, 0x33}, 0x40010040) r4 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x4, 0xa00) ioctl$IMCLEAR_L2(r4, 0x80044946, &(0x7f00000000c0)=0x1) setsockopt$packet_int(r1, 0x107, 0x9, &(0x7f0000000080), 0x4) [ 758.138008] CR3 = 0x0000000000000000 11:37:01 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x6488, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) [ 758.177302] RSP = 0x0000000000000000 RIP = 0x0000000000008000 [ 758.200710] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 758.210818] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 11:37:01 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00', 0x2}) [ 758.222596] CS: sel=0x3000, attr=0x08093, limit=0xffffffff, base=0x0000000000030000 [ 758.232076] DS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 758.245094] SS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 758.273397] Unknown ioctl -2147199789 11:37:01 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) [ 758.296615] ES: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 758.323396] FS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 11:37:01 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x800e, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:37:01 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00', 0x2}) 11:37:01 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x101400, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f0000000140)={0x0, 0x3f, 0x49}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) read(r0, &(0x7f0000000400)=""/167, 0xa7) read$eventfd(0xffffffffffffffff, &(0x7f0000000200), 0xffffffffffffff04) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r2 = eventfd(0x3) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000001840)={0x2000, &(0x7f0000001800), 0x1, r2, 0xd}) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000340)=0x1, 0xfffffffffffffdcd) ioctl$int_in(r2, 0x5452, 0xfffffffffffffffe) inotify_init() ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) modify_ldt$read_default(0x2, 0x0, 0x0) lsetxattr$trusted_overlay_origin(0x0, &(0x7f00000000c0)='trusted.overlay.origin\x00', &(0x7f0000000180)='y\x00', 0x2, 0x1) write$input_event(r2, &(0x7f0000000000)={{}, 0x17, 0x200, 0xff}, 0x18) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x88000, 0x0) ioctl$TUNGETSNDBUF(r3, 0x800454d3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f00000003c0)=[{0x0, 0xfffffffffffffd48}], 0x1) rmdir(&(0x7f00000001c0)='./file1\x00') setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000240)={0x4c, 0x7, 0xa35f, 0x6, 0x4}, 0x14) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8200003) getpeername$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x0, 0x0, @mcast1}, 0x0) [ 758.376043] GS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 758.411160] GDTR: limit=0x00000000, base=0x0000000000000000 [ 758.449456] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 11:37:01 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x7}, 0x4) close(r0) 11:37:01 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x8035, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) [ 758.502480] IDTR: limit=0x00000000, base=0x0000000000000000 [ 758.538819] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 758.559155] Unknown ioctl -2147199789 [ 758.575604] EFER = 0x0000000000006000 PAT = 0x0007040600070406 [ 758.612958] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 758.653052] Interruptibility = 00000008 ActivityState = 00000000 [ 758.677882] *** Host State *** [ 758.689411] RIP = 0xffffffff811b3710 RSP = 0xffff88802d03f8b8 [ 758.701149] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 758.714512] FSBase=00007f45eb8ae700 GSBase=ffff8880ae800000 TRBase=fffffe0000003000 [ 758.736723] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 758.746332] CR0=0000000080050033 CR3=0000000041ab4000 CR4=00000000001426f0 [ 758.766334] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201360 [ 758.773113] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 758.786573] *** Control State *** [ 758.796960] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 758.812193] EntryControls=0000d1ff ExitControls=002fefff [ 758.826373] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 758.833405] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 758.856347] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 758.864186] *** Guest State *** [ 758.876305] reason=80000021 qualification=0000000000000000 [ 758.889108] CR0: actual=0x000000008005003f, shadow=0x000000008005001f, gh_mask=fffffffffffffff7 [ 758.919046] IDTVectoring: info=00000000 errcode=00000000 [ 758.939347] CR4: actual=0x0000000000002068, shadow=0x0000000000000028, gh_mask=ffffffffffffe871 [ 758.971976] TSC Offset = 0xfffffe67cf04de93 [ 758.976453] EPT pointer = 0x000000003848601e [ 758.986320] CR3 = 0x0000000000000000 [ 759.007415] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 759.025715] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 759.044752] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 759.062692] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 759.084150] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 759.101942] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 759.121952] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 759.141897] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 759.182174] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 759.190351] GDTR: limit=0x00000000, base=0x0000000000000000 [ 759.204185] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 759.212310] IDTR: limit=0x00000000, base=0x0000000000000000 [ 759.226698] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 759.234807] EFER = 0x0000000000006500 PAT = 0x0007040600070406 [ 759.245550] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 759.254010] Interruptibility = 00000000 ActivityState = 00000000 [ 759.264710] *** Host State *** [ 759.268905] RIP = 0xffffffff811b3710 RSP = 0xffff888027b478b8 [ 759.274989] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 759.285714] FSBase=00007f45eb82a700 GSBase=ffff8880ae800000 TRBase=fffffe0000003000 [ 759.294611] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 759.314040] CR0=0000000080050033 CR3=0000000041ab4000 CR4=00000000001426f0 [ 759.326790] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201360 [ 759.333593] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 759.344373] *** Control State *** [ 759.361843] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 759.374926] EntryControls=0000d3ff ExitControls=002fefff [ 759.386321] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 759.393374] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 759.400516] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 759.407475] reason=80000021 qualification=0000000000000000 [ 759.413897] IDTVectoring: info=00000000 errcode=00000000 [ 759.419758] TSC Offset = 0xfffffe675f610a9e [ 759.424170] EPT pointer = 0x0000000028fbd01e 11:37:02 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SMI(r3, 0xaeb7) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a0000120800000088b070") 11:37:02 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2}) 11:37:02 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x8100, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) [ 759.588051] *** Guest State *** [ 759.591467] CR0: actual=0x0000000000050032, shadow=0x0000000000050012, gh_mask=fffffffffffffff7 [ 759.600517] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 759.609484] CR3 = 0x0000000000000000 [ 759.613304] RSP = 0x0000000000000000 RIP = 0x0000000000008000 [ 759.619422] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 759.625489] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 759.632582] CS: sel=0x3000, attr=0x08093, limit=0xffffffff, base=0x0000000000030000 [ 759.646917] DS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 759.666277] SS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 759.688290] ES: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 759.706322] FS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 759.726303] GS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 759.734566] GDTR: limit=0x00000000, base=0x0000000000000000 [ 759.756300] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 759.776334] IDTR: limit=0x00000000, base=0x0000000000000000 [ 759.796300] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 759.804428] EFER = 0x0000000000006000 PAT = 0x0007040600070406 [ 759.826291] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 759.833901] Interruptibility = 00000008 ActivityState = 00000000 [ 759.840329] *** Host State *** [ 759.856307] RIP = 0xffffffff811b3710 RSP = 0xffff88803622f8b8 [ 759.862445] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 759.869012] FSBase=00007f45eb8ae700 GSBase=ffff8880ae800000 TRBase=fffffe0000003000 [ 759.886292] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 759.907006] CR0=0000000080050033 CR3=00000000485a6000 CR4=00000000001426f0 [ 759.914169] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201360 [ 759.921028] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 759.927235] *** Control State *** [ 759.930807] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 759.937645] EntryControls=0000d1ff ExitControls=002fefff [ 759.943233] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 759.950312] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 759.957164] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 759.963973] reason=80000021 qualification=0000000000000000 [ 759.970478] IDTVectoring: info=00000000 errcode=00000000 [ 759.986426] TSC Offset = 0xfffffe66f8e95eda [ 759.990878] EPT pointer = 0x000000004696501e 11:37:03 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x400000, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000000c0)={0x0, @rand_addr, @broadcast}, &(0x7f0000000100)=0xc) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000000)=@req3={0x6000000, 0x3, 0x6000000, 0x3}, 0x1c) setsockopt$packet_int(r2, 0x107, 0x9, &(0x7f0000000080), 0x4) 11:37:03 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000004c0)="0adc1f123c123f3188b070") r1 = memfd_create(&(0x7f0000000280)='/\x00\x00\x00\x00\x00\x06\x14\xe7sdq\x00\xb4\x8f\xa8\xef\xe1\x1e,\x0e\xbd\xf3>4\xbeJI\np\x92oqAX\x10K\x99\xc4\x9dZ5\xc4\x0f\xebO\xc6\x02\xdb\xdc:4\xddL\xce\x9ai\x04\a\x81f\xe7\x1fh\x11f\x12/\x17U\xfe\xf7\xa2\x87\x98\xabK7\xba+\r]\xd6k!\xc93\xb2g\xb0\xc2.e\xb6T\x06\xe0Y\x00Ri8\xcc\x14\xcf\xc6\x8b\xe9\x04\xdf\xa0\x8f\xeeuJ.\xfc\xe3)u\xb5\x13\x92\x05\x81E\xd0_\xc4\xcaY\x8a\x18\xd5\xa0\x1e|\x18\x01\xff\xf1\x88j\x98\xf5\xacs\xec\x12[\xde\x8b\x1bS\xd2\x81\x80N\xee\xda\xfe\x82\x01.\x81\x19\x12\xc8`\xf2y~f\x166eR\x1f(e\x8a\xd5v\b3t]\xb42\xe3\x1a\x1a\x90\x02\xe6\xcc\xfceB\x0f\xc0\xed\xdf\x16\x00\xe8\f\xc9,n\xfd\x9f\x1a\xd6\xf5\xb4\xa4\x80{\xeej\x9b\x04\xd8\xb25\xe5;Y1\xdd~\x9a_\xc2h>\xa9\x18wAt\xe2\xbam\x83\xf9', 0x0) fsetxattr$security_smack_transmute(r1, &(0x7f0000000140)='security.SMACK64TRANSMUTE\x00', 0x0, 0x0, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) dup2(r2, r1) 11:37:03 executing program 1: socketpair(0xe6cb1487c486a1fe, 0x0, 0x8, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(r1, &(0x7f00000005c0)='rdma.current\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b400000000000000620100ff000000009500000000000000"], 0x0}, 0x48) close(r2) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000480)={&(0x7f0000000440)='./file0\x00', 0x0, 0x10}, 0x10) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f00000004c0)=r3) r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) recvmsg(r0, &(0x7f0000000bc0)={&(0x7f0000000940)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000009c0)=""/40, 0x28}, {&(0x7f0000000a00)=""/196, 0xc4}, {&(0x7f0000000b00)=""/98, 0x62}], 0x3}, 0x10022) sendmsg$kcm(r0, &(0x7f0000000fc0)={&(0x7f0000000c00)=@hci={0x1f, r7}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000e40)="5cd6ba916248be9370e2bb699c3c911e7161bbbef8c51ec805e9ba19a1a5523cdb68719db075e4d060121389a082201993a8b581f92789e6656fbfa49df89c4c9ff9af5d052cfa26cb6d66399b800348d320f90327cfe98141249651d771a550276ad03d59f807ea33f302e114168225922b23da350049096bb44827c1e1a648f3168e94cdcbc09a3b85e2042202da6eb1272c7aeffd67bacc10f37253eb632277d7037de3edeb96d083bb42478cce67a2b4208c0ee88080a08ce752529a11aedb7a3f5ad7750f6368a49fed05897a4fd39ec39cc2e9d9da9c63a655f13df9f1563db4efb9358a2c0840", 0xea}], 0x1}, 0x4040000) r8 = socket$kcm(0xa, 0x120000000003, 0x11) setsockopt$sock_attach_bpf(r8, 0x29, 0x7, &(0x7f0000000040), 0x4) r9 = openat$cgroup_ro(r6, &(0x7f0000000140)='pids.current\x00', 0x0, 0x0) write$cgroup_int(r9, &(0x7f0000000240)=0x9b, 0x12) ioctl$TUNSETOFFLOAD(r5, 0x400454d0, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000400)={r9, 0xf2, &(0x7f00000003c0)={&(0x7f00000002c0)=""/220, 0xdc, 0xffffffffffffffff}}, 0x10) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x40042409, 0x1) write$cgroup_subtree(r9, &(0x7f0000000280)={[{0x2d, 'cpu'}, {0x2d, 'io'}, {0x2b, 'cpu'}, {0x0, 'cpu'}, {0x2b, 'cpu'}, {0x2b, 'rdma'}]}, 0x1e) perf_event_open$cgroup(&(0x7f0000000500)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f00000000c0)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r10 = socket$kcm(0xa, 0x6, 0x0) socketpair(0x2200800000001, 0x40000000000001, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x8) ioctl$TUNGETVNETHDRSZ(r9, 0x800454d7, &(0x7f0000000580)) socketpair(0x1, 0x4, 0x100, &(0x7f0000000600)) ioctl$sock_kcm_SIOCKCMCLONE(r10, 0x890b, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r10, 0x890c, &(0x7f0000000000)) 11:37:03 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03', 0x2}) 11:37:03 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x8847, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:37:03 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SMI(r3, 0xaeb7) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000580)='/dev/sequencer\x00', 0x20280, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000680)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r4, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x9c, r5, 0x108, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3f}]}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x400}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x58}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x8000}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x6}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x50}, 0x4048000) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000380)={0x7325dbfa1278e647, 'bridge0\x00'}, 0x18) r7 = fcntl$dupfd(r3, 0x406, r3) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000540)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="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", @ANYRES16=r8, @ANYBLOB="00002dbd7000ffdbdf250100000000000000014100000018001700000015000000027564703a73797a3200000000"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x10) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000300)={{0x2, 0x4e24, @empty}, {0x307, @dev={[], 0x11}}, 0x8, {0x2, 0x4e20, @broadcast}, 'syzkaller0\x00'}) sendmsg$TIPC_NL_MON_GET(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x14c, r6, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0xec, 0x4, [@TIPC_NLA_LINK_PROP={0x54, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x39c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4616}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffff9}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1407}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3800000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x589}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}, @TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4040010) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a0000120800000088b070") 11:37:03 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x8848, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:37:03 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04', 0x2}) 11:37:03 executing program 4: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000740)='/dev/fuse\x00', 0x2, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000002000)=ANY=[], 0x0) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000540)='tls\x00', 0x4) r3 = openat$nullb(0xffffffffffffff9c, 0x0, 0x121041, 0x0) clock_settime(0x0, &(0x7f00000002c0)) stat(&(0x7f0000000680)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000006c0)='\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r4, r5) ioctl$DRM_IOCTL_ADD_BUFS(r2, 0xc0206416, &(0x7f0000000640)={0x200, 0x0, 0x9, 0x1, 0x4}) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x2, 0x4, 0x80, 0xffffffffffffffe0, 0x0, 0x6997, 0x0, 0x0, 0x3, 0x8, 0x8, 0x1f, 0xfffffffffffffcd1, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7f, 0x0, 0x6, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0xee, 0x0, 0x0, 0xe, 0x0, 0x200, 0x1, 0x0, 0x401, 0x4, @perf_config_ext={0x0, 0x7}, 0x0, 0x5, 0xfffffffffffffffb, 0x6, 0x0, 0x9, 0x7f}, 0x0, 0x7, r1, 0x8) mkdir(&(0x7f00000009c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mount(&(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$BLKIOOPT(r3, 0x1279, &(0x7f0000000180)) connect$tipc(r2, &(0x7f0000000400)=@id={0x1e, 0x3, 0x2, {0x4e20, 0x4}}, 0x10) rename(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000040)='./file0\x00') mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000780)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) umount2(&(0x7f00000004c0)='./file0\x00', 0x3) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000005c0)) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x200000, 0x0) recvfrom$unix(r6, &(0x7f0000000200)=""/73, 0x49, 0x2060, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e23}, 0x6e) ioctl$PPPIOCSMAXCID(r6, 0x40047451, &(0x7f00000001c0)=0x101) syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000003c0)=[{0x0, 0x0, 0x47b}], 0x0, 0x0) [ 760.361148] *** Guest State *** [ 760.364660] CR0: actual=0x0000000000050032, shadow=0x0000000000050012, gh_mask=fffffffffffffff7 [ 760.387111] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 760.396446] CR3 = 0x0000000000000000 [ 760.400268] RSP = 0x0000000000000000 RIP = 0x0000000000008000 [ 760.407010] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 760.413632] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 760.420558] CS: sel=0x3000, attr=0x08093, limit=0xffffffff, base=0x0000000000030000 11:37:03 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x8864, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) [ 760.490258] DS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 760.517952] SS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 11:37:03 executing program 1: socketpair(0xe6cb1487c486a1fe, 0x0, 0x8, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(r1, &(0x7f00000005c0)='rdma.current\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b400000000000000620100ff000000009500000000000000"], 0x0}, 0x48) close(r2) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000480)={&(0x7f0000000440)='./file0\x00', 0x0, 0x10}, 0x10) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f00000004c0)=r3) r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) recvmsg(r0, &(0x7f0000000bc0)={&(0x7f0000000940)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000009c0)=""/40, 0x28}, {&(0x7f0000000a00)=""/196, 0xc4}, {&(0x7f0000000b00)=""/98, 0x62}], 0x3}, 0x10022) sendmsg$kcm(r0, &(0x7f0000000fc0)={&(0x7f0000000c00)=@hci={0x1f, r7}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000e40)="5cd6ba916248be9370e2bb699c3c911e7161bbbef8c51ec805e9ba19a1a5523cdb68719db075e4d060121389a082201993a8b581f92789e6656fbfa49df89c4c9ff9af5d052cfa26cb6d66399b800348d320f90327cfe98141249651d771a550276ad03d59f807ea33f302e114168225922b23da350049096bb44827c1e1a648f3168e94cdcbc09a3b85e2042202da6eb1272c7aeffd67bacc10f37253eb632277d7037de3edeb96d083bb42478cce67a2b4208c0ee88080a08ce752529a11aedb7a3f5ad7750f6368a49fed05897a4fd39ec39cc2e9d9da9c63a655f13df9f1563db4efb9358a2c0840", 0xea}], 0x1}, 0x4040000) r8 = socket$kcm(0xa, 0x120000000003, 0x11) setsockopt$sock_attach_bpf(r8, 0x29, 0x7, &(0x7f0000000040), 0x4) r9 = openat$cgroup_ro(r6, &(0x7f0000000140)='pids.current\x00', 0x0, 0x0) write$cgroup_int(r9, &(0x7f0000000240)=0x9b, 0x12) ioctl$TUNSETOFFLOAD(r5, 0x400454d0, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000400)={r9, 0xf2, &(0x7f00000003c0)={&(0x7f00000002c0)=""/220, 0xdc, 0xffffffffffffffff}}, 0x10) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x40042409, 0x1) write$cgroup_subtree(r9, &(0x7f0000000280)={[{0x2d, 'cpu'}, {0x2d, 'io'}, {0x2b, 'cpu'}, {0x0, 'cpu'}, {0x2b, 'cpu'}, {0x2b, 'rdma'}]}, 0x1e) perf_event_open$cgroup(&(0x7f0000000500)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f00000000c0)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r10 = socket$kcm(0xa, 0x6, 0x0) socketpair(0x2200800000001, 0x40000000000001, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x8) ioctl$TUNGETVNETHDRSZ(r9, 0x800454d7, &(0x7f0000000580)) socketpair(0x1, 0x4, 0x100, &(0x7f0000000600)) ioctl$sock_kcm_SIOCKCMCLONE(r10, 0x890b, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r10, 0x890c, &(0x7f0000000000)) 11:37:03 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`', 0x2}) [ 760.561277] ES: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 760.571854] FS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 760.614524] GS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 760.623907] attempt to access beyond end of device [ 760.637362] loop4: rw=4096, want=136, limit=4 [ 760.653789] GDTR: limit=0x00000000, base=0x0000000000000000 [ 760.663161] gfs2: error 10 reading superblock [ 760.685183] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 760.712151] IDTR: limit=0x00000000, base=0x0000000000000000 [ 760.743930] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 760.763477] EFER = 0x0000000000006000 PAT = 0x0007040600070406 [ 760.780967] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 760.802038] Interruptibility = 00000008 ActivityState = 00000000 [ 760.814061] *** Host State *** [ 760.819123] RIP = 0xffffffff811b3710 RSP = 0xffff888056a0f8b8 [ 760.832369] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 760.840699] FSBase=00007f45eb8ae700 GSBase=ffff8880ae800000 TRBase=fffffe0000003000 [ 760.852021] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 760.860144] CR0=0000000080050033 CR3=00000000547df000 CR4=00000000001426f0 [ 760.867318] net_ratelimit: 21 callbacks suppressed [ 760.867327] protocol 88fb is buggy, dev hsr_slave_0 [ 760.867393] protocol 88fb is buggy, dev hsr_slave_1 [ 760.889531] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201360 [ 760.898714] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 760.904893] *** Control State *** [ 760.912154] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 760.920932] EntryControls=0000d1ff ExitControls=002fefff [ 760.930193] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 760.939227] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 760.946059] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 760.958177] reason=80000021 qualification=0000000000000000 [ 760.964638] IDTVectoring: info=00000000 errcode=00000000 [ 760.972757] TSC Offset = 0xfffffe6690af4e1f [ 760.989051] EPT pointer = 0x000000003c78501e [ 761.021071] *** Guest State *** [ 761.024382] CR0: actual=0x000000008005003f, shadow=0x000000008005001f, gh_mask=fffffffffffffff7 [ 761.033885] protocol 88fb is buggy, dev hsr_slave_0 [ 761.033954] protocol 88fb is buggy, dev hsr_slave_1 [ 761.051254] CR4: actual=0x0000000000002068, shadow=0x0000000000000028, gh_mask=ffffffffffffe871 [ 761.091244] CR3 = 0x0000000000000000 [ 761.095061] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 761.146332] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 761.158118] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 761.170529] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 761.180712] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 761.193720] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 761.203965] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 761.216100] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 761.226145] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 761.239775] GDTR: limit=0x00000000, base=0x0000000000000000 [ 761.249068] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 761.261571] IDTR: limit=0x00000000, base=0x0000000000000000 [ 761.270755] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 761.283685] EFER = 0x0000000000006500 PAT = 0x0007040600070406 [ 761.291251] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 761.303197] Interruptibility = 00000000 ActivityState = 00000000 [ 761.310718] *** Host State *** [ 761.314009] RIP = 0xffffffff811b3710 RSP = 0xffff88802b5bf8b8 [ 761.324987] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 761.332955] FSBase=00007f45eb86c700 GSBase=ffff8880ae900000 TRBase=fffffe0000003000 [ 761.345869] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 761.353017] CR0=0000000080050033 CR3=00000000547df000 CR4=00000000001426e0 [ 761.364928] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201360 [ 761.372922] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 761.384093] *** Control State *** [ 761.388802] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 761.395635] EntryControls=0000d3ff ExitControls=002fefff [ 761.420424] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 761.440423] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 761.460584] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 761.480488] reason=80000021 qualification=0000000000000000 [ 761.488175] IDTVectoring: info=00000000 errcode=00000000 [ 761.493722] TSC Offset = 0xfffffe663226d084 [ 761.502569] EPT pointer = 0x000000009915f01e [ 761.986255] protocol 88fb is buggy, dev hsr_slave_0 [ 761.986269] protocol 88fb is buggy, dev hsr_slave_0 [ 761.991360] protocol 88fb is buggy, dev hsr_slave_1 [ 761.996484] protocol 88fb is buggy, dev hsr_slave_1 [ 762.001443] protocol 88fb is buggy, dev hsr_slave_0 [ 762.006561] protocol 88fb is buggy, dev hsr_slave_0 11:37:06 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$packet(0x11, 0x2, 0x300) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000300)) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tun\x00\x9c;\x98\xfc\x06\x9f\x9fU\xd1\xc2\xec\x00'}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000340)={"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"}) poll(&(0x7f0000000100)=[{r4, 0x40}, {r5, 0xa8}, {r4, 0x2020}, {r1, 0x5716}, {r0, 0x400}, {r4, 0x4000}, {r3, 0x4}, {r3, 0x1013}], 0x8, 0x1) r6 = syz_open_dev$midi(&(0x7f00000002c0)='/dev/midi#\x00', 0x8, 0x200) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r6, &(0x7f0000000b00)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000ac0)={&(0x7f00000007c0)={0x2c4, r7, 0x21, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x19c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0xffffffff80000000, @empty, 0x5}}, {0x14, 0x2, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}}}}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8331}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffffffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, [], 0x18}, 0x2}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x7fffffff, @rand_addr="fa260bf04ee9d085c10989116398e01b", 0x1f}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x907, @dev={0xfe, 0x80, [], 0xd}, 0x2}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x6, @local, 0x3}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @broadcast}}, {0x14, 0x2, @in={0x2, 0x4e24, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x100000000, @dev={0xfe, 0x80, [], 0x22}, 0x4}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x1400000000, @rand_addr="8cd0074607b2dfc4862171b664c1e880"}}}}, @TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'bond_slave_1\x00'}}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffffffffffff8}]}, @TIPC_NLA_LINK={0x44, 0x4, [@TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}]}, @TIPC_NLA_BEARER={0xc4, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @broadcast}}, {0x14, 0x2, @in={0x2, 0x4e21, @local}}}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xbdef}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x67}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xbe9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4a14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x10001}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'eth', 0x3a, 'nr0\x00'}}]}]}, 0x2c4}}, 0x4000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0xaaaaaaaaaaaadd7, 0x0, 0x0, 0x181) ioctl$KVM_RUN(r5, 0xae80, 0x0) socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000000)=@req3={0x6000000, 0x3, 0x6000000, 0x3}, 0x1c) r8 = socket(0xa, 0xe, 0x100) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0), 0x10) setsockopt$RXRPC_SECURITY_KEYRING(r8, 0x110, 0x2, &(0x7f0000000040)='$./\x92.{vmnet0self!\x00', 0x12) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RFLUSH(r9, &(0x7f0000000280)={0x7, 0x6d, 0x2}, 0x7) setsockopt$packet_int(r2, 0x107, 0x9, &(0x7f0000000080), 0x4) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r6, 0x80845663, &(0x7f0000000b40)={0x0, @reserved}) 11:37:06 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x8906, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:37:06 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00', 0x2}) 11:37:06 executing program 4: socketpair(0xe6cb1487c486a1fe, 0x0, 0x8, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(r1, &(0x7f00000005c0)='rdma.current\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b400000000000000620100ff000000009500000000000000"], 0x0}, 0x48) close(r2) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000480)={&(0x7f0000000440)='./file0\x00', 0x0, 0x10}, 0x10) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f00000004c0)=r3) r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) recvmsg(r0, &(0x7f0000000bc0)={&(0x7f0000000940)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000009c0)=""/40, 0x28}, {&(0x7f0000000a00)=""/196, 0xc4}, {&(0x7f0000000b00)=""/98, 0x62}], 0x3}, 0x10022) sendmsg$kcm(r0, &(0x7f0000000fc0)={&(0x7f0000000c00)=@hci={0x1f, r7}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000e40)="5cd6ba916248be9370e2bb699c3c911e7161bbbef8c51ec805e9ba19a1a5523cdb68719db075e4d060121389a082201993a8b581f92789e6656fbfa49df89c4c9ff9af5d052cfa26cb6d66399b800348d320f90327cfe98141249651d771a550276ad03d59f807ea33f302e114168225922b23da350049096bb44827c1e1a648f3168e94cdcbc09a3b85e2042202da6eb1272c7aeffd67bacc10f37253eb632277d7037de3edeb96d083bb42478cce67a2b4208c0ee88080a08ce752529a11aedb7a3f5ad7750f6368a49fed05897a4fd39ec39cc2e9d9da9c63a655f13df9f1563db4efb9358a2c0840", 0xea}], 0x1}, 0x4040000) r8 = socket$kcm(0xa, 0x120000000003, 0x11) setsockopt$sock_attach_bpf(r8, 0x29, 0x7, &(0x7f0000000040), 0x4) r9 = openat$cgroup_ro(r6, &(0x7f0000000140)='pids.current\x00', 0x0, 0x0) write$cgroup_int(r9, &(0x7f0000000240)=0x9b, 0x12) ioctl$TUNSETOFFLOAD(r5, 0x400454d0, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000400)={r9, 0xf2, &(0x7f00000003c0)={&(0x7f00000002c0)=""/220, 0xdc, 0xffffffffffffffff}}, 0x10) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x40042409, 0x1) write$cgroup_subtree(r9, &(0x7f0000000280)={[{0x2d, 'cpu'}, {0x2d, 'io'}, {0x2b, 'cpu'}, {0x0, 'cpu'}, {0x2b, 'cpu'}, {0x2b, 'rdma'}]}, 0x1e) perf_event_open$cgroup(&(0x7f0000000500)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f00000000c0)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r10 = socket$kcm(0xa, 0x6, 0x0) socketpair(0x2200800000001, 0x40000000000001, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x8) ioctl$TUNGETVNETHDRSZ(r9, 0x800454d7, &(0x7f0000000580)) socketpair(0x1, 0x4, 0x100, &(0x7f0000000600)) ioctl$sock_kcm_SIOCKCMCLONE(r10, 0x890b, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r10, 0x890c, &(0x7f0000000000)) 11:37:06 executing program 1: socketpair(0xe6cb1487c486a1fe, 0x0, 0x8, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(r1, &(0x7f00000005c0)='rdma.current\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b400000000000000620100ff000000009500000000000000"], 0x0}, 0x48) close(r2) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000480)={&(0x7f0000000440)='./file0\x00', 0x0, 0x10}, 0x10) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f00000004c0)=r3) r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) recvmsg(r0, &(0x7f0000000bc0)={&(0x7f0000000940)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000009c0)=""/40, 0x28}, {&(0x7f0000000a00)=""/196, 0xc4}, {&(0x7f0000000b00)=""/98, 0x62}], 0x3}, 0x10022) sendmsg$kcm(r0, &(0x7f0000000fc0)={&(0x7f0000000c00)=@hci={0x1f, r7}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000e40)="5cd6ba916248be9370e2bb699c3c911e7161bbbef8c51ec805e9ba19a1a5523cdb68719db075e4d060121389a082201993a8b581f92789e6656fbfa49df89c4c9ff9af5d052cfa26cb6d66399b800348d320f90327cfe98141249651d771a550276ad03d59f807ea33f302e114168225922b23da350049096bb44827c1e1a648f3168e94cdcbc09a3b85e2042202da6eb1272c7aeffd67bacc10f37253eb632277d7037de3edeb96d083bb42478cce67a2b4208c0ee88080a08ce752529a11aedb7a3f5ad7750f6368a49fed05897a4fd39ec39cc2e9d9da9c63a655f13df9f1563db4efb9358a2c0840", 0xea}], 0x1}, 0x4040000) r8 = socket$kcm(0xa, 0x120000000003, 0x11) setsockopt$sock_attach_bpf(r8, 0x29, 0x7, &(0x7f0000000040), 0x4) r9 = openat$cgroup_ro(r6, &(0x7f0000000140)='pids.current\x00', 0x0, 0x0) write$cgroup_int(r9, &(0x7f0000000240)=0x9b, 0x12) ioctl$TUNSETOFFLOAD(r5, 0x400454d0, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000400)={r9, 0xf2, &(0x7f00000003c0)={&(0x7f00000002c0)=""/220, 0xdc, 0xffffffffffffffff}}, 0x10) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x40042409, 0x1) write$cgroup_subtree(r9, &(0x7f0000000280)={[{0x2d, 'cpu'}, {0x2d, 'io'}, {0x2b, 'cpu'}, {0x0, 'cpu'}, {0x2b, 'cpu'}, {0x2b, 'rdma'}]}, 0x1e) perf_event_open$cgroup(&(0x7f0000000500)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f00000000c0)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r10 = socket$kcm(0xa, 0x6, 0x0) socketpair(0x2200800000001, 0x40000000000001, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x8) ioctl$TUNGETVNETHDRSZ(r9, 0x800454d7, &(0x7f0000000580)) socketpair(0x1, 0x4, 0x100, &(0x7f0000000600)) ioctl$sock_kcm_SIOCKCMCLONE(r10, 0x890b, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r10, 0x890c, &(0x7f0000000000)) 11:37:06 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f00000000c0)={0x8, 0xa6, 0x7, 0x0, 0x0, [], [], [], 0x7fffffff}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SMI(r4, 0xaeb7) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r4, 0xae80, 0x0) fcntl$addseals(r3, 0x409, 0x2) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0a0000120800000088b070") 11:37:06 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe8', 0x2}) 11:37:06 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0xf000, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:37:06 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="14bc42000000000000000000000800000900de56b5000000000800000000080008000100000008000500ac14141b080003000100000f01"], 0x1}}, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="00ff04da3019d947"], 0x1}}, 0x0) open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0) syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0xaaaaaaaaaaaace6, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000010000/0x1000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:37:06 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SMI(r3, 0xaeb7) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a0000120800000088b070") 11:37:06 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00', 0x2}) 11:37:06 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x1414ac, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:37:06 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$packet(0x11, 0x2, 0x300) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xc0000, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f00000000c0)={0x0, 0x6b, "6176f2dc1bbcce558202877f6da3739a683bbb14f9fb52060b35128d43ea2ef1c72ebafa755893c8092fd354ad5ad2681c991ce6f7f5b9f94d7666f0642094c6469cb9189a715d685b8701a3505ecd4228e316b6ca36dab77ab553660a2d46e92b9032baffff601801db3b"}, &(0x7f0000000140)=0x73) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f0000000180)={r4, 0x1}, 0x8) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000000)=@req3={0x6000000, 0x3, 0x6000000, 0x3}, 0x1c) setsockopt$packet_int(r2, 0x107, 0x9, &(0x7f0000000080), 0x4) 11:37:06 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) [ 763.484472] *** Guest State *** [ 763.500187] CR0: actual=0x0000000000050032, shadow=0x0000000000050012, gh_mask=fffffffffffffff7 [ 763.516379] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 763.553674] CR3 = 0x0000000000000000 11:37:06 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00', 0x2}) [ 763.580362] RSP = 0x0000000000000000 RIP = 0x0000000000008000 11:37:06 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x8000a0, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) [ 763.629522] RFLAGS=0x00000002 DR7 = 0x0000000000000400 11:37:06 executing program 4: r0 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/current\x00', 0x2, 0x0) fsync(0xffffffffffffffff) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x100000000008005) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000080)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) accept$inet(r0, 0x0, 0x0) syncfs(r2) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_GET_SECUREBITS(0x1b) recvmmsg(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x400, 0x0) write$FUSE_NOTIFY_POLL(r2, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='\x00\xea\x17') r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") syz_emit_ethernet(0x0, 0x0, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0x14, r5, 0x10}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) [ 763.699620] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 763.798694] CS: sel=0x3000, attr=0x08093, limit=0xffffffff, base=0x0000000000030000 11:37:06 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03', 0x2}) 11:37:07 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0xf0ffff, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) [ 763.859613] DS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 763.896377] SS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 763.935421] ES: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 763.982651] FS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 764.021752] GS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 11:37:07 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x1000000, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:37:07 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00', 0x2}) [ 764.092200] GDTR: limit=0x00000000, base=0x0000000000000000 [ 764.119683] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 764.131247] IDTR: limit=0x00000000, base=0x0000000000000000 [ 764.142547] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 764.164380] EFER = 0x0000000000006000 PAT = 0x0007040600070406 [ 764.215302] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 764.281526] Interruptibility = 00000008 ActivityState = 00000000 [ 764.312654] *** Host State *** [ 764.356773] RIP = 0xffffffff811b3710 RSP = 0xffff888035bb78b8 [ 764.420846] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 764.446344] FSBase=00007f45eb8ae700 GSBase=ffff8880ae900000 TRBase=fffffe0000033000 [ 764.475056] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 764.493587] CR0=0000000080050033 CR3=0000000058ba3000 CR4=00000000001426e0 [ 764.516281] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87201360 [ 764.523070] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 764.536242] *** Control State *** [ 764.539786] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 764.557087] EntryControls=0000d1ff ExitControls=002fefff [ 764.562637] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 764.576256] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 764.583092] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 764.596244] reason=80000021 qualification=0000000000000000 [ 764.602653] IDTVectoring: info=00000000 errcode=00000000 [ 764.616249] TSC Offset = 0xfffffe64e341b9a8 [ 764.620664] EPT pointer = 0x0000000028c8501e 11:37:07 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SMI(r3, 0xaeb7) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a0000120800000088b070") r4 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x1ff, 0x101000) setsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f0000000180)={0xb4}, 0x2) ioctl$VIDIOC_S_JPEGCOMP(r4, 0x408c563e, &(0x7f00000000c0)={0x2, 0xa, 0x10, "82debe9352865c47ea3533aaf617a7d189f7dff03818a99b8edc65104b33e9506353898954cc9f7c176ad7284170f3fa301342819eca77f9be0468bf", 0xc, "83f12be4c9f3da6a0a2a92538dba473e03516a4d81af2c6ccad96db7da81b960cc0d8223827c5a960ffc12a6628298d3bbe29f4736e7e0f93591f4a3", 0x8}) 11:37:07 executing program 4: 11:37:07 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x2000000, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) [ 764.767555] *** Guest State *** [ 764.770975] CR0: actual=0x0000000000050032, shadow=0x0000000000050012, gh_mask=fffffffffffffff7 [ 764.786282] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 764.806265] CR3 = 0x0000000000000000 [ 764.810090] RSP = 0x0000000000000000 RIP = 0x0000000000008000 [ 764.817569] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 764.824572] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 764.836289] CS: sel=0x3000, attr=0x08093, limit=0xffffffff, base=0x0000000000030000 [ 764.844398] DS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 764.856295] SS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 764.876291] ES: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 764.884409] FS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 764.892576] GS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 764.900708] GDTR: limit=0x00000000, base=0x0000000000000000 [ 764.916276] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 764.936335] IDTR: limit=0x00000000, base=0x0000000000000000 [ 764.944472] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 764.966285] EFER = 0x0000000000006000 PAT = 0x0007040600070406 [ 764.972828] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 764.986278] Interruptibility = 00000008 ActivityState = 00000000 [ 764.992635] *** Host State *** [ 765.006287] RIP = 0xffffffff811b3710 RSP = 0xffff88804a9ef8b8 [ 765.012437] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 765.026274] FSBase=00007f45eb8ae700 GSBase=ffff8880ae900000 TRBase=fffffe0000033000 [ 765.034373] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 765.046302] CR0=0000000080050033 CR3=00000000295b9000 CR4=00000000001426e0 [ 765.056279] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87201360 [ 765.077081] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 765.083267] *** Control State *** [ 765.086888] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 765.107001] EntryControls=0000d1ff ExitControls=002fefff [ 765.112607] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 765.126272] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 765.133072] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 765.146273] reason=80000021 qualification=0000000000000000 [ 765.156269] IDTVectoring: info=00000000 errcode=00000000 [ 765.166285] TSC Offset = 0xfffffe64333a18f8 [ 765.170730] EPT pointer = 0x00000000a916001e [ 766.146263] net_ratelimit: 18 callbacks suppressed [ 766.146271] protocol 88fb is buggy, dev hsr_slave_0 [ 766.146450] protocol 88fb is buggy, dev hsr_slave_1 [ 766.151314] protocol 88fb is buggy, dev hsr_slave_1 [ 766.156422] protocol 88fb is buggy, dev hsr_slave_0 [ 766.161393] protocol 88fb is buggy, dev hsr_slave_0 [ 766.166377] protocol 88fb is buggy, dev hsr_slave_1 [ 766.171387] protocol 88fb is buggy, dev hsr_slave_1 11:37:09 executing program 0: 11:37:09 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00', 0x2}) 11:37:09 executing program 1: 11:37:09 executing program 4: 11:37:09 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x3000000, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:37:09 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x5, 0x18000) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000000c0)={0x0, 0x100, 0xffffffffffffffff, 0x7, 0x1, 0x0, 0x190, 0xf04, {0x0, @in={{0x2, 0x4e21, @multicast2}}, 0x1, 0x200, 0x0, 0x1, 0x1000}}, &(0x7f0000000180)=0xb0) setsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000001c0)={r2, 0x3, 0x2, 0x100000, 0x5, 0x800}, 0x14) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SMI(r5, 0xaeb7) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a0000120800000088b070") 11:37:09 executing program 4: 11:37:09 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x4000000, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:37:09 executing program 0: 11:37:09 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00', 0x2}) 11:37:09 executing program 1: [ 766.589475] *** Guest State *** [ 766.592805] CR0: actual=0x0000000000050032, shadow=0x0000000000050012, gh_mask=fffffffffffffff7 [ 766.646359] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 11:37:09 executing program 4: 11:37:09 executing program 0: [ 766.686905] CR3 = 0x0000000000000000 [ 766.690788] RSP = 0x0000000000000000 RIP = 0x0000000000008000 [ 766.709959] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 766.723573] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 11:37:09 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x6000000, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:37:09 executing program 1: [ 766.733960] CS: sel=0x3000, attr=0x08093, limit=0xffffffff, base=0x0000000000030000 [ 766.745236] DS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 11:37:09 executing program 4: 11:37:09 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00', 0x2}) [ 766.796452] SS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 766.804482] ES: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 766.895067] FS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 766.908023] GS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 766.916684] GDTR: limit=0x00000000, base=0x0000000000000000 [ 766.924748] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 766.933215] IDTR: limit=0x00000000, base=0x0000000000000000 [ 766.941474] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 766.949886] EFER = 0x0000000000006000 PAT = 0x0007040600070406 [ 766.956590] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 766.964190] Interruptibility = 00000008 ActivityState = 00000000 [ 766.970714] *** Host State *** [ 766.973987] RIP = 0xffffffff811b3710 RSP = 0xffff88802600f8b8 [ 766.980255] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 766.986780] FSBase=00007f45eb8ae700 GSBase=ffff8880ae900000 TRBase=fffffe0000003000 [ 766.994836] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 767.000985] CR0=0000000080050033 CR3=00000000a3ef0000 CR4=00000000001426e0 [ 767.008072] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201360 [ 767.014897] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 767.021025] *** Control State *** [ 767.024644] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 767.031594] EntryControls=0000d1ff ExitControls=002fefff [ 767.037111] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 767.044185] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 767.050925] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 767.057712] reason=80000021 qualification=0000000000000000 [ 767.064036] IDTVectoring: info=00000000 errcode=00000000 [ 767.069807] TSC Offset = 0xfffffe633adcc22b [ 767.074294] EPT pointer = 0x0000000038eef01e [ 767.106250] protocol 88fb is buggy, dev hsr_slave_0 [ 767.111340] protocol 88fb is buggy, dev hsr_slave_1 11:37:10 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) getsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000), &(0x7f00000000c0)=0x4) ioctl$KVM_SMI(r3, 0xaeb7) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a0000120800000088b070") 11:37:10 executing program 4: 11:37:10 executing program 1: 11:37:10 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00', 0x2}) 11:37:10 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x7000000, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:37:10 executing program 0: 11:37:10 executing program 0: 11:37:10 executing program 1: 11:37:10 executing program 4: 11:37:10 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00', 0x2}) 11:37:10 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x8000000, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) [ 767.266580] protocol 88fb is buggy, dev hsr_slave_0 11:37:10 executing program 1: [ 767.330885] *** Guest State *** [ 767.334211] CR0: actual=0x0000000000050032, shadow=0x0000000000050012, gh_mask=fffffffffffffff7 [ 767.378972] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 767.413685] CR3 = 0x0000000000000000 [ 767.432535] RSP = 0x0000000000000000 RIP = 0x0000000000008000 [ 767.446321] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 767.452402] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 767.459534] CS: sel=0x3000, attr=0x08093, limit=0xffffffff, base=0x0000000000030000 [ 767.467767] DS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 767.475836] SS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 767.484087] ES: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 767.492565] FS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 767.500764] GS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 767.508969] GDTR: limit=0x00000000, base=0x0000000000000000 [ 767.517180] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 767.525251] IDTR: limit=0x00000000, base=0x0000000000000000 [ 767.533465] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 767.541702] EFER = 0x0000000000006000 PAT = 0x0007040600070406 [ 767.548327] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 767.555859] Interruptibility = 00000008 ActivityState = 00000000 [ 767.562299] *** Host State *** [ 767.565596] RIP = 0xffffffff811b3710 RSP = 0xffff888038e878b8 [ 767.571799] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 767.578421] FSBase=00007f45eb8ae700 GSBase=ffff8880ae900000 TRBase=fffffe0000003000 [ 767.586453] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 767.592431] CR0=0000000080050033 CR3=0000000026e43000 CR4=00000000001426e0 [ 767.599690] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201360 [ 767.606607] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 767.612747] *** Control State *** [ 767.616407] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 767.623168] EntryControls=0000d1ff ExitControls=002fefff [ 767.628843] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 767.635855] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 767.642753] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 767.649703] reason=80000021 qualification=0000000000000000 [ 767.656105] IDTVectoring: info=00000000 errcode=00000000 [ 767.661883] TSC Offset = 0xfffffe62d620602e [ 767.666525] EPT pointer = 0x000000002023601e 11:37:10 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket(0x9, 0x5, 0x7) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0x4) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000180)={0x80, 0x80000001, 0x100000000, 0x74e0, 0x7, 0x5, 0x4, 0x4, 0x2, 0x1, 0x80000001}, 0xb) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socket$l2tp(0x18, 0x1, 0x1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SMI(r4, 0xaeb7) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) r5 = syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0x5, 0x2) ioctl$BLKDISCARD(r5, 0x1277, &(0x7f00000001c0)=0x39a) ioctl$KVM_RUN(r4, 0xae80, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f00000000c0)={0x0, 0x40}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000002c0)=@sack_info={r6, 0x69, 0x2}, 0xfffffffffffffed6) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a0000120800000088b070") 11:37:10 executing program 4: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/4\x00') 11:37:10 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff', 0x2}) 11:37:10 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r1, 0x80000000000000bd) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f00000001c0)='j', 0x1, 0x0, 0x0, 0x0) socket$pppoe(0x18, 0x1, 0x0) close(r2) accept4(r1, 0x0, 0x0, 0x0) close(r2) 11:37:10 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x8060000, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:37:10 executing program 1: mkdir(&(0x7f0000000500)='./file0\x00', 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000000)='./file0\x00', 0x0, r0) 11:37:10 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0xb000000, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:37:10 executing program 1: 11:37:10 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00', 0x2}) [ 767.862656] *** Guest State *** 11:37:11 executing program 0: 11:37:11 executing program 4: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x7000000, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) [ 767.885395] CR0: actual=0x0000000000050032, shadow=0x0000000000050012, gh_mask=fffffffffffffff7 11:37:11 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`', 0x2}) [ 767.957221] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 767.966100] CR3 = 0x0000000000000000 [ 767.985201] RSP = 0x0000000000000000 RIP = 0x0000000000008000 [ 767.998051] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 768.004134] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 768.014605] CS: sel=0x3000, attr=0x08093, limit=0xffffffff, base=0x0000000000030000 [ 768.040232] DS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 768.057634] SS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 768.065719] ES: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 768.081511] FS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 768.090893] GS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 768.103778] GDTR: limit=0x00000000, base=0x0000000000000000 [ 768.112911] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 768.125786] IDTR: limit=0x00000000, base=0x0000000000000000 [ 768.155056] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 768.168986] EFER = 0x0000000000006000 PAT = 0x0007040600070406 [ 768.175413] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 768.189293] Interruptibility = 00000008 ActivityState = 00000000 [ 768.195533] *** Host State *** [ 768.201705] RIP = 0xffffffff811b3710 RSP = 0xffff888053acf8b8 [ 768.211471] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 768.220812] FSBase=00007f45eb8ae700 GSBase=ffff8880ae900000 TRBase=fffffe0000033000 [ 768.232047] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 768.241089] CR0=0000000080050033 CR3=0000000026e43000 CR4=00000000001426e0 [ 768.251214] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87201360 [ 768.260808] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 768.269806] *** Control State *** [ 768.273270] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 768.282844] EntryControls=0000d1ff ExitControls=002fefff [ 768.291255] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 768.301160] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 768.310838] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 768.320412] reason=80000021 qualification=0000000000000000 [ 768.329676] IDTVectoring: info=00000000 errcode=00000000 [ 768.335133] TSC Offset = 0xfffffe628caa5ab3 [ 768.343378] EPT pointer = 0x0000000022fe901e 11:37:11 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0xd000000, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:37:11 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff', 0x2}) 11:37:11 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SMI(r3, 0xaeb7) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c00000009000000010000000f0000000000000000300000000000000e00000016", 0x31, 0x1400}], 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a0000120800000088b070") 11:37:11 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SMI(r3, 0xaeb7) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a0000120800000088b070") personality(0x5000007) 11:37:11 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\xe8\x00', 0x2}) 11:37:11 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x40, 0x20300) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f0000000200)={0x16, 0x98, 0xfa00, {&(0x7f0000000140), 0x3, r3, 0x10, 0x0, @in={0x2, 0x4e24, @local}}}, 0xa0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_SMI(r4, 0xaeb7) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x400, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl(r1, 0x1000008914, &(0x7f0000000000)="0a0000120800000088b070") setsockopt$inet_buf(r0, 0x0, 0x2e, &(0x7f00000002c0)="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", 0xff) 11:37:11 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x11000000, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:37:11 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff', 0x2}) 11:37:11 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SMI(r3, 0xaeb7) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40086607, &(0x7f0000000000)=0x8) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a0000120800000088b070") 11:37:11 executing program 1: r0 = socket$inet_sctp(0x2, 0x1000000000000005, 0x84) accept$inet(0xffffffffffffffff, &(0x7f0000000740)={0x2, 0x0, @dev}, &(0x7f0000000780)=0x10) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f00000000c0)) chown(&(0x7f00000001c0)='./file0\x00', r3, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="020000000100000000000000040000000000000008000200", @ANYRES32=0x0, @ANYBLOB="080000002c25185a9b54661601000000d5064ba8df0f291155097a5e94c87f1ad1aebb845e04da209f954696c77124fa8b8a168f64ed67f2f92b07090ffef23bdcdeb9e0fb97366e2eb235f8f90a26bee25c2f5a946ee19804d47e49648290d9f3625cfaae9966b0e66400137a3a61240e10d4106067be54ace5e9272eccd55f8ad6542d7641373c7ee570ff295efd7e8cd25d8ff1f0bb8a88043b4047a6394be973f0f55db93fef", @ANYRES32=r4, @ANYBLOB="10000200000000002000000000000000"], 0x34, 0x1) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) lstat(&(0x7f0000000600)='./file0/file0\x00', &(0x7f0000000540)) ioprio_set$uid(0x3, r3, 0x8000) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000240)=""/246) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', &(0x7f0000000480)='bpf\x00', 0x2, &(0x7f0000000640)={[{@mode={'mode', 0x3d, 0x4}}, {@mode={'mode'}}, {@mode={'mode', 0x3d, 0x3ff}}, {@mode={'mode', 0x3d, 0x6}}, {@mode={'mode'}}], [{@audit='audit'}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}]}) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40047451, &(0x7f0000000000)=""/174) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000300)={0x0, @in={{0x2, 0x0, @multicast1}}}, 0x0) [ 768.538346] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 768.546738] *** Guest State *** [ 768.550045] CR0: actual=0x0000000000050032, shadow=0x0000000000050012, gh_mask=fffffffffffffff7 [ 768.557927] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 768.598094] *** Guest State *** [ 768.598424] F2FS-fs (loop0): Wrong secs_per_zone / total_sections (15, 14) [ 768.601413] CR0: actual=0x0000000000050032, shadow=0x0000000000050012, gh_mask=fffffffffffffff7 [ 768.601429] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 768.601436] CR3 = 0x0000000000000000 [ 768.601444] RSP = 0x0000000000000000 RIP = 0x0000000000008000 [ 768.601456] RFLAGS=0x00000002 DR7 = 0x0000000000000400 11:37:11 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x14000000, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) [ 768.601472] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 768.636838] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 768.661609] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock 11:37:11 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff', 0x2}) [ 768.704220] *** Guest State *** [ 768.710833] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 768.711931] CR0: actual=0x0000000000050032, shadow=0x0000000000050012, gh_mask=fffffffffffffff7 [ 768.737895] CR3 = 0x0000000000000000 [ 768.743055] RSP = 0x0000000000000000 RIP = 0x0000000000008000 11:37:11 executing program 1: r0 = socket$inet_sctp(0x2, 0x1000000000000005, 0x84) accept$inet(0xffffffffffffffff, &(0x7f0000000740)={0x2, 0x0, @dev}, &(0x7f0000000780)=0x10) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f00000000c0)) chown(&(0x7f00000001c0)='./file0\x00', r3, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="020000000100000000000000040000000000000008000200", @ANYRES32=0x0, @ANYBLOB="080000002c25185a9b54661601000000d5064ba8df0f291155097a5e94c87f1ad1aebb845e04da209f954696c77124fa8b8a168f64ed67f2f92b07090ffef23bdcdeb9e0fb97366e2eb235f8f90a26bee25c2f5a946ee19804d47e49648290d9f3625cfaae9966b0e66400137a3a61240e10d4106067be54ace5e9272eccd55f8ad6542d7641373c7ee570ff295efd7e8cd25d8ff1f0bb8a88043b4047a6394be973f0f55db93fef", @ANYRES32=r4, @ANYBLOB="10000200000000002000000000000000"], 0x34, 0x1) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) lstat(&(0x7f0000000600)='./file0/file0\x00', &(0x7f0000000540)) ioprio_set$uid(0x3, r3, 0x8000) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000240)=""/246) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', &(0x7f0000000480)='bpf\x00', 0x2, &(0x7f0000000640)={[{@mode={'mode', 0x3d, 0x4}}, {@mode={'mode'}}, {@mode={'mode', 0x3d, 0x3ff}}, {@mode={'mode', 0x3d, 0x6}}, {@mode={'mode'}}], [{@audit='audit'}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}]}) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40047451, &(0x7f0000000000)=""/174) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000300)={0x0, @in={{0x2, 0x0, @multicast1}}}, 0x0) 11:37:11 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x1c000000, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) [ 768.762570] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 768.771877] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 768.793029] CR3 = 0x0000000000000000 [ 768.802960] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 768.812948] RSP = 0x0000000000000000 RIP = 0x0000000000008000 [ 768.825618] CS: sel=0x3000, attr=0x08093, limit=0xffffffff, base=0x0000000000030000 [ 768.835749] CS: sel=0x3000, attr=0x08093, limit=0xffffffff, base=0x0000000000030000 [ 768.857930] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 768.864083] DS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 768.879161] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 768.891793] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 768.900168] SS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 768.913839] F2FS-fs (loop0): Wrong secs_per_zone / total_sections (15, 14) [ 768.922284] CS: sel=0x3000, attr=0x08093, limit=0xffffffff, base=0x0000000000030000 [ 768.935127] ES: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 768.945291] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 768.958708] FS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 768.963356] DS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 768.969717] DS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 768.974871] SS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 768.983522] GS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 769.005025] SS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 769.014207] ES: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 769.031195] GDTR: limit=0x00000000, base=0x0000000000000000 [ 769.036317] ES: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 769.043338] FS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 769.061069] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 769.070397] GS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 769.083789] IDTR: limit=0x00000000, base=0x0000000000000000 [ 769.087088] FS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 769.093035] GDTR: limit=0x00000000, base=0x0000000000000000 [ 769.115034] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 769.116320] GS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 769.123423] EFER = 0x0000000000006000 PAT = 0x0007040600070406 [ 769.137786] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 769.143483] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 769.145780] IDTR: limit=0x00000000, base=0x0000000000000000 [ 769.145800] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 769.145811] EFER = 0x0000000000006000 PAT = 0x0007040600070406 [ 769.145823] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 769.145833] Interruptibility = 00000008 ActivityState = 00000000 [ 769.145838] *** Host State *** [ 769.145849] RIP = 0xffffffff811b3710 RSP = 0xffff888051baf8b8 [ 769.153887] Interruptibility = 00000008 ActivityState = 00000000 [ 769.176324] GDTR: limit=0x00000000, base=0x0000000000000000 [ 769.189923] *** Host State *** [ 769.206314] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 769.219475] RIP = 0xffffffff811b3710 RSP = 0xffff8880534478b8 [ 769.226279] IDTR: limit=0x00000000, base=0x0000000000000000 [ 769.233861] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 769.257389] FSBase=00007f8d1998d700 GSBase=ffff8880ae900000 TRBase=fffffe0000033000 [ 769.276484] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 769.277670] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 769.284591] EFER = 0x0000000000006000 PAT = 0x0007040600070406 [ 769.296859] CR0=0000000080050033 CR3=00000000496bd000 CR4=00000000001426e0 [ 769.297049] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 769.304061] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87201360 [ 769.323188] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 769.326324] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 769.336874] *** Control State *** [ 769.337119] FSBase=00007f45eb8ae700 GSBase=ffff8880ae900000 TRBase=fffffe0000033000 [ 769.340328] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 769.340336] EntryControls=0000d1ff ExitControls=002fefff [ 769.340351] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 769.340360] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 769.340369] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 769.340377] reason=80000021 qualification=0000000000000000 [ 769.340387] IDTVectoring: info=00000000 errcode=00000000 [ 769.354281] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 769.366272] Interruptibility = 00000008 ActivityState = 00000000 [ 769.372899] CR0=0000000080050033 CR3=0000000059177000 CR4=00000000001426e0 [ 769.386205] *** Host State *** [ 769.392597] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87201360 [ 769.398449] TSC Offset = 0xfffffe622f2b1e22 [ 769.398458] EPT pointer = 0x0000000038ea701e [ 769.406036] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 769.411936] RIP = 0xffffffff811b3710 RSP = 0xffff88804e1578b8 [ 769.421002] *** Control State *** [ 769.439328] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 769.455191] EntryControls=0000d1ff ExitControls=002fefff [ 769.456277] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 769.464591] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 769.467197] FSBase=00007f1384d7c700 GSBase=ffff8880ae900000 TRBase=fffffe0000003000 [ 769.467209] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 769.467223] CR0=0000000080050033 CR3=0000000020257000 CR4=00000000001426e0 [ 769.491474] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 769.525891] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 769.532764] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201360 [ 769.539610] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 769.544987] reason=80000021 qualification=0000000000000000 [ 769.552084] *** Control State *** [ 769.555624] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 769.557633] IDTVectoring: info=00000000 errcode=00000000 [ 769.573696] TSC Offset = 0xfffffe6215f5ece8 [ 769.576260] EntryControls=0000d1ff ExitControls=002fefff [ 769.578608] EPT pointer = 0x000000009038501e [ 769.583597] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 769.596253] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 769.616403] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 769.652179] reason=80000021 qualification=0000000000000000 [ 769.679701] IDTVectoring: info=00000000 errcode=00000000 [ 769.685188] TSC Offset = 0xfffffe6233d98e13 [ 769.697945] EPT pointer = 0x0000000038edb01e 11:37:12 executing program 0: r0 = socket$inet_sctp(0x2, 0x1000000000000005, 0x84) accept$inet(0xffffffffffffffff, &(0x7f0000000740)={0x2, 0x0, @dev}, &(0x7f0000000780)=0x10) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f00000000c0)) chown(&(0x7f00000001c0)='./file0\x00', r3, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="020000000100000000000000040000000000000008000200", @ANYRES32=0x0, @ANYBLOB="080000002c25185a9b54661601000000d5064ba8df0f291155097a5e94c87f1ad1aebb845e04da209f954696c77124fa8b8a168f64ed67f2f92b07090ffef23bdcdeb9e0fb97366e2eb235f8f90a26bee25c2f5a946ee19804d47e49648290d9f3625cfaae9966b0e66400137a3a61240e10d4106067be54ace5e9272eccd55f8ad6542d7641373c7ee570ff295efd7e8cd25d8ff1f0bb8a88043b4047a6394be973f0f55db93fef", @ANYRES32=r4, @ANYBLOB="10000200000000002000000000000000"], 0x34, 0x1) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) lstat(&(0x7f0000000600)='./file0/file0\x00', &(0x7f0000000540)) ioprio_set$uid(0x3, r3, 0x8000) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000240)=""/246) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', &(0x7f0000000480)='bpf\x00', 0x2, &(0x7f0000000640)={[{@mode={'mode', 0x3d, 0x4}}, {@mode={'mode'}}, {@mode={'mode', 0x3d, 0x3ff}}, {@mode={'mode', 0x3d, 0x6}}, {@mode={'mode'}}], [{@audit='audit'}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}]}) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40047451, &(0x7f0000000000)=""/174) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000300)={0x0, @in={{0x2, 0x0, @multicast1}}}, 0x0) 11:37:12 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xfd', 0x2}) 11:37:12 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20000000, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:37:12 executing program 1: r0 = socket$inet_sctp(0x2, 0x1000000000000005, 0x84) accept$inet(0xffffffffffffffff, &(0x7f0000000740)={0x2, 0x0, @dev}, &(0x7f0000000780)=0x10) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f00000000c0)) chown(&(0x7f00000001c0)='./file0\x00', r3, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="020000000100000000000000040000000000000008000200", @ANYRES32=0x0, @ANYBLOB="080000002c25185a9b54661601000000d5064ba8df0f291155097a5e94c87f1ad1aebb845e04da209f954696c77124fa8b8a168f64ed67f2f92b07090ffef23bdcdeb9e0fb97366e2eb235f8f90a26bee25c2f5a946ee19804d47e49648290d9f3625cfaae9966b0e66400137a3a61240e10d4106067be54ace5e9272eccd55f8ad6542d7641373c7ee570ff295efd7e8cd25d8ff1f0bb8a88043b4047a6394be973f0f55db93fef", @ANYRES32=r4, @ANYBLOB="10000200000000002000000000000000"], 0x34, 0x1) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) lstat(&(0x7f0000000600)='./file0/file0\x00', &(0x7f0000000540)) ioprio_set$uid(0x3, r3, 0x8000) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000240)=""/246) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', &(0x7f0000000480)='bpf\x00', 0x2, &(0x7f0000000640)={[{@mode={'mode', 0x3d, 0x4}}, {@mode={'mode'}}, {@mode={'mode', 0x3d, 0x3ff}}, {@mode={'mode', 0x3d, 0x6}}, {@mode={'mode'}}], [{@audit='audit'}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}]}) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40047451, &(0x7f0000000000)=""/174) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000300)={0x0, @in={{0x2, 0x0, @multicast1}}}, 0x0) 11:37:12 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SMI(r3, 0xaeb7) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a0000120800000088b070") personality(0x5000007) 11:37:12 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SMI(r3, 0xaeb7) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x2800, 0x0) getpeername$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000100)=0x14) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a0000120800000088b070") 11:37:12 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc3', 0x2}) [ 769.860994] *** Guest State *** 11:37:13 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x21000000, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) [ 769.882171] CR0: actual=0x0000000000050032, shadow=0x0000000000050012, gh_mask=fffffffffffffff7 [ 769.898625] *** Guest State *** [ 769.901959] CR0: actual=0x0000000000050032, shadow=0x0000000000050012, gh_mask=fffffffffffffff7 [ 769.913189] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 769.942365] CR3 = 0x0000000000000000 [ 769.956379] RSP = 0x0000000000000000 RIP = 0x0000000000008000 [ 769.973701] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 769.986088] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 11:37:13 executing program 0: r0 = socket$inet_sctp(0x2, 0x1000000000000005, 0x84) accept$inet(0xffffffffffffffff, &(0x7f0000000740)={0x2, 0x0, @dev}, &(0x7f0000000780)=0x10) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f00000000c0)) chown(&(0x7f00000001c0)='./file0\x00', r3, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="020000000100000000000000040000000000000008000200", @ANYRES32=0x0, @ANYBLOB="080000002c25185a9b54661601000000d5064ba8df0f291155097a5e94c87f1ad1aebb845e04da209f954696c77124fa8b8a168f64ed67f2f92b07090ffef23bdcdeb9e0fb97366e2eb235f8f90a26bee25c2f5a946ee19804d47e49648290d9f3625cfaae9966b0e66400137a3a61240e10d4106067be54ace5e9272eccd55f8ad6542d7641373c7ee570ff295efd7e8cd25d8ff1f0bb8a88043b4047a6394be973f0f55db93fef", @ANYRES32=r4, @ANYBLOB="10000200000000002000000000000000"], 0x34, 0x1) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) lstat(&(0x7f0000000600)='./file0/file0\x00', &(0x7f0000000540)) ioprio_set$uid(0x3, r3, 0x8000) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000240)=""/246) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', &(0x7f0000000480)='bpf\x00', 0x2, &(0x7f0000000640)={[{@mode={'mode', 0x3d, 0x4}}, {@mode={'mode'}}, {@mode={'mode', 0x3d, 0x3ff}}, {@mode={'mode', 0x3d, 0x6}}, {@mode={'mode'}}], [{@audit='audit'}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}]}) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40047451, &(0x7f0000000000)=""/174) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000300)={0x0, @in={{0x2, 0x0, @multicast1}}}, 0x0) 11:37:13 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf5', 0x2}) 11:37:13 executing program 1: r0 = socket$inet_sctp(0x2, 0x1000000000000005, 0x84) accept$inet(0xffffffffffffffff, &(0x7f0000000740)={0x2, 0x0, @dev}, &(0x7f0000000780)=0x10) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f00000000c0)) chown(&(0x7f00000001c0)='./file0\x00', r3, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="020000000100000000000000040000000000000008000200", @ANYRES32=0x0, @ANYBLOB="080000002c25185a9b54661601000000d5064ba8df0f291155097a5e94c87f1ad1aebb845e04da209f954696c77124fa8b8a168f64ed67f2f92b07090ffef23bdcdeb9e0fb97366e2eb235f8f90a26bee25c2f5a946ee19804d47e49648290d9f3625cfaae9966b0e66400137a3a61240e10d4106067be54ace5e9272eccd55f8ad6542d7641373c7ee570ff295efd7e8cd25d8ff1f0bb8a88043b4047a6394be973f0f55db93fef", @ANYRES32=r4, @ANYBLOB="10000200000000002000000000000000"], 0x34, 0x1) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) lstat(&(0x7f0000000600)='./file0/file0\x00', &(0x7f0000000540)) ioprio_set$uid(0x3, r3, 0x8000) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000240)=""/246) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', &(0x7f0000000480)='bpf\x00', 0x2, &(0x7f0000000640)={[{@mode={'mode', 0x3d, 0x4}}, {@mode={'mode'}}, {@mode={'mode', 0x3d, 0x3ff}}, {@mode={'mode', 0x3d, 0x6}}, {@mode={'mode'}}], [{@audit='audit'}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}]}) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40047451, &(0x7f0000000000)=""/174) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000300)={0x0, @in={{0x2, 0x0, @multicast1}}}, 0x0) 11:37:13 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x28000000, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) [ 770.011715] CS: sel=0x3000, attr=0x08093, limit=0xffffffff, base=0x0000000000030000 [ 770.016323] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 770.046478] CR3 = 0x0000000000000000 [ 770.050240] RSP = 0x0000000000000000 RIP = 0x0000000000008000 [ 770.066430] DS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 770.090182] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 770.102478] SS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 11:37:13 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x29000000, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:37:13 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xfe', 0x2}) [ 770.144971] ES: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 770.153207] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 770.194020] FS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 770.209087] CS: sel=0x3000, attr=0x08093, limit=0xffffffff, base=0x0000000000030000 [ 770.227042] GS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 770.256314] DS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 770.261968] GDTR: limit=0x00000000, base=0x0000000000000000 [ 770.291461] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 11:37:13 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x2b000000, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:37:13 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup(r1) ioctl$PPPIOCDISCONN(r2, 0x7439) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000000)=@req3={0x6000000, 0x3, 0x6000000, 0x3}, 0x1c) setsockopt$packet_int(r1, 0x107, 0x9, &(0x7f0000000080), 0xfffffd22) mkdir(&(0x7f000082f000)='./control\x00', 0x0) r3 = open(&(0x7f000080dff6)='./control\x00', 0x0, 0x0) r4 = userfaultfd(0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000bc8000)={0xaa, 0x70}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000bf7000/0x1000)=nil, 0x1000}, 0x1}) r5 = open(&(0x7f000080dff6)='./control\x00', 0x0, 0x0) r6 = userfaultfd(0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000bc8000)={0xaa, 0x70}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000034d000/0x1000)=nil, 0x1000}, 0x1}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) dup2(r5, r6) dup2(r3, r4) r7 = shmget$private(0x0, 0x4000, 0x54000e08, &(0x7f0000ff9000/0x4000)=nil) shmctl$SHM_LOCK(r7, 0xb) [ 770.304598] SS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 770.336419] IDTR: limit=0x00000000, base=0x0000000000000000 [ 770.353205] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 770.353789] ES: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 770.371647] EFER = 0x0000000000006000 PAT = 0x0007040600070406 [ 770.385121] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 770.395080] FS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 770.412486] Interruptibility = 00000008 ActivityState = 00000000 [ 770.419150] GS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 770.432498] *** Host State *** [ 770.436777] GDTR: limit=0x00000000, base=0x0000000000000000 [ 770.438161] RIP = 0xffffffff811b3710 RSP = 0xffff88804e1578b8 [ 770.444770] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 770.444784] IDTR: limit=0x00000000, base=0x0000000000000000 [ 770.444803] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 770.444814] EFER = 0x0000000000006000 PAT = 0x0007040600070406 [ 770.444825] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 770.478621] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 770.496350] FSBase=00007f8d1998d700 GSBase=ffff8880ae900000 TRBase=fffffe0000033000 [ 770.504165] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 770.546246] CR0=0000000080050033 CR3=0000000020265000 CR4=00000000001426e0 [ 770.566286] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87201360 [ 770.572977] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 770.582496] Interruptibility = 00000008 ActivityState = 00000000 [ 770.596218] *** Host State *** [ 770.605103] RIP = 0xffffffff811b3710 RSP = 0xffff8880590278b8 [ 770.621394] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 770.628242] *** Control State *** [ 770.631700] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 770.646315] FSBase=00007f45eb8ae700 GSBase=ffff8880ae800000 TRBase=fffffe0000033000 [ 770.665769] EntryControls=0000d1ff ExitControls=002fefff [ 770.676272] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 770.692258] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 770.698530] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 770.702214] *** Guest State *** [ 770.705203] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 770.705212] reason=80000021 qualification=0000000000000000 [ 770.705219] IDTVectoring: info=00000000 errcode=00000000 [ 770.705226] TSC Offset = 0xfffffe61789026c9 [ 770.705238] EPT pointer = 0x000000008b68101e [ 770.721543] CR0: actual=0x0000000000050032, shadow=0x0000000000050012, gh_mask=fffffffffffffff7 [ 770.721558] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 770.721567] CR3 = 0x0000000000000000 [ 770.740899] CR0=0000000080050033 CR3=000000002ea4c000 CR4=00000000001426f0 11:37:13 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SMI(r3, 0xaeb7) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a0000120800000088b070") personality(0x5000007) [ 770.800598] RSP = 0x0000000000000000 RIP = 0x0000000000008000 [ 770.821243] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87201360 [ 770.822764] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 770.852663] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 770.868076] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 770.876459] *** Control State *** [ 770.888190] CS: sel=0x3000, attr=0x08093, limit=0xffffffff, base=0x0000000000030000 [ 770.896961] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 770.920003] DS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 770.942563] *** Guest State *** [ 770.945213] SS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 770.952721] EntryControls=0000d1ff ExitControls=002fefff [ 770.959728] CR0: actual=0x0000000000050032, shadow=0x0000000000050012, gh_mask=fffffffffffffff7 [ 770.979787] ES: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 770.982336] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 771.008158] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 771.014334] CR3 = 0x0000000000000000 [ 771.039952] FS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 771.046056] RSP = 0x0000000000000000 RIP = 0x0000000000008000 [ 771.054213] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 771.060001] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 771.071071] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 771.079767] GS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 771.085942] CS: sel=0x3000, attr=0x08093, limit=0xffffffff, base=0x0000000000030000 [ 771.095225] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 771.095919] DS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 771.119667] GDTR: limit=0x00000000, base=0x0000000000000000 [ 771.131425] SS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 771.142002] reason=80000021 qualification=0000000000000000 [ 771.148739] ES: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 771.161024] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 771.166243] FS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 771.183122] IDTVectoring: info=00000000 errcode=00000000 [ 771.192236] GS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 771.196151] IDTR: limit=0x00000000, base=0x0000000000000000 [ 771.210692] GDTR: limit=0x00000000, base=0x0000000000000000 [ 771.223034] TSC Offset = 0xfffffe6177e1c933 [ 771.226248] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 771.234826] EPT pointer = 0x0000000049a5501e [ 771.236312] IDTR: limit=0x00000000, base=0x0000000000000000 [ 771.250329] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 771.264586] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 771.266266] net_ratelimit: 22 callbacks suppressed [ 771.266274] protocol 88fb is buggy, dev hsr_slave_0 [ 771.281847] EFER = 0x0000000000006000 PAT = 0x0007040600070406 [ 771.282621] protocol 88fb is buggy, dev hsr_slave_1 [ 771.296257] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 771.314872] Interruptibility = 00000008 ActivityState = 00000000 [ 771.322444] EFER = 0x0000000000006000 PAT = 0x0007040600070406 [ 771.329214] *** Host State *** [ 771.332522] RIP = 0xffffffff811b3710 RSP = 0xffff88802c6a78b8 [ 771.341551] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 771.348395] FSBase=00007f8d1998d700 GSBase=ffff8880ae900000 TRBase=fffffe0000033000 [ 771.352742] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 771.357527] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 771.370464] Interruptibility = 00000008 ActivityState = 00000000 [ 771.378096] *** Host State *** [ 771.381409] RIP = 0xffffffff811b3710 RSP = 0xffff88805d1b78b8 [ 771.385367] CR0=0000000080050033 CR3=00000000a3cec000 CR4=00000000001426e0 [ 771.392129] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 771.397448] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87201360 [ 771.401950] FSBase=00007f45eb84b700 GSBase=ffff8880ae800000 TRBase=fffffe0000003000 [ 771.421391] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 771.428399] CR0=0000000080050033 CR3=000000002ea4c000 CR4=00000000001426f0 [ 771.435510] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201360 [ 771.436299] protocol 88fb is buggy, dev hsr_slave_0 [ 771.447312] protocol 88fb is buggy, dev hsr_slave_1 [ 771.447453] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 771.458705] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 771.470581] *** Control State *** [ 771.474159] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 771.482033] *** Control State *** [ 771.485580] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 771.497995] EntryControls=0000d1ff ExitControls=002fefff [ 771.503593] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 771.519309] EntryControls=0000d1ff ExitControls=002fefff [ 771.524858] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 771.533709] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 771.544274] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 771.552904] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 771.563349] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 771.571846] reason=80000021 qualification=0000000000000000 [ 771.581803] reason=80000021 qualification=0000000000000000 [ 771.591078] IDTVectoring: info=00000000 errcode=00000000 [ 771.600679] TSC Offset = 0xfffffe60e2988a5a [ 771.605122] IDTVectoring: info=00000000 errcode=00000000 [ 771.612430] TSC Offset = 0xfffffe6107e99702 [ 771.620612] EPT pointer = 0x000000005534501e [ 771.625297] EPT pointer = 0x000000003164001e 11:37:14 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(r1, 0xaeb7) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r1, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a0000120800000088b070") 11:37:14 executing program 0: r0 = socket$inet_sctp(0x2, 0x1000000000000005, 0x84) accept$inet(0xffffffffffffffff, &(0x7f0000000740)={0x2, 0x0, @dev}, &(0x7f0000000780)=0x10) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f00000000c0)) chown(&(0x7f00000001c0)='./file0\x00', r3, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="020000000100000000000000040000000000000008000200", @ANYRES32=0x0, @ANYBLOB="080000002c25185a9b54661601000000d5064ba8df0f291155097a5e94c87f1ad1aebb845e04da209f954696c77124fa8b8a168f64ed67f2f92b07090ffef23bdcdeb9e0fb97366e2eb235f8f90a26bee25c2f5a946ee19804d47e49648290d9f3625cfaae9966b0e66400137a3a61240e10d4106067be54ace5e9272eccd55f8ad6542d7641373c7ee570ff295efd7e8cd25d8ff1f0bb8a88043b4047a6394be973f0f55db93fef", @ANYRES32=r4, @ANYBLOB="10000200000000002000000000000000"], 0x34, 0x1) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) lstat(&(0x7f0000000600)='./file0/file0\x00', &(0x7f0000000540)) ioprio_set$uid(0x3, r3, 0x8000) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000240)=""/246) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', &(0x7f0000000480)='bpf\x00', 0x2, &(0x7f0000000640)={[{@mode={'mode', 0x3d, 0x4}}, {@mode={'mode'}}, {@mode={'mode', 0x3d, 0x3ff}}, {@mode={'mode', 0x3d, 0x6}}, {@mode={'mode'}}], [{@audit='audit'}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}]}) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40047451, &(0x7f0000000000)=""/174) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000300)={0x0, @in={{0x2, 0x0, @multicast1}}}, 0x0) 11:37:14 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00', 0x2}) 11:37:14 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x2c000000, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:37:14 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x0, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="2e0000002e008183ad5de0713c444d00070000001000034000ff39a0053582c137153e37835b3f00040000000000", 0x2e}], 0x1}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 11:37:14 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x2f000000, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:37:14 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00', 0x2}) 11:37:15 executing program 0: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x3a000000, 0x0, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:37:15 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SMI(r3, 0xaeb7) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000000c0)={0x0, 0x3d, "b7eadd030bc964dadaf77f230ed22c18d9e2a7c23170a67aa24b35e2b3cf846544e0b9713149971aff5c102cf5593d2569e27540904e851d93aa1cb035"}, &(0x7f0000000000)=0x45) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000140)={r4, 0x9, "00bf7399ebf11fd8ba"}, &(0x7f0000000180)=0x11) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a0000120800000088b070") 11:37:15 executing program 4: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0xd000000, 0x0, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) [ 772.034603] *** Guest State *** [ 772.039139] CR0: actual=0x0000000000050032, shadow=0x0000000000050012, gh_mask=fffffffffffffff7 [ 772.066499] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 772.075360] CR3 = 0x0000000000000000 [ 772.096887] RSP = 0x0000000000000000 RIP = 0x0000000000008000 [ 772.117293] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 772.136271] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 772.156252] CS: sel=0x3000, attr=0x08093, limit=0xffffffff, base=0x0000000000030000 [ 772.176281] DS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 772.196259] SS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 772.216256] ES: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 772.236258] FS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 772.244315] GS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 772.265062] GDTR: limit=0x00000000, base=0x0000000000000000 [ 772.275552] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 772.289972] IDTR: limit=0x00000000, base=0x0000000000000000 [ 772.306310] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 11:37:15 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup(r1) ioctl$PPPIOCDISCONN(r2, 0x7439) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000000)=@req3={0x6000000, 0x3, 0x6000000, 0x3}, 0x1c) setsockopt$packet_int(r1, 0x107, 0x9, &(0x7f0000000080), 0xfffffd22) mkdir(&(0x7f000082f000)='./control\x00', 0x0) r3 = open(&(0x7f000080dff6)='./control\x00', 0x0, 0x0) r4 = userfaultfd(0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000bc8000)={0xaa, 0x70}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000bf7000/0x1000)=nil, 0x1000}, 0x1}) r5 = open(&(0x7f000080dff6)='./control\x00', 0x0, 0x0) r6 = userfaultfd(0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000bc8000)={0xaa, 0x70}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000034d000/0x1000)=nil, 0x1000}, 0x1}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) dup2(r5, r6) dup2(r3, r4) r7 = shmget$private(0x0, 0x4000, 0x54000e08, &(0x7f0000ff9000/0x4000)=nil) shmctl$SHM_LOCK(r7, 0xb) 11:37:15 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00', 0x2}) 11:37:15 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x32010000, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:37:15 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="2e0000002e008183ad5de0713c444d00070000001000034000ff39a0053582c137153e37835b3f00040000000000", 0x2e}], 0x1}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 11:37:15 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="2e0000002e008183ad5de0713c444d00070000001000034000ff39a0053582c137153e37835b3f00040000000000", 0x2e}], 0x1}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) [ 772.320791] EFER = 0x0000000000006000 PAT = 0x0007040600070406 [ 772.356343] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 772.387188] protocol 88fb is buggy, dev hsr_slave_0 [ 772.387306] protocol 88fb is buggy, dev hsr_slave_0 [ 772.392266] protocol 88fb is buggy, dev hsr_slave_1 [ 772.397310] protocol 88fb is buggy, dev hsr_slave_1 [ 772.402367] protocol 88fb is buggy, dev hsr_slave_0 [ 772.407387] protocol 88fb is buggy, dev hsr_slave_0 [ 772.429964] Interruptibility = 00000008 ActivityState = 00000000 11:37:15 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="2e0000002e008183ad5de0713c444d00070000001000034000ff39a0053582c137153e37835b3f00040000000000", 0x2e}], 0x1}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) [ 772.455883] *** Host State *** 11:37:15 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) close(0xffffffffffffffff) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="2e0000002e008183ad5de0713c444d00070000001000034000ff39a0053582c137153e37835b3f00040000000000", 0x2e}], 0x1}, 0x0) close(0xffffffffffffffff) 11:37:15 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x3a000000, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:37:15 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00', 0x2}) [ 772.480495] RIP = 0xffffffff811b3710 RSP = 0xffff88803d3ef8b8 [ 772.508837] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 772.533447] FSBase=00007f45eb8ae700 GSBase=ffff8880ae900000 TRBase=fffffe0000033000 11:37:15 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x3c000000, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) [ 772.582421] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 772.612245] CR0=0000000080050033 CR3=000000003165b000 CR4=00000000001426e0 [ 772.640019] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87201360 [ 772.671384] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 772.698428] *** Control State *** [ 772.702038] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 772.719400] EntryControls=0000d1ff ExitControls=002fefff [ 772.725000] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 772.737758] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 772.744585] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 772.755414] reason=80000021 qualification=0000000000000000 [ 772.763764] IDTVectoring: info=00000000 errcode=00000000 [ 772.773020] TSC Offset = 0xfffffe604f25f4f5 [ 772.779458] EPT pointer = 0x000000002a20901e 11:37:15 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@rand_addr, 0x0}, &(0x7f00000000c0)=0x14) bind$packet(r2, &(0x7f0000000100)={0x11, 0x3, r4, 0x1, 0x101}, 0x14) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000003c0)={{}, {0x0, 0x0, 0x0, 0x10}, {}, {0x0, 0x0, 0x0, 0x0, 0x100000001}, {}, {}, {}, {0x0, 0x1}, {}, {0x100000}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a0000120800000088b070") 11:37:15 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x00', 0x2}) [ 772.937767] *** Guest State *** [ 772.941208] CR0: actual=0x000000008005003f, shadow=0x000000008005001f, gh_mask=fffffffffffffff7 [ 772.951330] CR4: actual=0x0000000000002068, shadow=0x0000000000000028, gh_mask=ffffffffffffe871 [ 772.960787] CR3 = 0x0000000000000000 [ 772.964648] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 772.971028] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 772.977404] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 772.984670] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 773.004689] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 773.021708] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 773.039401] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 773.056345] FS: sel=0x0000, attr=0x00081, limit=0x00000000, base=0x0000000000000000 [ 773.066299] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 773.089099] GDTR: limit=0x00000000, base=0x0000000000000000 [ 773.122599] LDTR: sel=0x0000, attr=0x10000, limit=0x00000001, base=0x0000000000000000 [ 773.149255] IDTR: limit=0x00000000, base=0x0000000000100000 [ 773.174670] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 773.188112] EFER = 0x0000000000006500 PAT = 0x0007040600070406 [ 773.194734] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 773.205173] Interruptibility = 00000000 ActivityState = 00000000 [ 773.214291] *** Host State *** [ 773.220355] RIP = 0xffffffff811b3710 RSP = 0xffff88804390f8b8 [ 773.229249] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 773.235779] FSBase=00007f45eb8ae700 GSBase=ffff8880ae900000 TRBase=fffffe0000003000 [ 773.249553] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 773.255567] CR0=0000000080050033 CR3=000000003165b000 CR4=00000000001426e0 [ 773.264670] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201360 [ 773.281566] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 773.290480] *** Control State *** [ 773.294040] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 773.303546] EntryControls=0000d3ff ExitControls=002fefff [ 773.311919] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 773.321790] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 773.331426] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 773.341314] reason=80000021 qualification=0000000000000000 [ 773.351052] IDTVectoring: info=00000000 errcode=00000000 [ 773.359425] TSC Offset = 0xfffffe5fd07284e2 [ 773.363840] EPT pointer = 0x000000004861601e [ 773.388642] *** Guest State *** [ 773.391947] CR0: actual=0x000000008005003f, shadow=0x000000008005001f, gh_mask=fffffffffffffff7 [ 773.430765] CR4: actual=0x0000000000002068, shadow=0x0000000000000028, gh_mask=ffffffffffffe871 [ 773.442817] CR3 = 0x0000000000000000 [ 773.449837] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 773.455899] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 773.465330] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 773.475297] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 773.489592] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 773.499917] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 773.511988] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 773.535428] FS: sel=0x0000, attr=0x00081, limit=0x00000000, base=0x0000000000000000 [ 773.561763] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 773.585080] GDTR: limit=0x00000000, base=0x0000000000000000 [ 773.602143] LDTR: sel=0x0000, attr=0x10000, limit=0x00000001, base=0x0000000000000000 [ 773.625421] IDTR: limit=0x00000000, base=0x0000000000100000 [ 773.648654] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 773.666324] EFER = 0x0000000000006500 PAT = 0x0007040600070406 [ 773.672827] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 773.681531] Interruptibility = 00000000 ActivityState = 00000000 [ 773.688148] *** Host State *** [ 773.691430] RIP = 0xffffffff811b3710 RSP = 0xffff888047abf8b8 [ 773.697769] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 773.704263] FSBase=00007f45eb88d700 GSBase=ffff8880ae900000 TRBase=fffffe0000033000 [ 773.712449] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 773.718658] CR0=0000000080050033 CR3=000000003165b000 CR4=00000000001426e0 [ 773.725767] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87201360 [ 773.732772] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 773.750220] *** Control State *** [ 773.753691] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 773.773807] EntryControls=0000d3ff ExitControls=002fefff [ 773.791382] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 773.807179] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 773.813940] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 773.820856] reason=80000021 qualification=0000000000000000 [ 773.827483] IDTVectoring: info=00000000 errcode=00000000 [ 773.833033] TSC Offset = 0xfffffe5f9165b7c6 [ 773.837679] EPT pointer = 0x0000000031ef601e 11:37:17 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup(r1) ioctl$PPPIOCDISCONN(r2, 0x7439) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000000)=@req3={0x6000000, 0x3, 0x6000000, 0x3}, 0x1c) setsockopt$packet_int(r1, 0x107, 0x9, &(0x7f0000000080), 0xfffffd22) mkdir(&(0x7f000082f000)='./control\x00', 0x0) r3 = open(&(0x7f000080dff6)='./control\x00', 0x0, 0x0) r4 = userfaultfd(0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000bc8000)={0xaa, 0x70}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000bf7000/0x1000)=nil, 0x1000}, 0x1}) r5 = open(&(0x7f000080dff6)='./control\x00', 0x0, 0x0) r6 = userfaultfd(0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000bc8000)={0xaa, 0x70}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000034d000/0x1000)=nil, 0x1000}, 0x1}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) dup2(r5, r6) dup2(r3, r4) r7 = shmget$private(0x0, 0x4000, 0x54000e08, &(0x7f0000ff9000/0x4000)=nil) shmctl$SHM_LOCK(r7, 0xb) 11:37:17 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) close(0xffffffffffffffff) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="2e0000002e008183ad5de0713c444d00070000001000034000ff39a0053582c137153e37835b3f00040000000000", 0x2e}], 0x1}, 0x0) close(0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 11:37:17 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00', 0x2}) 11:37:17 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x3f000000, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:37:17 executing program 0: r0 = socket$inet_sctp(0x2, 0x1000000000000005, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, &(0x7f0000000080)={0x7, 0x9, 0x6, 0xffffffffffffffff, 0x0}, &(0x7f00000000c0)=0x10) ioctl(0xffffffffffffffff, 0x6, &(0x7f0000000140)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000fed000/0x13000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff4000/0x2000)=nil, 0x0}, 0x68) r2 = syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x1, 0x200) ioctl$TIOCLINUX2(r2, 0x541c, &(0x7f00000001c0)={0x2, 0x4, 0xd83, 0x3, 0x6, 0x9}) fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = syz_open_dev$usbmon(0x0, 0x200003ff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000003c0)=0x1) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000080), 0x800) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) write$cgroup_int(r4, &(0x7f0000000000)=0xbad9, 0x12) clock_gettime(0x0, &(0x7f0000000280)) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) syz_genetlink_get_family_id$ipvs(0x0) msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000440)=""/176) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0) close(r5) readv(r3, &(0x7f0000000340), 0x3) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000300)={r1, @in={{0x2, 0x0, @multicast1}}}, 0x0) r6 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0xffffffff, 0x20001) ioctl$BLKBSZSET(r6, 0x40081271, &(0x7f0000000040)=0x6) 11:37:17 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SMI(r3, 0xaeb7) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000000)={0x2c3}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a0000120800000088b070") 11:37:17 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00', 0x2}) 11:37:17 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x40000000, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:37:17 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) close(0xffffffffffffffff) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="2e0000002e008183ad5de0713c444d00070000001000034000ff39a0053582c137153e37835b3f00040000000000", 0x2e}], 0x1}, 0x0) close(0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) [ 774.325781] *** Guest State *** [ 774.337241] CR0: actual=0x0000000000050032, shadow=0x0000000000050012, gh_mask=fffffffffffffff7 [ 774.370147] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 11:37:17 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00', 0x2}) 11:37:17 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x43050000, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:37:17 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) close(0xffffffffffffffff) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="2e0000002e008183ad5de0713c444d00070000001000034000ff39a0053582c137153e37835b3f00040000000000", 0x2e}], 0x1}, 0x0) close(0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) [ 774.486345] CR3 = 0x0000000000000000 [ 774.490264] RSP = 0x0000000000000000 RIP = 0x0000000000008000 [ 774.519893] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 774.554322] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 774.572212] CS: sel=0x3000, attr=0x08093, limit=0xffffffff, base=0x0000000000030000 [ 774.599862] DS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 774.617356] SS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 774.625356] ES: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 774.692354] FS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 774.705121] GS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 774.728182] GDTR: limit=0x00000000, base=0x0000000000000000 [ 774.752667] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 774.774900] IDTR: limit=0x00000000, base=0x0000000000000000 [ 774.799122] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 774.816336] EFER = 0x0000000000006000 PAT = 0x0007040600070406 [ 774.822779] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 774.866223] Interruptibility = 00000008 ActivityState = 00000000 [ 774.872490] *** Host State *** [ 774.875695] RIP = 0xffffffff811b3710 RSP = 0xffff8880534478b8 [ 774.889243] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 774.895978] FSBase=00007f45eb8ae700 GSBase=ffff8880ae800000 TRBase=fffffe0000003000 [ 774.923788] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 774.941558] CR0=0000000080050033 CR3=0000000027bbb000 CR4=00000000001426f0 [ 774.962726] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201360 [ 774.981558] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 775.001635] *** Control State *** [ 775.005226] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 775.017100] EntryControls=0000d1ff ExitControls=002fefff [ 775.022571] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 775.056235] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 775.062937] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 775.062950] reason=80000021 qualification=0000000000000000 [ 775.106236] IDTVectoring: info=00000000 errcode=00000000 [ 775.111722] TSC Offset = 0xfffffe5f15031976 [ 775.116052] EPT pointer = 0x000000002e4e201e [ 775.159309] *** Guest State *** [ 775.178188] CR0: actual=0x000000008005003f, shadow=0x000000008005001f, gh_mask=fffffffffffffff7 [ 775.221782] CR4: actual=0x0000000000002068, shadow=0x0000000000000028, gh_mask=ffffffffffffe871 [ 775.250045] CR3 = 0x0000000000000000 [ 775.262578] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 775.282659] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 775.301476] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 775.322590] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 775.345931] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 775.372605] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 775.393800] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 775.415935] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 775.442686] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 775.464819] GDTR: limit=0x00000000, base=0x0000000000000000 [ 775.481053] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 775.492070] IDTR: limit=0x00000000, base=0x0000000000000000 [ 775.503166] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 775.514241] EFER = 0x0000000000006500 PAT = 0x0007040600070406 [ 775.523793] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 775.534274] Interruptibility = 00000000 ActivityState = 00000000 [ 775.543590] *** Host State *** [ 775.549815] RIP = 0xffffffff811b3710 RSP = 0xffff888059d6f8b8 [ 775.555924] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 775.577229] FSBase=00007f45eb88d700 GSBase=ffff8880ae800000 TRBase=fffffe0000003000 [ 775.604655] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 775.615197] CR0=0000000080050033 CR3=0000000027bbb000 CR4=00000000001426f0 [ 775.634937] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201360 [ 775.654616] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 775.675537] *** Control State *** [ 775.682107] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 775.709079] EntryControls=0000d3ff ExitControls=002fefff [ 775.723812] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 775.744612] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 775.761863] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 775.775297] reason=80000021 qualification=0000000000000000 [ 775.788486] IDTVectoring: info=00000000 errcode=00000000 [ 775.799658] TSC Offset = 0xfffffe5ea7b989d6 [ 775.815311] EPT pointer = 0x00000000374f001e 11:37:19 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup(r1) ioctl$PPPIOCDISCONN(r2, 0x7439) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000000)=@req3={0x6000000, 0x3, 0x6000000, 0x3}, 0x1c) setsockopt$packet_int(r1, 0x107, 0x9, &(0x7f0000000080), 0xfffffd22) mkdir(&(0x7f000082f000)='./control\x00', 0x0) r3 = open(&(0x7f000080dff6)='./control\x00', 0x0, 0x0) r4 = userfaultfd(0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000bc8000)={0xaa, 0x70}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000bf7000/0x1000)=nil, 0x1000}, 0x1}) r5 = open(&(0x7f000080dff6)='./control\x00', 0x0, 0x0) r6 = userfaultfd(0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000bc8000)={0xaa, 0x70}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000034d000/0x1000)=nil, 0x1000}, 0x1}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) dup2(r5, r6) dup2(r3, r4) shmget$private(0x0, 0x4000, 0x54000e08, &(0x7f0000ff9000/0x4000)=nil) 11:37:19 executing program 0: r0 = socket$inet_sctp(0x2, 0x1000000000000005, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, &(0x7f0000000080)={0x7, 0x9, 0x6, 0xffffffffffffffff, 0x0}, &(0x7f00000000c0)=0x10) ioctl(0xffffffffffffffff, 0x6, &(0x7f0000000140)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000fed000/0x13000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff4000/0x2000)=nil, 0x0}, 0x68) r2 = syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x1, 0x200) ioctl$TIOCLINUX2(r2, 0x541c, &(0x7f00000001c0)={0x2, 0x4, 0xd83, 0x3, 0x6, 0x9}) fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = syz_open_dev$usbmon(0x0, 0x200003ff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000003c0)=0x1) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000080), 0x800) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) write$cgroup_int(r4, &(0x7f0000000000)=0xbad9, 0x12) clock_gettime(0x0, &(0x7f0000000280)) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) syz_genetlink_get_family_id$ipvs(0x0) msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000440)=""/176) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0) close(r5) readv(r3, &(0x7f0000000340), 0x3) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000300)={r1, @in={{0x2, 0x0, @multicast1}}}, 0x0) r6 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0xffffffff, 0x20001) ioctl$BLKBSZSET(r6, 0x40081271, &(0x7f0000000040)=0x6) 11:37:19 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00', 0x2}) 11:37:19 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x800e0000, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:37:19 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) close(0xffffffffffffffff) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="2e0000002e008183ad5de0713c444d00070000001000034000ff39a0053582c137153e37835b3f00040000000000", 0x2e}], 0x1}, 0x0) close(0xffffffffffffffff) 11:37:19 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ubi_ctrl\x00', 0x82, 0x0) write$apparmor_exec(r4, &(0x7f0000000180)={'exec ', 'trusted\x00'}, 0xd) ioctl$KVM_SMI(r3, 0xaeb7) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x2, 0x0) ioctl$PPPIOCSPASS(r5, 0x40107447, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x9, 0x100000000000, 0x0, 0x1}]}) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_GET_SUPPORTED_CPUID(r1, 0xc008ae05, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a0000120800000088b070") 11:37:19 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) close(0xffffffffffffffff) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="2e0000002e008183ad5de0713c444d00070000001000034000ff39a0053582c137153e37835b3f00040000000000", 0x2e}], 0x1}, 0x0) close(0xffffffffffffffff) 11:37:19 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00', 0x2}) 11:37:19 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x80350000, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) [ 776.431099] *** Guest State *** [ 776.434427] CR0: actual=0x0000000000050032, shadow=0x0000000000050012, gh_mask=fffffffffffffff7 [ 776.475167] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 776.506896] CR3 = 0x0000000000000000 [ 776.523126] RSP = 0x0000000000000000 RIP = 0x0000000000008000 [ 776.546257] net_ratelimit: 18 callbacks suppressed [ 776.546265] protocol 88fb is buggy, dev hsr_slave_0 [ 776.546302] protocol 88fb is buggy, dev hsr_slave_1 [ 776.551306] protocol 88fb is buggy, dev hsr_slave_1 [ 776.556421] protocol 88fb is buggy, dev hsr_slave_0 [ 776.561447] protocol 88fb is buggy, dev hsr_slave_0 [ 776.566467] protocol 88fb is buggy, dev hsr_slave_1 [ 776.571436] protocol 88fb is buggy, dev hsr_slave_1 [ 776.588986] RFLAGS=0x00000002 DR7 = 0x0000000000000400 11:37:19 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x81000000, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) [ 776.602382] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 11:37:19 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) close(0xffffffffffffffff) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="2e0000002e008183ad5de0713c444d00070000001000034000ff39a0053582c137153e37835b3f00040000000000", 0x2e}], 0x1}, 0x0) close(0xffffffffffffffff) 11:37:19 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00', 0x2}) [ 776.646607] CS: sel=0x3000, attr=0x08093, limit=0xffffffff, base=0x0000000000030000 [ 776.667486] DS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 776.686554] SS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 776.712493] ES: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 776.752780] FS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 776.784447] GS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 776.804672] GDTR: limit=0x00000000, base=0x0000000000000000 [ 776.814978] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 776.829075] IDTR: limit=0x00000000, base=0x0000000000000000 [ 776.839917] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 776.850747] EFER = 0x0000000000006000 PAT = 0x0007040600070406 [ 776.860248] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 776.873172] Interruptibility = 00000008 ActivityState = 00000000 [ 776.883088] *** Host State *** [ 776.889086] RIP = 0xffffffff811b3710 RSP = 0xffff88802eca78b8 [ 776.895141] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 776.904432] FSBase=00007f45eb8ae700 GSBase=ffff8880ae900000 TRBase=fffffe0000033000 [ 776.915009] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 776.926325] CR0=0000000080050033 CR3=000000002a9eb000 CR4=00000000001426e0 [ 776.937986] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201360 [ 776.956004] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 776.971313] *** Control State *** [ 776.979410] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 776.986721] EntryControls=0000d1ff ExitControls=002fefff [ 776.992350] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 777.021930] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 777.041853] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 777.056321] reason=80000021 qualification=0000000000000000 [ 777.066607] IDTVectoring: info=00000000 errcode=00000000 [ 777.072175] TSC Offset = 0xfffffe5df6a9bae2 [ 777.092501] EPT pointer = 0x0000000058fb201e [ 777.130444] *** Guest State *** [ 777.133770] CR0: actual=0x000000008005003f, shadow=0x000000008005001f, gh_mask=fffffffffffffff7 [ 777.143806] CR4: actual=0x0000000000002068, shadow=0x0000000000000028, gh_mask=ffffffffffffe871 [ 777.152987] CR3 = 0x0000000000000000 [ 777.156977] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 777.162976] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 777.169306] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 777.186522] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 777.194703] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 777.216336] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 777.224338] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 777.234028] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 777.242376] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 777.250677] GDTR: limit=0x00000000, base=0x0000000000000000 [ 777.267107] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 777.275098] IDTR: limit=0x00000000, base=0x0000000000000000 [ 777.306245] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 777.314256] EFER = 0x0000000000006500 PAT = 0x0007040600070406 [ 777.336228] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 777.343711] Interruptibility = 00000000 ActivityState = 00000000 [ 777.366220] *** Host State *** [ 777.369444] RIP = 0xffffffff811b3710 RSP = 0xffff8880292c78b8 [ 777.375431] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 777.406229] FSBase=00007f45eb88d700 GSBase=ffff8880ae900000 TRBase=fffffe0000033000 [ 777.414065] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 777.420315] CR0=0000000080050033 CR3=000000002a9eb000 CR4=00000000001426e0 [ 777.427696] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87201360 [ 777.434373] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 777.440735] *** Control State *** [ 777.444198] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 777.451165] EntryControls=0000d3ff ExitControls=002fefff [ 777.466376] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 777.473326] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 777.480432] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 777.487386] reason=80000021 qualification=0000000000000000 [ 777.493714] IDTVectoring: info=00000000 errcode=00000000 [ 777.499448] TSC Offset = 0xfffffe5d9060878b [ 777.503775] EPT pointer = 0x000000002e38501e [ 777.506721] protocol 88fb is buggy, dev hsr_slave_0 [ 777.513285] protocol 88fb is buggy, dev hsr_slave_1 [ 777.666290] protocol 88fb is buggy, dev hsr_slave_0 11:37:21 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup(r1) ioctl$PPPIOCDISCONN(r2, 0x7439) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000000)=@req3={0x6000000, 0x3, 0x6000000, 0x3}, 0x1c) setsockopt$packet_int(r1, 0x107, 0x9, &(0x7f0000000080), 0xfffffd22) mkdir(&(0x7f000082f000)='./control\x00', 0x0) r3 = open(&(0x7f000080dff6)='./control\x00', 0x0, 0x0) r4 = userfaultfd(0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000bc8000)={0xaa, 0x70}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000bf7000/0x1000)=nil, 0x1000}, 0x1}) r5 = open(&(0x7f000080dff6)='./control\x00', 0x0, 0x0) r6 = userfaultfd(0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000bc8000)={0xaa, 0x70}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000034d000/0x1000)=nil, 0x1000}, 0x1}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) dup2(r5, r6) dup2(r3, r4) 11:37:21 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) close(0xffffffffffffffff) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="2e0000002e008183ad5de0713c444d00070000001000034000ff39a0053582c137153e37835b3f00040000000000", 0x2e}], 0x1}, 0x0) close(0xffffffffffffffff) 11:37:21 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00', 0x2}) 11:37:21 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x84ffffff, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:37:21 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) close(0xffffffffffffffff) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="2e0000002e008183ad5de0713c444d00070000001000034000ff39a0053582c137153e37835b3f00040000000000", 0x2e}], 0x1}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 11:37:21 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x42c00, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SMI(r3, 0xaeb7) ioctl$KVM_GET_PIT(r2, 0xc048ae65, &(0x7f00000000c0)) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = fcntl$dupfd(r2, 0x406, r0) write$FUSE_NOTIFY_INVAL_ENTRY(r4, &(0x7f00000002c0)=ANY=[@ANYBLOB="2b0000000300000700000000000000000600002e0def00000000000a000000000000007c65746831657468317e0060c9b91c7e4f442798fd71c4d728a7fcd6892a7ba1c35e998c103be7846f635c100d844a7aa34533a36feef2a54c7d02408870281b0b854648a09da799cf07813d3c005b2400000000000000"], 0x2b) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a0000120800000088b070") r5 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_S_PARM(r5, 0xc0cc5616, &(0x7f0000000140)={0xe, @output={0x1000, 0x1, {0x100000001, 0x80000000}, 0xffff, 0x7}}) 11:37:21 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x86ddffff, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:37:21 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00', 0x2}) 11:37:21 executing program 0: r0 = socket$inet_sctp(0x2, 0x1000000000000005, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, &(0x7f0000000080)={0x7, 0x9, 0x6, 0xffffffffffffffff, 0x0}, &(0x7f00000000c0)=0x10) ioctl(0xffffffffffffffff, 0x6, &(0x7f0000000140)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000fed000/0x13000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff4000/0x2000)=nil, 0x0}, 0x68) r2 = syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x1, 0x200) ioctl$TIOCLINUX2(r2, 0x541c, &(0x7f00000001c0)={0x2, 0x4, 0xd83, 0x3, 0x6, 0x9}) fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = syz_open_dev$usbmon(0x0, 0x200003ff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000003c0)=0x1) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000080), 0x800) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) write$cgroup_int(r4, &(0x7f0000000000)=0xbad9, 0x12) clock_gettime(0x0, &(0x7f0000000280)) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) syz_genetlink_get_family_id$ipvs(0x0) msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000440)=""/176) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0) close(r5) readv(r3, &(0x7f0000000340), 0x3) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000300)={r1, @in={{0x2, 0x0, @multicast1}}}, 0x0) r6 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0xffffffff, 0x20001) ioctl$BLKBSZSET(r6, 0x40081271, &(0x7f0000000040)=0x6) 11:37:21 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) close(0xffffffffffffffff) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="2e0000002e008183ad5de0713c444d00070000001000034000ff39a0053582c137153e37835b3f00040000000000", 0x2e}], 0x1}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) [ 778.195414] *** Guest State *** 11:37:21 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x88470000, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:37:21 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00', 0x2}) [ 778.221082] CR0: actual=0x000000008005003f, shadow=0x000000008005001f, gh_mask=fffffffffffffff7 [ 778.250535] CR4: actual=0x0000000000002068, shadow=0x0000000000000028, gh_mask=ffffffffffffe871 [ 778.306355] CR3 = 0x0000000000000000 [ 778.315793] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 778.357492] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 778.374761] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 778.402492] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 778.434343] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 778.460878] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 778.497145] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 778.520197] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 778.542267] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 778.569787] GDTR: limit=0x00000000, base=0x0000000000000000 [ 778.589776] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 778.612312] IDTR: limit=0x00000000, base=0x0000000000000000 [ 778.633317] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 778.647656] EFER = 0x0000000000006500 PAT = 0x0007040600070406 [ 778.654218] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 778.665897] Interruptibility = 00000000 ActivityState = 00000000 [ 778.674337] *** Host State *** [ 778.681557] RIP = 0xffffffff811b3710 RSP = 0xffff88802e4778b8 [ 778.689897] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 778.700200] FSBase=00007f45eb88d700 GSBase=ffff8880ae900000 TRBase=fffffe0000033000 [ 778.720302] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 778.731732] CR0=0000000080050033 CR3=000000003587a000 CR4=00000000001426e0 [ 778.751174] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87201360 [ 778.762040] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 778.770551] *** Control State *** [ 778.774147] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 778.784733] EntryControls=0000d3ff ExitControls=002fefff [ 778.799659] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 778.810610] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 778.819475] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 778.829960] reason=80000021 qualification=0000000000000000 [ 778.838487] IDTVectoring: info=00000000 errcode=00000000 [ 778.844089] TSC Offset = 0xfffffe5d01a94116 [ 778.852807] EPT pointer = 0x000000009beaa01e 11:37:22 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x88480000, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:37:22 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) close(0xffffffffffffffff) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="2e0000002e008183ad5de0713c444d00070000001000034000ff39a0053582c137153e37835b3f00040000000000", 0x2e}], 0x1}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 11:37:22 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00', 0x2}) 11:37:22 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) close(0xffffffffffffffff) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="2e0000002e008183ad5de0713c444d00070000001000034000ff39a0053582c137153e37835b3f00040000000000", 0x2e}], 0x1}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 11:37:22 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup(r1) ioctl$PPPIOCDISCONN(r2, 0x7439) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000000)=@req3={0x6000000, 0x3, 0x6000000, 0x3}, 0x1c) setsockopt$packet_int(r1, 0x107, 0x9, &(0x7f0000000080), 0xfffffd22) mkdir(&(0x7f000082f000)='./control\x00', 0x0) open(&(0x7f000080dff6)='./control\x00', 0x0, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000bc8000)={0xaa, 0x70}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000bf7000/0x1000)=nil, 0x1000}, 0x1}) r4 = open(&(0x7f000080dff6)='./control\x00', 0x0, 0x0) r5 = userfaultfd(0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000bc8000)={0xaa, 0x70}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000034d000/0x1000)=nil, 0x1000}, 0x1}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) dup2(r4, r5) 11:37:22 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SMI(r3, 0xaeb7) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f00000000c0)={{{@in6=@initdev, @in6=@mcast1}}, {{@in=@multicast2}}}, &(0x7f00000001c0)=0xe8) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl(r0, 0xca, &(0x7f0000000240)="0a0000120800000088b070") 11:37:22 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x88640000, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:37:22 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) close(0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="2e0000002e008183ad5de0713c444d00070000001000034000ff39a0053582c137153e37835b3f00040000000000", 0x2e}], 0x1}, 0x0) close(0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 11:37:22 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) close(0xffffffffffffffff) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="2e0000002e008183ad5de0713c444d00070000001000034000ff39a0053582c137153e37835b3f00040000000000", 0x2e}], 0x1}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) [ 779.825161] *** Guest State *** [ 779.829135] CR0: actual=0x0000000000050032, shadow=0x0000000000050012, gh_mask=fffffffffffffff7 [ 779.843746] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 779.860909] CR3 = 0x0000000000000000 [ 779.869317] RSP = 0x0000000000000000 RIP = 0x0000000000008000 11:37:23 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00', 0x2}) [ 779.876386] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 779.896269] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 779.902975] CS: sel=0x3000, attr=0x08093, limit=0xffffffff, base=0x0000000000030000 11:37:23 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) close(0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="2e0000002e008183ad5de0713c444d00070000001000034000ff39a0053582c137153e37835b3f00040000000000", 0x2e}], 0x1}, 0x0) close(0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 11:37:23 executing program 0: r0 = socket$inet_sctp(0x2, 0x1000000000000005, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, &(0x7f0000000080)={0x7, 0x9, 0x6, 0xffffffffffffffff, 0x0}, &(0x7f00000000c0)=0x10) ioctl(0xffffffffffffffff, 0x6, &(0x7f0000000140)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000fed000/0x13000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff4000/0x2000)=nil, 0x0}, 0x68) r2 = syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x1, 0x200) ioctl$TIOCLINUX2(r2, 0x541c, &(0x7f00000001c0)={0x2, 0x4, 0xd83, 0x3, 0x6, 0x9}) fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = syz_open_dev$usbmon(0x0, 0x200003ff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000003c0)=0x1) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000080), 0x800) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) write$cgroup_int(r4, &(0x7f0000000000)=0xbad9, 0x12) clock_gettime(0x0, &(0x7f0000000280)) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) syz_genetlink_get_family_id$ipvs(0x0) msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000440)=""/176) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0) close(r5) readv(r3, &(0x7f0000000340), 0x3) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000300)={r1, @in={{0x2, 0x0, @multicast1}}}, 0x0) r6 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0xffffffff, 0x20001) ioctl$BLKBSZSET(r6, 0x40081271, &(0x7f0000000040)=0x6) 11:37:23 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x88a8ffff, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:37:23 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00', 0x2}) [ 779.987808] DS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 780.047393] SS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 780.055740] ES: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 780.089959] FS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 11:37:23 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) close(0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="2e0000002e008183ad5de0713c444d00070000001000034000ff39a0053582c137153e37835b3f00040000000000", 0x2e}], 0x1}, 0x0) close(0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 11:37:23 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x88caffff, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) [ 780.166589] GS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 780.239011] GDTR: limit=0x00000000, base=0x0000000000000000 [ 780.256444] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 780.264760] IDTR: limit=0x00000000, base=0x0000000000000000 [ 780.300556] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 780.320337] EFER = 0x0000000000006000 PAT = 0x0007040600070406 [ 780.337019] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 780.337034] Interruptibility = 00000008 ActivityState = 00000000 [ 780.361938] *** Host State *** [ 780.365299] RIP = 0xffffffff811b3710 RSP = 0xffff88803467f8b8 [ 780.371474] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 780.383727] FSBase=00007f45eb8ae700 GSBase=ffff8880ae900000 TRBase=fffffe0000003000 [ 780.392083] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 780.404250] CR0=0000000080050033 CR3=0000000052476000 CR4=00000000001426e0 [ 780.411468] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201360 [ 780.423858] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 780.430138] *** Control State *** [ 780.433748] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 780.446006] EntryControls=0000d1ff ExitControls=002fefff [ 780.451681] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 780.464133] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 780.471101] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 780.492325] reason=80000021 qualification=0000000000000000 [ 780.511021] IDTVectoring: info=00000000 errcode=00000000 [ 780.528865] TSC Offset = 0xfffffe5c2390d03e [ 780.533291] EPT pointer = 0x000000002a3a001e 11:37:24 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup(r1) ioctl$PPPIOCDISCONN(r2, 0x7439) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000000)=@req3={0x6000000, 0x3, 0x6000000, 0x3}, 0x1c) setsockopt$packet_int(r1, 0x107, 0x9, &(0x7f0000000080), 0xfffffd22) mkdir(&(0x7f000082f000)='./control\x00', 0x0) open(&(0x7f000080dff6)='./control\x00', 0x0, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000bc8000)={0xaa, 0x70}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000bf7000/0x1000)=nil, 0x1000}, 0x1}) r4 = open(&(0x7f000080dff6)='./control\x00', 0x0, 0x0) r5 = userfaultfd(0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000bc8000)={0xaa, 0x70}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000034d000/0x1000)=nil, 0x1000}, 0x1}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) dup2(r4, r5) 11:37:24 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00', 0x2}) 11:37:24 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x88ffffff, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:37:24 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="2e0000002e008183ad5de0713c444d00070000001000034000ff39a0053582c137153e37835b3f00040000000000", 0x2e}], 0x1}, 0x0) close(0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 11:37:24 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000680)='/dev/net/tun\x00', 0x80000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00', 0x2}) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) userfaultfd(0x0) r2 = socket$caif_seqpacket(0x25, 0x5, 0x2) bind(r2, &(0x7f0000000280)=@nfc={0x27, 0x1, 0x0, 0x6}, 0x80) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) creat(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) chdir(&(0x7f0000000180)='./file0\x00') r3 = open(&(0x7f0000000280)='./bus\x00', 0x141042, 0x2) write$UHID_INPUT(r3, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000240), 0x0, 0x0) fstat(r3, &(0x7f0000000880)) getresuid(&(0x7f0000002e00), 0x0, &(0x7f0000002e80)) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) close(r1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000980)) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000340)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb96\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\x97\x80\xe9\xa1S\f\xc7?\xa6\x95I\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~\xff\xff\x00\x00#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xd5\x1b\xca\xa9\xc7[\xa2\xef\xacM\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xb4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\x04R\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xafh_\x9c\x91\xc1q_|L\x11\x03\x94\xc0\t=\x17\x95P\xd7\xcdH\x1c8^ARL\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x13\x82Rk\x9cAz\xab\rT\xadLO\f\x17Y\x1dg\x10\xe3LL\x1fC\xfa\xd9\xb0\xfb\xb4\xf3[\xdf\xd0\xd6\x82\xf6~0\xb8\xf4\xb0X\xfew\xbdY\n\xd6\x105\x9c\xb7\xe5F\xc1:9\xb8\xc2\x85\b\xfd\x92\xb0k\x93\xd7\xc40J\xc2\xf0=p\xd6\xe3\xe4W:\xd2\xf6\xfc\x83\xb1\xcb\xd1K\xb9(\"9(~\xf4\xf4\x94`\xe8\xdb\x17\xf9\xcf#)T\xcdj^\xa61\x12\x91 \xd7\x92\xc0\xd0s\xa9\xe4\x18:') getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000080)={{{@in=@multicast2, @in6=@remote}}, {{@in=@remote}, 0x0, @in=@empty}}, &(0x7f0000000000)=0xe8) geteuid() stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)) ioctl$NBD_DISCONNECT(r3, 0xab08) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETOWNER(r0, 0x400454cc, r4) 11:37:24 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x100, 0x101000) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f00000000c0)=0x3, 0x4) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SMI(r4, 0xaeb7) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a0000120800000088b070") 11:37:24 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x89060000, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:37:24 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="2e0000002e008183ad5de0713c444d00070000001000034000ff39a0053582c137153e37835b3f00040000000000", 0x2e}], 0x1}, 0x0) close(0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 11:37:24 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00', 0x3}) [ 781.666277] net_ratelimit: 21 callbacks suppressed [ 781.666286] protocol 88fb is buggy, dev hsr_slave_0 [ 781.670187] *** Guest State *** [ 781.671345] protocol 88fb is buggy, dev hsr_slave_1 [ 781.683288] CR0: actual=0x0000000000050032, shadow=0x0000000000050012, gh_mask=fffffffffffffff7 11:37:24 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x89ffffff, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) [ 781.737366] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 781.756754] CR3 = 0x0000000000000000 [ 781.760642] RSP = 0x0000000000000000 RIP = 0x0000000000008000 [ 781.785688] RFLAGS=0x00000002 DR7 = 0x0000000000000400 11:37:24 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="2e0000002e008183ad5de0713c444d00070000001000034000ff39a0053582c137153e37835b3f00040000000000", 0x2e}], 0x1}, 0x0) close(0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) [ 781.820780] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 781.836296] protocol 88fb is buggy, dev hsr_slave_0 [ 781.836329] CS: sel=0x3000, attr=0x08093, limit=0xffffffff, base=0x0000000000030000 [ 781.841452] protocol 88fb is buggy, dev hsr_slave_1 [ 781.868617] DS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 781.901223] SS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 11:37:25 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0xa0008000, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) [ 781.926369] ES: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 781.994832] FS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 782.044939] GS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 782.056025] GDTR: limit=0x00000000, base=0x0000000000000000 [ 782.069913] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 782.080406] IDTR: limit=0x00000000, base=0x0000000000000000 [ 782.092487] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 782.102782] EFER = 0x0000000000006000 PAT = 0x0007040600070406 [ 782.120223] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 782.141813] Interruptibility = 00000008 ActivityState = 00000000 [ 782.174207] *** Host State *** [ 782.191030] RIP = 0xffffffff811b3710 RSP = 0xffff888084c3f8b8 [ 782.206313] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 782.212874] FSBase=00007f45eb8ae700 GSBase=ffff8880ae900000 TRBase=fffffe0000003000 [ 782.246281] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 782.252319] CR0=0000000080050033 CR3=0000000054f64000 CR4=00000000001426e0 [ 782.276298] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201360 [ 782.296268] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 782.302443] *** Control State *** [ 782.323788] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 782.336261] EntryControls=0000d1ff ExitControls=002fefff [ 782.356275] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 782.376275] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 782.383066] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 782.406281] reason=80000021 qualification=0000000000000000 [ 782.429731] IDTVectoring: info=00000000 errcode=00000000 [ 782.454091] TSC Offset = 0xfffffe5b27794f9b [ 782.491732] EPT pointer = 0x000000009579301e [ 782.786254] protocol 88fb is buggy, dev hsr_slave_0 [ 782.786259] protocol 88fb is buggy, dev hsr_slave_0 [ 782.786343] protocol 88fb is buggy, dev hsr_slave_1 [ 782.791376] protocol 88fb is buggy, dev hsr_slave_1 [ 782.796464] protocol 88fb is buggy, dev hsr_slave_0 [ 782.801445] protocol 88fb is buggy, dev hsr_slave_0 11:37:26 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup(r1) ioctl$PPPIOCDISCONN(r2, 0x7439) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000000)=@req3={0x6000000, 0x3, 0x6000000, 0x3}, 0x1c) setsockopt$packet_int(r1, 0x107, 0x9, &(0x7f0000000080), 0xfffffd22) mkdir(&(0x7f000082f000)='./control\x00', 0x0) open(&(0x7f000080dff6)='./control\x00', 0x0, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000bc8000)={0xaa, 0x70}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000bf7000/0x1000)=nil, 0x1000}, 0x1}) r4 = open(&(0x7f000080dff6)='./control\x00', 0x0, 0x0) r5 = userfaultfd(0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000bc8000)={0xaa, 0x70}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000034d000/0x1000)=nil, 0x1000}, 0x1}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) dup2(r4, r5) 11:37:26 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00', 0x4}) 11:37:26 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="2e0000002e008183ad5de0713c444d00070000001000034000ff39a0053582c137153e37835b3f00040000000000", 0x2e}], 0x1}, 0x0) close(0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 11:37:26 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0xac141400, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:37:26 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000680)='/dev/net/tun\x00', 0x80000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00', 0x2}) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) userfaultfd(0x0) r2 = socket$caif_seqpacket(0x25, 0x5, 0x2) bind(r2, &(0x7f0000000280)=@nfc={0x27, 0x1, 0x0, 0x6}, 0x80) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) creat(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) chdir(&(0x7f0000000180)='./file0\x00') r3 = open(&(0x7f0000000280)='./bus\x00', 0x141042, 0x2) write$UHID_INPUT(r3, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000240), 0x0, 0x0) fstat(r3, &(0x7f0000000880)) getresuid(&(0x7f0000002e00), 0x0, &(0x7f0000002e80)) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) close(r1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000980)) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000340)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb96\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\x97\x80\xe9\xa1S\f\xc7?\xa6\x95I\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~\xff\xff\x00\x00#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xd5\x1b\xca\xa9\xc7[\xa2\xef\xacM\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xb4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\x04R\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xafh_\x9c\x91\xc1q_|L\x11\x03\x94\xc0\t=\x17\x95P\xd7\xcdH\x1c8^ARL\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x13\x82Rk\x9cAz\xab\rT\xadLO\f\x17Y\x1dg\x10\xe3LL\x1fC\xfa\xd9\xb0\xfb\xb4\xf3[\xdf\xd0\xd6\x82\xf6~0\xb8\xf4\xb0X\xfew\xbdY\n\xd6\x105\x9c\xb7\xe5F\xc1:9\xb8\xc2\x85\b\xfd\x92\xb0k\x93\xd7\xc40J\xc2\xf0=p\xd6\xe3\xe4W:\xd2\xf6\xfc\x83\xb1\xcb\xd1K\xb9(\"9(~\xf4\xf4\x94`\xe8\xdb\x17\xf9\xcf#)T\xcdj^\xa61\x12\x91 \xd7\x92\xc0\xd0s\xa9\xe4\x18:') getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000080)={{{@in=@multicast2, @in6=@remote}}, {{@in=@remote}, 0x0, @in=@empty}}, &(0x7f0000000000)=0xe8) geteuid() stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)) ioctl$NBD_DISCONNECT(r3, 0xab08) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETOWNER(r0, 0x400454cc, r4) 11:37:26 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SMI(r3, 0xaeb7) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) r4 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3f, 0x103080) linkat(r4, &(0x7f00000000c0)='./file0\x00', r1, &(0x7f0000000100)='./file0\x00', 0x1400) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a0000120800000088b070") 11:37:26 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00', 0x6}) 11:37:26 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0xfdffffff, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:37:26 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="2e0000002e008183ad5de0713c444d00070000001000034000ff39a0053582c137153e37835b3f00040000000000", 0x2e}], 0x1}, 0x0) close(0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 11:37:26 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SMI(r3, 0xaeb7) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a0000120800000088b070") 11:37:26 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0xfeffffff, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:37:27 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00', 0x8}) 11:37:28 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup(r1) ioctl$PPPIOCDISCONN(r2, 0x7439) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000000)=@req3={0x6000000, 0x3, 0x6000000, 0x3}, 0x1c) setsockopt$packet_int(r1, 0x107, 0x9, &(0x7f0000000080), 0xfffffd22) mkdir(&(0x7f000082f000)='./control\x00', 0x0) r3 = open(&(0x7f000080dff6)='./control\x00', 0x0, 0x0) r4 = userfaultfd(0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000bc8000)={0xaa, 0x70}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000bf7000/0x1000)=nil, 0x1000}, 0x1}) open(&(0x7f000080dff6)='./control\x00', 0x0, 0x0) r5 = userfaultfd(0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000bc8000)={0xaa, 0x70}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000034d000/0x1000)=nil, 0x1000}, 0x1}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) dup2(r3, r4) 11:37:28 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="2e0000002e008183ad5de0713c444d00070000001000034000ff39a0053582c137153e37835b3f00040000000000", 0x2e}], 0x1}, 0x0) close(0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 11:37:28 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0xffffa888, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:37:28 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00', 0x10}) 11:37:28 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_AGP_RELEASE(r0, 0x6431) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SMI(r4, 0xaeb7) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) setsockopt$sock_void(r1, 0x1, 0x1b, 0x0, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000500)=""/4096, &(0x7f0000000100)=0x1000) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a0000120800000088b070") 11:37:28 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="2e0000002e008183ad5de0713c444d00070000001000034000ff39a0053582c137153e37835b3f00040000000000", 0x2e}], 0x1}, 0x0) close(0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 11:37:28 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0xffffca88, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:37:28 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00', 0x25}) 11:37:28 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="2e0000002e008183ad5de0713c444d00070000001000034000ff39a0053582c137153e37835b3f00040000000000", 0x2e}], 0x1}, 0x0) close(0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) [ 785.492002] *** Guest State *** [ 785.498880] CR0: actual=0x0000000000050032, shadow=0x0000000000050012, gh_mask=fffffffffffffff7 [ 785.521713] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 11:37:28 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00\x00\x00\x00\x00\x00\xff\xff\xff\xc3\x00', 0x2}) [ 785.557453] CR3 = 0x0000000000000000 [ 785.569959] RSP = 0x0000000000000000 RIP = 0x0000000000008000 [ 785.597456] RFLAGS=0x00000002 DR7 = 0x0000000000000400 11:37:28 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0xffffdd86, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:37:28 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="2e0000002e008183ad5de0713c444d00070000001000034000ff39a0053582c137153e37835b3f00040000000000", 0x2e}], 0x1}, 0x0) close(0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) [ 785.627478] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 785.649868] CS: sel=0x3000, attr=0x08093, limit=0xffffffff, base=0x0000000000030000 [ 785.696843] DS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 785.722537] SS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 785.740807] ES: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 785.768696] FS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 785.788146] GS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 785.806890] GDTR: limit=0x00000000, base=0x0000000000000000 [ 785.831036] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 785.850392] IDTR: limit=0x00000000, base=0x0000000000000000 [ 785.869769] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 785.886808] EFER = 0x0000000000006000 PAT = 0x0007040600070406 [ 785.901137] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 785.922366] Interruptibility = 00000008 ActivityState = 00000000 [ 785.935694] *** Host State *** [ 785.946278] RIP = 0xffffffff811b3710 RSP = 0xffff88805a60f8b8 [ 785.968731] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 785.988797] FSBase=00007f45eb8ae700 GSBase=ffff8880ae800000 TRBase=fffffe0000033000 [ 786.011527] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 786.023092] CR0=0000000080050033 CR3=000000003a4cf000 CR4=00000000001426f0 [ 786.031012] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87201360 [ 786.043437] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 786.049852] *** Control State *** [ 786.053423] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 786.065927] EntryControls=0000d1ff ExitControls=002fefff [ 786.074565] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 786.087465] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 786.094232] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 786.104798] reason=80000021 qualification=0000000000000000 [ 786.113990] IDTVectoring: info=00000000 errcode=00000000 [ 786.123432] TSC Offset = 0xfffffe591a72622c [ 786.130103] EPT pointer = 0x00000000a821701e [ 786.946258] net_ratelimit: 18 callbacks suppressed [ 786.946267] protocol 88fb is buggy, dev hsr_slave_0 [ 786.946327] protocol 88fb is buggy, dev hsr_slave_1 [ 786.951331] protocol 88fb is buggy, dev hsr_slave_1 [ 786.956400] protocol 88fb is buggy, dev hsr_slave_0 [ 786.961397] protocol 88fb is buggy, dev hsr_slave_0 [ 786.966383] protocol 88fb is buggy, dev hsr_slave_1 [ 786.971399] protocol 88fb is buggy, dev hsr_slave_1 11:37:30 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup(r1) ioctl$PPPIOCDISCONN(r2, 0x7439) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000000)=@req3={0x6000000, 0x3, 0x6000000, 0x3}, 0x1c) setsockopt$packet_int(r1, 0x107, 0x9, &(0x7f0000000080), 0xfffffd22) mkdir(&(0x7f000082f000)='./control\x00', 0x0) r3 = open(&(0x7f000080dff6)='./control\x00', 0x0, 0x0) r4 = userfaultfd(0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000bc8000)={0xaa, 0x70}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000bf7000/0x1000)=nil, 0x1000}, 0x1}) open(&(0x7f000080dff6)='./control\x00', 0x0, 0x0) r5 = userfaultfd(0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000bc8000)={0xaa, 0x70}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000034d000/0x1000)=nil, 0x1000}, 0x1}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) dup2(r3, r4) 11:37:30 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00', 0x2}) 11:37:30 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0xfffff000, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:37:30 executing program 0: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x132, 0x0, 0x0, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:37:30 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="2e0000002e008183ad5de0713c444d00070000001000034000ff39a0053582c137153e37835b3f00040000000000", 0x2e}], 0x1}, 0x0) close(0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 11:37:30 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SMI(r3, 0xaeb7) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x200, 0x0) accept4$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14, 0x800) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a0000120800000088b070") 11:37:30 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="2e0000002e008183ad5de0713c444d00070000001000034000ff39a0053582c137153e37835b3f00040000000000", 0x2e}], 0x1}, 0x0) close(0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 11:37:30 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00', 0x2}) 11:37:30 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0xffffff84, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:37:30 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup(r1) ioctl$PPPIOCDISCONN(r2, 0x7439) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000000)=@req3={0x6000000, 0x3, 0x6000000, 0x3}, 0x1c) setsockopt$packet_int(r1, 0x107, 0x9, &(0x7f0000000080), 0xfffffd22) mkdir(&(0x7f000082f000)='./control\x00', 0x0) r3 = open(&(0x7f000080dff6)='./control\x00', 0x0, 0x0) r4 = userfaultfd(0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000bc8000)={0xaa, 0x70}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000bf7000/0x1000)=nil, 0x1000}, 0x1}) open(&(0x7f000080dff6)='./control\x00', 0x0, 0x0) r5 = userfaultfd(0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000bc8000)={0xaa, 0x70}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000034d000/0x1000)=nil, 0x1000}, 0x1}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) dup2(r3, r4) [ 787.358083] *** Guest State *** [ 787.361432] CR0: actual=0x0000000000050032, shadow=0x0000000000050012, gh_mask=fffffffffffffff7 [ 787.386648] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 787.395856] CR3 = 0x0000000000000000 [ 787.419144] RSP = 0x0000000000000000 RIP = 0x0000000000008000 [ 787.425163] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 787.483390] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 787.502667] CS: sel=0x3000, attr=0x08093, limit=0xffffffff, base=0x0000000000030000 11:37:30 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0xffffff88, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) [ 787.525964] DS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 787.544579] SS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 787.566292] ES: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 11:37:30 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00', 0x2}) [ 787.589922] FS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 787.619648] GS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 787.657472] GDTR: limit=0x00000000, base=0x0000000000000000 [ 787.676298] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 787.691938] IDTR: limit=0x00000000, base=0x0000000000000000 [ 787.717403] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 787.766381] EFER = 0x0000000000006000 PAT = 0x0007040600070406 [ 787.773065] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 787.790765] Interruptibility = 00000008 ActivityState = 00000000 [ 787.803933] *** Host State *** [ 787.811911] RIP = 0xffffffff811b3710 RSP = 0xffff88805af7f8b8 [ 787.824938] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 787.838312] FSBase=00007f45eb8ae700 GSBase=ffff8880ae800000 TRBase=fffffe0000003000 [ 787.855376] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 787.868374] CR0=0000000080050033 CR3=000000002bd63000 CR4=00000000001426f0 [ 787.883427] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201360 [ 787.902155] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 787.906261] protocol 88fb is buggy, dev hsr_slave_0 [ 787.913473] protocol 88fb is buggy, dev hsr_slave_1 [ 787.938302] *** Control State *** [ 787.941794] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 787.966311] EntryControls=0000d1ff ExitControls=002fefff [ 787.972001] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 787.986866] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 788.001528] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 788.016371] reason=80000021 qualification=0000000000000000 [ 788.030681] IDTVectoring: info=00000000 errcode=00000000 [ 788.042024] TSC Offset = 0xfffffe5818b750fd [ 788.052172] EPT pointer = 0x000000008d21001e [ 788.066327] protocol 88fb is buggy, dev hsr_slave_0 11:37:32 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup(r1) ioctl$PPPIOCDISCONN(r2, 0x7439) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000000)=@req3={0x6000000, 0x3, 0x6000000, 0x3}, 0x1c) setsockopt$packet_int(r1, 0x107, 0x9, &(0x7f0000000080), 0xfffffd22) mkdir(&(0x7f000082f000)='./control\x00', 0x0) r3 = open(&(0x7f000080dff6)='./control\x00', 0x0, 0x0) r4 = userfaultfd(0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000bc8000)={0xaa, 0x70}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000bf7000/0x1000)=nil, 0x1000}, 0x1}) open(&(0x7f000080dff6)='./control\x00', 0x0, 0x0) r5 = userfaultfd(0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000bc8000)={0xaa, 0x70}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000034d000/0x1000)=nil, 0x1000}, 0x1}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) dup2(r3, r4) 11:37:32 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="2e0000002e008183ad5de0713c444d00070000001000034000ff39a0053582c137153e37835b3f00040000000000", 0x2e}], 0x1}, 0x0) close(0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 11:37:32 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0xffffff89, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:37:32 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00', 0x2}) 11:37:32 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000540)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80004c41}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x78, r2, 0x834, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@rand_addr=0x1}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(r3, 0xaeb7) r4 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100)="6692c0dd0a508aa3e1c8222175f3eafddd44ef2c4ef7a09e46b8393d4c3aa7b2784c55609f71f8cda43d9c3391df0b49dfaeb04a0eff4c29beaae0382bf89fe15803cc4e6dacb84b8c7b574f0e234ca3f29ba4f43bc0830670d9c6699fa4f63fcb0e2bb520444e02460ac70b5923a352e321", 0x72, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r4, 0x7) r5 = semget$private(0x0, 0x1, 0x1) semctl$IPC_STAT(r5, 0x0, 0x2, &(0x7f0000000180)=""/90) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a0000120800000088b070") 11:37:32 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup(r1) ioctl$PPPIOCDISCONN(r2, 0x7439) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000000)=@req3={0x6000000, 0x3, 0x6000000, 0x3}, 0x1c) setsockopt$packet_int(r1, 0x107, 0x9, &(0x7f0000000080), 0xfffffd22) mkdir(&(0x7f000082f000)='./control\x00', 0x0) r3 = open(&(0x7f000080dff6)='./control\x00', 0x0, 0x0) r4 = userfaultfd(0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000bc8000)={0xaa, 0x70}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000bf7000/0x1000)=nil, 0x1000}, 0x1}) open(&(0x7f000080dff6)='./control\x00', 0x0, 0x0) r5 = userfaultfd(0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000bc8000)={0xaa, 0x70}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000034d000/0x1000)=nil, 0x1000}, 0x1}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) dup2(r3, r4) 11:37:32 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0xfffffffd, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:37:32 executing program 4: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="2e0000002e008183ad5de0713c444d00070000001000034000ff39a0053582c137153e37835b3f00040000000000", 0x2e}], 0x1}, 0x0) close(0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 11:37:32 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00', 0x2}) 11:37:32 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000140)="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") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SMI(r3, 0xaeb7) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x2710, 0xfffffffffffffffd, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a0000120800000088b070") 11:37:32 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0xfffffffe, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:37:32 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00', 0x2}) 11:37:34 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup(r1) ioctl$PPPIOCDISCONN(r2, 0x7439) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000000)=@req3={0x6000000, 0x3, 0x6000000, 0x3}, 0x1c) setsockopt$packet_int(r1, 0x107, 0x9, &(0x7f0000000080), 0xfffffd22) mkdir(&(0x7f000082f000)='./control\x00', 0x0) r3 = open(&(0x7f000080dff6)='./control\x00', 0x0, 0x0) r4 = userfaultfd(0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000bc8000)={0xaa, 0x70}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000bf7000/0x1000)=nil, 0x1000}, 0x1}) r5 = open(&(0x7f000080dff6)='./control\x00', 0x0, 0x0) r6 = userfaultfd(0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000bc8000)={0xaa, 0x70}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000034d000/0x1000)=nil, 0x1000}, 0x1}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) dup2(r5, r6) dup2(r3, r4) 11:37:34 executing program 4: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="2e0000002e008183ad5de0713c444d00070000001000034000ff39a0053582c137153e37835b3f00040000000000", 0x2e}], 0x1}, 0x0) close(0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 11:37:34 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x8000a0ffffffff, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:37:34 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = dup3(r2, r0, 0x80000) connect$pppoe(r4, &(0x7f0000000000)={0x18, 0x0, {0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'veth1_to_team\x00'}}, 0x1e) ioctl$KVM_SMI(r3, 0xaeb7) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a0000120800000088b070") 11:37:34 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00', 0x2}) 11:37:34 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="2e0000002e008183ad5de0713c444d00070000001000034000ff39a0053582c137153e37835b3f00040000000000", 0x2e}], 0x1}, 0x0) close(0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 11:37:34 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0xf0ffffffffffff, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:37:34 executing program 4: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="2e0000002e008183ad5de0713c444d00070000001000034000ff39a0053582c137153e37835b3f00040000000000", 0x2e}], 0x1}, 0x0) close(0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 11:37:34 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00', 0x2}) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x60020, 0x0) r3 = socket$inet6(0xa, 0x7, 0xfa) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) socketpair(0x3, 0x5, 0x80, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1d, 0x0, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x2, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r5, 0x800000c0045002, &(0x7f0000000580)) ioctl$SIOCGETNODEID(0xffffffffffffffff, 0x89e1, 0x0) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r4) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000180)={'ip6g(\xcd\x9e\x8f\xbe@\xcc\x00', 0xfffffffffffffff8}) r6 = socket$bt_rfcomm(0x1f, 0x0, 0x3) dup2(r6, 0xffffffffffffffff) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000100)={'bond0\x00'}) r7 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r7, 0x4040ae77, &(0x7f0000000300)={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000980)) r8 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x10003, 0x0) ioctl$PPPIOCSNPMODE(r8, 0x4008744b, &(0x7f0000000080)={0xc025, 0x3}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000340)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb96\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\x97\x80\xe9\xa1S\f\xc7?\xa6\x95I\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~\xff\xff\x00\x00#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xd5\x1b\xca\xa9\xc7[\xa2\xef\xacM\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xb4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\x04R\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xafh_\x9c\x91\xc1q_|L\x11\x03\x94\xc0\t=\x17\x95P\xd7\xcdH\x1c8^ARL\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x13\x82Rk\x9cAz\xab\rT\xadLO\f\x17Y\x1dg\x10\xe3LL\x1fC\xfa\xd9\xb0\xfb\xb4\xf3[\xdf\xd0\xd6\x82\xf6~0\xb8\xf4\xb0X\xfew\xbdY\n\xd6\x105\x9c\xb7\xe5F\xc1:9\xb8\xc2\x85\b\xfd\x92\xb0k\x93\xd7\xc40J\xc2\xf0=p\xd6\xe3\xe4W:\xd2\xf6\xfc\x83\xb1\xcb\xd1K\xb9(\"9(~\xf4\xf4\x94`\xe8\xdb\x17\xf9\xcf#)T\xcdj^\xa61\x12\x91 \xd7\x92\xc0\xd0s\xa9\xe4\x18:') 11:37:34 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00', 0x2}) [ 791.367985] *** Guest State *** [ 791.371428] CR0: actual=0x0000000000050032, shadow=0x0000000000050012, gh_mask=fffffffffffffff7 [ 791.416939] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 791.435844] CR3 = 0x0000000000000000 [ 791.443442] RSP = 0x0000000000000000 RIP = 0x0000000000008000 11:37:34 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x100000000000000, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) [ 791.489812] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 791.509762] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 791.531629] CS: sel=0x3000, attr=0x08093, limit=0xffffffff, base=0x0000000000030000 11:37:34 executing program 4: perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="2e0000002e008183ad5de0713c444d00070000001000034000ff39a0053582c137153e37835b3f00040000000000", 0x2e}], 0x1}, 0x0) close(0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) [ 791.600881] DS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 791.643136] SS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 791.677233] ES: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 791.704008] FS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 791.759844] GS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 791.776350] GDTR: limit=0x00000000, base=0x0000000000000000 [ 791.784550] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 791.803814] IDTR: limit=0x00000000, base=0x0000000000000000 [ 791.821923] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 791.839226] EFER = 0x0000000000006000 PAT = 0x0007040600070406 [ 791.852440] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 791.867255] Interruptibility = 00000008 ActivityState = 00000000 [ 791.880313] *** Host State *** [ 791.883631] RIP = 0xffffffff811b3710 RSP = 0xffff8880465778b8 [ 791.900129] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 791.913752] FSBase=00007f45eb8ae700 GSBase=ffff8880ae800000 TRBase=fffffe0000003000 [ 791.929912] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 791.942572] CR0=0000000080050033 CR3=0000000099a0e000 CR4=00000000001426f0 [ 791.956270] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201360 [ 791.971092] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 791.984224] *** Control State *** [ 791.991800] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 792.006237] EntryControls=0000d1ff ExitControls=002fefff [ 792.016595] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 792.032527] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 792.046264] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 792.059864] reason=80000021 qualification=0000000000000000 [ 792.066353] net_ratelimit: 21 callbacks suppressed [ 792.066360] protocol 88fb is buggy, dev hsr_slave_0 [ 792.066423] protocol 88fb is buggy, dev hsr_slave_1 [ 792.105283] IDTVectoring: info=00000000 errcode=00000000 [ 792.136291] TSC Offset = 0xfffffe55f5722eae [ 792.140651] EPT pointer = 0x000000008c80c01e [ 792.152710] *** Guest State *** [ 792.157008] CR0: actual=0x0000000000050032, shadow=0x0000000000050012, gh_mask=fffffffffffffff7 [ 792.165942] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 792.175235] CR3 = 0x0000000000000000 [ 792.190106] RSP = 0x0000000000000000 RIP = 0x0000000000008000 [ 792.196109] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 792.211534] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 792.226288] protocol 88fb is buggy, dev hsr_slave_0 [ 792.231380] protocol 88fb is buggy, dev hsr_slave_1 [ 792.241716] CS: sel=0x3000, attr=0x08093, limit=0xffffffff, base=0x0000000000030000 [ 792.261429] DS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 792.281328] SS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 792.296263] ES: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 792.316334] FS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 792.328034] GS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 792.336119] GDTR: limit=0x00000000, base=0x0000000000000000 [ 792.344720] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 792.353159] IDTR: limit=0x00000000, base=0x0000000000000000 [ 792.361501] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 792.369928] EFER = 0x0000000000006000 PAT = 0x0007040600070406 [ 792.376764] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 792.384311] Interruptibility = 00000008 ActivityState = 00000000 [ 792.390945] *** Host State *** [ 792.394232] RIP = 0xffffffff811b3710 RSP = 0xffff8880465778b8 [ 792.400618] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 792.416249] FSBase=00007f45eb8ae700 GSBase=ffff8880ae800000 TRBase=fffffe0000003000 [ 792.424065] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 792.446231] CR0=0000000080050033 CR3=0000000099a0e000 CR4=00000000001426f0 [ 792.465588] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201360 [ 792.480586] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 792.494811] *** Control State *** [ 792.503891] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 792.519813] EntryControls=0000d1ff ExitControls=002fefff [ 792.525291] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 792.546219] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 792.563215] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 792.579043] reason=80000021 qualification=0000000000000000 [ 792.585387] IDTVectoring: info=00000000 errcode=00000000 [ 792.605695] TSC Offset = 0xfffffe558b50498b [ 792.615944] EPT pointer = 0x00000000358bf01e 11:37:36 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup(r1) ioctl$PPPIOCDISCONN(r2, 0x7439) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000000)=@req3={0x6000000, 0x3, 0x6000000, 0x3}, 0x1c) setsockopt$packet_int(r1, 0x107, 0x9, &(0x7f0000000080), 0xfffffd22) mkdir(&(0x7f000082f000)='./control\x00', 0x0) r3 = open(&(0x7f000080dff6)='./control\x00', 0x0, 0x0) r4 = userfaultfd(0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000bc8000)={0xaa, 0x70}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000bf7000/0x1000)=nil, 0x1000}, 0x1}) r5 = open(&(0x7f000080dff6)='./control\x00', 0x0, 0x0) r6 = userfaultfd(0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000bc8000)={0xaa, 0x70}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000034d000/0x1000)=nil, 0x1000}, 0x1}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) dup2(r5, r6) dup2(r3, r4) 11:37:36 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00', 0x2}) 11:37:36 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x200000000000000, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:37:36 executing program 4: perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="2e0000002e008183ad5de0713c444d00070000001000034000ff39a0053582c137153e37835b3f00040000000000", 0x2e}], 0x1}, 0x0) close(0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 11:37:36 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00', 0x2}) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x60020, 0x0) r3 = socket$inet6(0xa, 0x7, 0xfa) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) socketpair(0x3, 0x5, 0x80, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1d, 0x0, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x2, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r5, 0x800000c0045002, &(0x7f0000000580)) ioctl$SIOCGETNODEID(0xffffffffffffffff, 0x89e1, 0x0) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r4) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000180)={'ip6g(\xcd\x9e\x8f\xbe@\xcc\x00', 0xfffffffffffffff8}) r6 = socket$bt_rfcomm(0x1f, 0x0, 0x3) dup2(r6, 0xffffffffffffffff) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000100)={'bond0\x00'}) r7 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r7, 0x4040ae77, &(0x7f0000000300)={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000980)) r8 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x10003, 0x0) ioctl$PPPIOCSNPMODE(r8, 0x4008744b, &(0x7f0000000080)={0xc025, 0x3}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000340)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb96\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\x97\x80\xe9\xa1S\f\xc7?\xa6\x95I\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~\xff\xff\x00\x00#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xd5\x1b\xca\xa9\xc7[\xa2\xef\xacM\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xb4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\x04R\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xafh_\x9c\x91\xc1q_|L\x11\x03\x94\xc0\t=\x17\x95P\xd7\xcdH\x1c8^ARL\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x13\x82Rk\x9cAz\xab\rT\xadLO\f\x17Y\x1dg\x10\xe3LL\x1fC\xfa\xd9\xb0\xfb\xb4\xf3[\xdf\xd0\xd6\x82\xf6~0\xb8\xf4\xb0X\xfew\xbdY\n\xd6\x105\x9c\xb7\xe5F\xc1:9\xb8\xc2\x85\b\xfd\x92\xb0k\x93\xd7\xc40J\xc2\xf0=p\xd6\xe3\xe4W:\xd2\xf6\xfc\x83\xb1\xcb\xd1K\xb9(\"9(~\xf4\xf4\x94`\xe8\xdb\x17\xf9\xcf#)T\xcdj^\xa61\x12\x91 \xd7\x92\xc0\xd0s\xa9\xe4\x18:') 11:37:36 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0xc8a00, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SMI(r3, 0xaeb7) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a0000120800000088b070") 11:37:36 executing program 4: perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="2e0000002e008183ad5de0713c444d00070000001000034000ff39a0053582c137153e37835b3f00040000000000", 0x2e}], 0x1}, 0x0) close(0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 11:37:36 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00', 0x2}) [ 793.186277] protocol 88fb is buggy, dev hsr_slave_0 [ 793.186316] protocol 88fb is buggy, dev hsr_slave_1 [ 793.191423] protocol 88fb is buggy, dev hsr_slave_1 [ 793.196479] protocol 88fb is buggy, dev hsr_slave_0 [ 793.201523] protocol 88fb is buggy, dev hsr_slave_0 [ 793.206495] protocol 88fb is buggy, dev hsr_slave_1 11:37:36 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x300000000000000, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) [ 793.234507] *** Guest State *** [ 793.249811] CR0: actual=0x0000000000050032, shadow=0x0000000000050012, gh_mask=fffffffffffffff7 [ 793.292947] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 793.326354] CR3 = 0x0000000000000000 11:37:36 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00', 0x2}) [ 793.341809] RSP = 0x0000000000000000 RIP = 0x0000000000008000 11:37:36 executing program 4: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="2e0000002e008183ad5de0713c444d00070000001000034000ff39a0053582c137153e37835b3f00040000000000", 0x2e}], 0x1}, 0x0) close(0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 11:37:36 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x400000000000000, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) [ 793.386358] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 793.392805] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 793.436438] CS: sel=0x3000, attr=0x08093, limit=0xffffffff, base=0x0000000000030000 [ 793.471447] DS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 793.496620] SS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 793.534563] ES: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 793.563347] FS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 793.583882] GS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 793.592305] GDTR: limit=0x00000000, base=0x0000000000000000 [ 793.606158] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 793.614704] IDTR: limit=0x00000000, base=0x0000000000000000 [ 793.629250] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 793.640169] EFER = 0x0000000000006000 PAT = 0x0007040600070406 [ 793.649584] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 793.660034] Interruptibility = 00000008 ActivityState = 00000000 [ 793.669203] *** Host State *** [ 793.672581] RIP = 0xffffffff811b3710 RSP = 0xffff88808decf8b8 [ 793.681482] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 793.690904] FSBase=00007f45eb8ae700 GSBase=ffff8880ae900000 TRBase=fffffe0000033000 [ 793.701916] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 793.710896] CR0=0000000080050033 CR3=0000000038793000 CR4=00000000001426e0 [ 793.721073] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87201360 [ 793.730802] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 793.740147] *** Control State *** [ 793.743775] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 793.753552] EntryControls=0000d1ff ExitControls=002fefff [ 793.762786] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 793.772780] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 793.782543] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 793.792187] reason=80000021 qualification=0000000000000000 [ 793.801613] IDTVectoring: info=00000000 errcode=00000000 [ 793.810279] TSC Offset = 0xfffffe54fbb1b0d9 [ 793.814758] EPT pointer = 0x0000000055a3d01e 11:37:37 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup(r1) ioctl$PPPIOCDISCONN(r2, 0x7439) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000000)=@req3={0x6000000, 0x3, 0x6000000, 0x3}, 0x1c) setsockopt$packet_int(r1, 0x107, 0x9, &(0x7f0000000080), 0xfffffd22) mkdir(&(0x7f000082f000)='./control\x00', 0x0) r3 = open(&(0x7f000080dff6)='./control\x00', 0x0, 0x0) r4 = userfaultfd(0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000bc8000)={0xaa, 0x70}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000bf7000/0x1000)=nil, 0x1000}, 0x1}) r5 = open(&(0x7f000080dff6)='./control\x00', 0x0, 0x0) r6 = userfaultfd(0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000bc8000)={0xaa, 0x70}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000034d000/0x1000)=nil, 0x1000}, 0x1}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) dup2(r5, r6) dup2(r3, r4) 11:37:37 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept$inet6(0xffffffffffffff9c, &(0x7f0000000040), &(0x7f00000000c0)=0x1c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f00000001c0)=0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000240)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@mcast2, 0x4e23, 0x3, 0x4e22, 0xffff, 0xa, 0xa0, 0x80, 0xba, r3, r4}, {0x1, 0x0, 0x315f, 0x8, 0x8, 0x0, 0x1, 0x100000001}, {0x8, 0x1, 0x7089, 0x8}, 0x100000001, 0x0, 0x2, 0x1, 0x1, 0x3}, {{@in6=@local, 0x4d6, 0x3c}, 0x2, @in6=@ipv4={[], [], @multicast2}, 0x0, 0x1, 0x3, 0x7fff, 0x63, 0x8, 0x5}}, 0xe8) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000000)=@req3={0x6000000, 0x3, 0x6000000, 0x3}, 0x1c) setsockopt$packet_int(r5, 0x107, 0x9, &(0x7f0000000080), 0x4) 11:37:37 executing program 4: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="2e0000002e008183ad5de0713c444d00070000001000034000ff39a0053582c137153e37835b3f00040000000000", 0x2e}], 0x1}, 0x0) close(0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 11:37:37 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x600000000000000, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:37:37 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00', 0x2}) 11:37:37 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SMI(r3, 0xaeb7) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a0000120800000088b070") 11:37:38 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x700000000000000, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:37:38 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00', 0x2}) 11:37:38 executing program 4: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="2e0000002e008183ad5de0713c444d00070000001000034000ff39a0053582c137153e37835b3f00040000000000", 0x2e}], 0x1}, 0x0) close(0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) [ 794.937800] *** Guest State *** [ 794.941128] CR0: actual=0x0000000000050032, shadow=0x0000000000050012, gh_mask=fffffffffffffff7 [ 794.972259] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 794.996996] CR3 = 0x0000000000000000 [ 795.000780] RSP = 0x0000000000000000 RIP = 0x0000000000008000 [ 795.007567] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 795.036292] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 795.056687] CS: sel=0x3000, attr=0x08093, limit=0xffffffff, base=0x0000000000030000 11:37:38 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x800000000000000, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:37:38 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="2e0000002e008183ad5de0713c444d00070000001000034000ff39a0053582c137153e37835b3f00040000000000", 0x2e}], 0x1}, 0x0) close(0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) [ 795.106335] DS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 795.146135] SS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 11:37:38 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00', 0x2}) [ 795.167031] ES: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 795.175304] FS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 795.193787] GS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 795.241413] GDTR: limit=0x00000000, base=0x0000000000000000 [ 795.274220] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 795.306066] IDTR: limit=0x00000000, base=0x0000000000000000 [ 795.322336] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 795.340117] EFER = 0x0000000000006000 PAT = 0x0007040600070406 [ 795.353704] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 795.367245] Interruptibility = 00000008 ActivityState = 00000000 [ 795.380537] *** Host State *** [ 795.388440] RIP = 0xffffffff811b3710 RSP = 0xffff888054e2f8b8 [ 795.401359] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 795.414724] FSBase=00007f45eb8ae700 GSBase=ffff8880ae800000 TRBase=fffffe0000003000 [ 795.432788] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 795.445623] CR0=0000000080050033 CR3=000000003c7ed000 CR4=00000000001426f0 [ 795.460811] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201360 [ 795.474404] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 795.488693] *** Control State *** [ 795.495714] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 795.510652] EntryControls=0000d1ff ExitControls=002fefff [ 795.521898] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 795.536866] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 795.551635] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 795.573013] reason=80000021 qualification=0000000000000000 [ 795.595284] IDTVectoring: info=00000000 errcode=00000000 [ 795.611735] TSC Offset = 0xfffffe540c434834 [ 795.616267] EPT pointer = 0x00000000556ec01e [ 795.661207] *** Guest State *** [ 795.664703] CR0: actual=0x000000008005003f, shadow=0x000000008005001f, gh_mask=fffffffffffffff7 [ 795.692490] CR4: actual=0x0000000000002068, shadow=0x0000000000000028, gh_mask=ffffffffffffe871 [ 795.731321] CR3 = 0x0000000000000000 [ 795.763010] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 795.773753] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 795.791654] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 795.810430] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 795.831856] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 795.853738] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 795.879940] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 795.901160] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 795.924357] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 795.948143] GDTR: limit=0x00000000, base=0x0000000000000000 [ 795.980818] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 795.999803] IDTR: limit=0x00000000, base=0x0000000000000000 [ 796.020285] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 796.039981] EFER = 0x0000000000006500 PAT = 0x0007040600070406 [ 796.059977] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 796.088033] Interruptibility = 00000000 ActivityState = 00000000 [ 796.094371] *** Host State *** [ 796.108932] RIP = 0xffffffff811b3710 RSP = 0xffff88803069f8b8 [ 796.128129] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 796.149166] FSBase=00007f45eb88d700 GSBase=ffff8880ae900000 TRBase=fffffe0000033000 [ 796.168093] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 796.188188] CR0=0000000080050033 CR3=000000003c7ed000 CR4=00000000001426e0 [ 796.195309] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87201360 [ 796.210430] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 796.220178] *** Control State *** [ 796.223722] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 796.232343] EntryControls=0000d3ff ExitControls=002fefff [ 796.242341] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 796.251497] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 796.261960] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 796.279969] reason=80000021 qualification=0000000000000000 [ 796.299922] IDTVectoring: info=00000000 errcode=00000000 [ 796.305472] TSC Offset = 0xfffffe53a7bb01fd [ 796.319877] EPT pointer = 0x0000000048c6001e 11:37:39 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup(r1) ioctl$PPPIOCDISCONN(r2, 0x7439) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000000)=@req3={0x6000000, 0x3, 0x6000000, 0x3}, 0x1c) setsockopt$packet_int(r1, 0x107, 0x9, &(0x7f0000000080), 0xfffffd22) mkdir(&(0x7f000082f000)='./control\x00', 0x0) r3 = open(&(0x7f000080dff6)='./control\x00', 0x0, 0x0) r4 = userfaultfd(0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000bc8000)={0xaa, 0x70}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000bf7000/0x1000)=nil, 0x1000}, 0x1}) r5 = open(&(0x7f000080dff6)='./control\x00', 0x0, 0x0) r6 = userfaultfd(0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000bc8000)={0xaa, 0x70}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) dup2(r5, r6) dup2(r3, r4) 11:37:40 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept$inet6(0xffffffffffffff9c, &(0x7f0000000040), &(0x7f00000000c0)=0x1c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f00000001c0)=0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000240)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@mcast2, 0x4e23, 0x3, 0x4e22, 0xffff, 0xa, 0xa0, 0x80, 0xba, r3, r4}, {0x1, 0x0, 0x315f, 0x8, 0x8, 0x0, 0x1, 0x100000001}, {0x8, 0x1, 0x7089, 0x8}, 0x100000001, 0x0, 0x2, 0x1, 0x1, 0x3}, {{@in6=@local, 0x4d6, 0x3c}, 0x2, @in6=@ipv4={[], [], @multicast2}, 0x0, 0x1, 0x3, 0x7fff, 0x63, 0x8, 0x5}}, 0xe8) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000000)=@req3={0x6000000, 0x3, 0x6000000, 0x3}, 0x1c) setsockopt$packet_int(r5, 0x107, 0x9, &(0x7f0000000080), 0x4) 11:37:40 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="2e0000002e008183ad5de0713c444d00070000001000034000ff39a0053582c137153e37835b3f00040000000000", 0x2e}], 0x1}, 0x0) close(0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 11:37:40 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x806000000000000, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:37:40 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00', 0x2}) 11:37:40 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SMI(r3, 0xaeb7) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000000c0)={0x7, 0x0, 'client1\x00', 0x2, "051662b5249e9676", "e8e8696df494ee9f326793a1d52128290229ead7c467da3030fbfde80806ae94", 0x7f, 0xfffffffffffffff8}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a0000120800000088b070") [ 797.254300] *** Guest State *** 11:37:40 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00', 0x2}) 11:37:40 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="2e0000002e008183ad5de0713c444d00070000001000034000ff39a0053582c137153e37835b3f00040000000000", 0x2e}], 0x1}, 0x0) close(0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 11:37:40 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0xb00000000000000, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) [ 797.277618] CR0: actual=0x0000000000050032, shadow=0x0000000000050012, gh_mask=fffffffffffffff7 [ 797.309805] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 797.346257] net_ratelimit: 16 callbacks suppressed [ 797.346265] protocol 88fb is buggy, dev hsr_slave_0 [ 797.346278] protocol 88fb is buggy, dev hsr_slave_0 [ 797.351267] protocol 88fb is buggy, dev hsr_slave_1 [ 797.356312] protocol 88fb is buggy, dev hsr_slave_1 [ 797.361346] protocol 88fb is buggy, dev hsr_slave_0 [ 797.366376] protocol 88fb is buggy, dev hsr_slave_0 [ 797.371371] protocol 88fb is buggy, dev hsr_slave_1 [ 797.376369] protocol 88fb is buggy, dev hsr_slave_1 [ 797.417816] CR3 = 0x0000000000000000 [ 797.434055] RSP = 0x0000000000000000 RIP = 0x0000000000008000 [ 797.454106] RFLAGS=0x00000002 DR7 = 0x0000000000000400 11:37:40 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="2e0000002e008183ad5de0713c444d00070000001000034000ff39a0053582c137153e37835b3f00040000000000", 0x2e}], 0x1}, 0x0) close(0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 11:37:40 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00', 0x2}) 11:37:40 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0xd00000000000000, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) [ 797.474177] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 797.497199] CS: sel=0x3000, attr=0x08093, limit=0xffffffff, base=0x0000000000030000 [ 797.545644] DS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 797.582145] SS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 797.622260] ES: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 797.658197] FS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 797.698077] GS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 797.716021] GDTR: limit=0x00000000, base=0x0000000000000000 [ 797.725060] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 797.751375] IDTR: limit=0x00000000, base=0x0000000000000000 [ 797.759596] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 797.776324] EFER = 0x0000000000006000 PAT = 0x0007040600070406 [ 797.797621] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 797.820853] Interruptibility = 00000008 ActivityState = 00000000 [ 797.840570] *** Host State *** [ 797.866224] RIP = 0xffffffff811b3710 RSP = 0xffff8880227bf8b8 [ 797.882414] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 797.901155] FSBase=00007f45eb8ae700 GSBase=ffff8880ae900000 TRBase=fffffe0000003000 [ 797.924644] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 797.941806] CR0=0000000080050033 CR3=000000009ed90000 CR4=00000000001426e0 [ 797.962382] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201360 [ 797.981511] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 798.019875] *** Control State *** [ 798.023369] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 798.023383] EntryControls=0000d1ff ExitControls=002fefff [ 798.072912] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 798.112902] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 798.149656] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 798.178672] reason=80000021 qualification=0000000000000000 [ 798.185015] IDTVectoring: info=00000000 errcode=00000000 [ 798.221640] TSC Offset = 0xfffffe52cb71622f [ 798.226110] EPT pointer = 0x00000000a148001e [ 798.306297] protocol 88fb is buggy, dev hsr_slave_0 [ 798.311450] protocol 88fb is buggy, dev hsr_slave_1 11:37:42 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup(r1) ioctl$PPPIOCDISCONN(r2, 0x7439) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000000)=@req3={0x6000000, 0x3, 0x6000000, 0x3}, 0x1c) setsockopt$packet_int(r1, 0x107, 0x9, &(0x7f0000000080), 0xfffffd22) mkdir(&(0x7f000082f000)='./control\x00', 0x0) r3 = open(&(0x7f000080dff6)='./control\x00', 0x0, 0x0) r4 = userfaultfd(0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000bc8000)={0xaa, 0x70}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000bf7000/0x1000)=nil, 0x1000}, 0x1}) r5 = open(&(0x7f000080dff6)='./control\x00', 0x0, 0x0) r6 = userfaultfd(0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000bc8000)={0xaa, 0x70}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) dup2(r5, r6) dup2(r3, r4) 11:37:42 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept$inet6(0xffffffffffffff9c, &(0x7f0000000040), &(0x7f00000000c0)=0x1c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f00000001c0)=0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000240)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@mcast2, 0x4e23, 0x3, 0x4e22, 0xffff, 0xa, 0xa0, 0x80, 0xba, r3, r4}, {0x1, 0x0, 0x315f, 0x8, 0x8, 0x0, 0x1, 0x100000001}, {0x8, 0x1, 0x7089, 0x8}, 0x100000001, 0x0, 0x2, 0x1, 0x1, 0x3}, {{@in6=@local, 0x4d6, 0x3c}, 0x2, @in6=@ipv4={[], [], @multicast2}, 0x0, 0x1, 0x3, 0x7fff, 0x63, 0x8, 0x5}}, 0xe8) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000000)=@req3={0x6000000, 0x3, 0x6000000, 0x3}, 0x1c) setsockopt$packet_int(r5, 0x107, 0x9, &(0x7f0000000080), 0x4) 11:37:42 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00', 0x2}) 11:37:42 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="2e0000002e008183ad5de0713c444d00070000001000034000ff39a0053582c137153e37835b3f00040000000000", 0x2e}], 0x1}, 0x0) close(0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 11:37:42 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x1100000000000000, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:37:42 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SMI(r3, 0xaeb7) syz_extract_tcp_res$synack(&(0x7f00000000c0), 0x1, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) listen(r0, 0xfffffffffffffff9) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r3, 0xae80, 0x0) fcntl$getflags(r3, 0x408) syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x7, 0x200) connect$rxrpc(r0, &(0x7f0000000100)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x19}}}, 0x24) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a0000120800000088b070") 11:37:42 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="2e0000002e008183ad5de0713c444d00070000001000034000ff39a0053582c137153e37835b3f00040000000000", 0x2e}], 0x1}, 0x0) close(0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 11:37:42 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x1400000000000000, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) [ 799.223249] *** Guest State *** [ 799.226670] CR0: actual=0x0000000000050032, shadow=0x0000000000050012, gh_mask=fffffffffffffff7 [ 799.235535] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 11:37:42 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00', 0x2}) [ 799.302239] CR3 = 0x0000000000000000 [ 799.321750] RSP = 0x0000000000000000 RIP = 0x0000000000008000 11:37:42 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x1c00000000000000, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) [ 799.356259] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 799.362324] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 11:37:42 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="2e0000002e008183ad5de0713c444d00070000001000034000ff39a0053582c137153e37835b3f00040000000000", 0x2e}], 0x1}, 0x0) close(0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) [ 799.415089] CS: sel=0x3000, attr=0x08093, limit=0xffffffff, base=0x0000000000030000 11:37:42 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00', 0x2}) [ 799.471827] DS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 799.533581] SS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 799.566389] ES: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 799.593352] FS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 799.626411] GS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 799.665119] GDTR: limit=0x00000000, base=0x0000000000000000 [ 799.704259] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 799.725758] IDTR: limit=0x00000000, base=0x0000000000000000 [ 799.746317] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 799.765614] EFER = 0x0000000000006000 PAT = 0x0007040600070406 [ 799.783337] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 799.802440] Interruptibility = 00000008 ActivityState = 00000000 [ 799.818231] *** Host State *** [ 799.821590] RIP = 0xffffffff811b3710 RSP = 0xffff88803b36f8b8 [ 799.851773] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 799.858492] FSBase=00007f45eb8ae700 GSBase=ffff8880ae800000 TRBase=fffffe0000033000 [ 799.891587] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 799.898239] CR0=0000000080050033 CR3=00000000569e2000 CR4=00000000001426f0 [ 799.916313] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87201360 [ 799.936142] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 799.959965] *** Control State *** [ 799.975807] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 799.998284] EntryControls=0000d1ff ExitControls=002fefff [ 800.046855] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 800.061093] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 800.085177] *** Guest State *** [ 800.102000] CR0: actual=0x000000008005003f, shadow=0x000000008005001f, gh_mask=fffffffffffffff7 [ 800.131796] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 800.151573] CR4: actual=0x0000000000002068, shadow=0x0000000000000028, gh_mask=ffffffffffffe871 [ 800.174922] reason=80000021 qualification=0000000000000000 [ 800.194769] CR3 = 0x0000000000000000 [ 800.209483] IDTVectoring: info=00000000 errcode=00000000 [ 800.225184] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 800.243154] TSC Offset = 0xfffffe51c161a3d7 [ 800.254118] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 800.271507] EPT pointer = 0x000000003d16501e [ 800.284596] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 800.323686] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 800.359772] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 800.376851] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 800.392712] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 800.402610] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 800.410899] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 800.419161] GDTR: limit=0x00000000, base=0x0000000000000000 [ 800.427392] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 800.435510] IDTR: limit=0x00000000, base=0x0000000000000000 [ 800.443805] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 800.452155] EFER = 0x0000000000006500 PAT = 0x0007040600070406 [ 800.458846] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 800.466568] Interruptibility = 00000000 ActivityState = 00000000 [ 800.472948] *** Host State *** [ 800.486337] RIP = 0xffffffff811b3710 RSP = 0xffff8880359df8b8 [ 800.493583] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 800.504592] FSBase=00007f45eb88d700 GSBase=ffff8880ae900000 TRBase=fffffe0000033000 [ 800.519195] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 800.530839] CR0=0000000080050033 CR3=00000000569e2000 CR4=00000000001426e0 [ 800.543666] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87201360 [ 800.565236] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 800.578207] *** Control State *** [ 800.581758] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 800.596249] EntryControls=0000d3ff ExitControls=002fefff [ 800.610508] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 800.625457] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 800.639055] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 800.652371] reason=80000021 qualification=0000000000000000 [ 800.665537] IDTVectoring: info=00000000 errcode=00000000 [ 800.676746] TSC Offset = 0xfffffe51544e38a3 [ 800.685570] EPT pointer = 0x000000004775d01e 11:37:44 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup(r1) ioctl$PPPIOCDISCONN(r2, 0x7439) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000000)=@req3={0x6000000, 0x3, 0x6000000, 0x3}, 0x1c) setsockopt$packet_int(r1, 0x107, 0x9, &(0x7f0000000080), 0xfffffd22) mkdir(&(0x7f000082f000)='./control\x00', 0x0) r3 = open(&(0x7f000080dff6)='./control\x00', 0x0, 0x0) r4 = userfaultfd(0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000bc8000)={0xaa, 0x70}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000bf7000/0x1000)=nil, 0x1000}, 0x1}) r5 = open(&(0x7f000080dff6)='./control\x00', 0x0, 0x0) r6 = userfaultfd(0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000bc8000)={0xaa, 0x70}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) dup2(r5, r6) dup2(r3, r4) 11:37:44 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x2000000000000000, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:37:44 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00', 0x2}) 11:37:44 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$kcm(0x10, 0x0, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="2e0000002e008183ad5de0713c444d00070000001000034000ff39a0053582c137153e37835b3f00040000000000", 0x2e}], 0x1}, 0x0) close(0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 11:37:44 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) fcntl$dupfd(r0, 0x406, r1) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SMI(r3, 0xaeb7) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a0000120800000088b070") 11:37:44 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00', 0x2}) 11:37:44 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00', 0x2}) 11:37:44 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$kcm(0x10, 0x0, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="2e0000002e008183ad5de0713c444d00070000001000034000ff39a0053582c137153e37835b3f00040000000000", 0x2e}], 0x1}, 0x0) close(0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 11:37:44 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x2100000000000000, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) [ 801.385101] *** Guest State *** [ 801.388495] CR0: actual=0x0000000000050032, shadow=0x0000000000050012, gh_mask=fffffffffffffff7 11:37:44 executing program 0: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x2100000000000000, 0x30, 0x0, 0x0, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) [ 801.456702] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 801.465590] CR3 = 0x0000000000000000 11:37:44 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$kcm(0x10, 0x0, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="2e0000002e008183ad5de0713c444d00070000001000034000ff39a0053582c137153e37835b3f00040000000000", 0x2e}], 0x1}, 0x0) close(0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) [ 801.516266] RSP = 0x0000000000000000 RIP = 0x0000000000008000 11:37:44 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x2800000000000000, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) [ 801.566279] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 801.596281] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 801.616322] CS: sel=0x3000, attr=0x08093, limit=0xffffffff, base=0x0000000000030000 [ 801.626458] DS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 801.657749] SS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 801.686328] ES: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 801.716258] FS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 801.724337] GS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 801.746275] GDTR: limit=0x00000000, base=0x0000000000000000 [ 801.766350] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 801.786290] IDTR: limit=0x00000000, base=0x0000000000000000 [ 801.815258] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 801.841617] EFER = 0x0000000000006000 PAT = 0x0007040600070406 [ 801.861561] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 801.883739] Interruptibility = 00000008 ActivityState = 00000000 [ 801.893782] *** Host State *** [ 801.899383] RIP = 0xffffffff811b3710 RSP = 0xffff88802178f8b8 [ 801.905541] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 801.916005] FSBase=00007f45eb8ae700 GSBase=ffff8880ae800000 TRBase=fffffe0000033000 [ 801.930572] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 801.938737] CR0=0000000080050033 CR3=0000000037d8f000 CR4=00000000001426f0 [ 801.946034] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87201360 [ 801.958874] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 801.965183] *** Control State *** [ 801.971880] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 801.981703] EntryControls=0000d1ff ExitControls=002fefff [ 801.990828] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 802.000867] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 802.010714] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 802.020443] reason=80000021 qualification=0000000000000000 [ 802.030401] IDTVectoring: info=00000000 errcode=00000000 [ 802.036008] TSC Offset = 0xfffffe5097c1fe6a [ 802.043575] EPT pointer = 0x0000000037d9701e [ 802.129150] *** Guest State *** [ 802.132474] CR0: actual=0x000000008005003f, shadow=0x000000008005001f, gh_mask=fffffffffffffff7 [ 802.187295] CR4: actual=0x0000000000002068, shadow=0x0000000000000028, gh_mask=ffffffffffffe871 [ 802.216291] CR3 = 0x0000000000000000 [ 802.220819] RSP = 0x0000000000000000 RIP = 0x0000000000008000 [ 802.234746] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 802.247711] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 802.262272] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 802.279299] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 802.287678] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 802.295784] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 802.304141] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 802.312485] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 802.321558] GDTR: limit=0x00000000, base=0x0000000000000000 [ 802.329916] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 802.338240] IDTR: limit=0x00000000, base=0x0000000000000000 [ 802.346600] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 802.354703] EFER = 0x0000000000006500 PAT = 0x0007040600070406 [ 802.361483] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 802.369311] Interruptibility = 00000008 ActivityState = 00000000 [ 802.375665] *** Host State *** [ 802.379254] RIP = 0xffffffff811b3710 RSP = 0xffff888037dbf8b8 [ 802.385364] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 802.401270] FSBase=00007f45eb88d700 GSBase=ffff8880ae800000 TRBase=fffffe0000033000 [ 802.409464] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 802.415479] CR0=0000000080050033 CR3=0000000037d8f000 CR4=00000000001426f0 [ 802.422894] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87201360 [ 802.429942] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 802.436130] *** Control State *** [ 802.440070] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 802.447924] EntryControls=0000d3ff ExitControls=002fefff [ 802.453527] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 802.460849] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 802.466293] net_ratelimit: 21 callbacks suppressed [ 802.466301] protocol 88fb is buggy, dev hsr_slave_0 [ 802.468190] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 802.472559] protocol 88fb is buggy, dev hsr_slave_1 [ 802.477911] reason=80000021 qualification=0000000000000000 [ 802.506260] IDTVectoring: info=00000000 errcode=00000000 [ 802.511806] TSC Offset = 0xfffffe5097c1fe6a [ 802.526255] EPT pointer = 0x0000000037d9701e [ 802.626287] protocol 88fb is buggy, dev hsr_slave_0 [ 802.631401] protocol 88fb is buggy, dev hsr_slave_1 11:37:46 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup(r1) ioctl$PPPIOCDISCONN(r2, 0x7439) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000000)=@req3={0x6000000, 0x3, 0x6000000, 0x3}, 0x1c) setsockopt$packet_int(r1, 0x107, 0x9, &(0x7f0000000080), 0xfffffd22) mkdir(&(0x7f000082f000)='./control\x00', 0x0) r3 = open(&(0x7f000080dff6)='./control\x00', 0x0, 0x0) r4 = userfaultfd(0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000bc8000)={0xaa, 0x70}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000bf7000/0x1000)=nil, 0x1000}, 0x1}) r5 = open(&(0x7f000080dff6)='./control\x00', 0x0, 0x0) r6 = userfaultfd(0x0) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000034d000/0x1000)=nil, 0x1000}, 0x1}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) dup2(r5, r6) dup2(r3, r4) 11:37:46 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00', 0x2}) 11:37:46 executing program 0: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x700000000000000, 0x30, 0x0, 0x0, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:37:46 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x2900000000000000, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:37:46 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="2e0000002e008183ad5de0713c444d00070000001000034000ff39a0053582c137153e37835b3f00040000000000", 0x2e}], 0x1}, 0x0) close(0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 11:37:46 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SMI(r3, 0xaeb7) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000000)={0x2, 0x5, 0x10e2ba8e, 0x0, 0x3, 0x1, 0x7, 0x8001, 0x9, 0x2fdd, 0x40, 0x100000001, 0x0, 0x6, 0x4, 0x8, 0x5, 0xffff, 0xffff}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a0000120800000088b070") 11:37:46 executing program 0: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x400000000000000, 0x30, 0x0, 0x0, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:37:46 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="2e0000002e008183ad5de0713c444d00070000001000034000ff39a0053582c137153e37835b3f00040000000000", 0x2e}], 0x1}, 0x0) close(0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 11:37:46 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00', 0x2}) 11:37:46 executing program 5: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x2b00000000000000, 0x0, 0x4, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) [ 803.181617] ------------[ cut here ]------------ [ 803.186411] kernel BUG at arch/x86/kvm/x86.c:357! [ 803.207314] ------------[ cut here ]------------ [ 803.212355] kernel BUG at arch/x86/kvm/x86.c:357! [ 803.262483] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 803.267910] CPU: 0 PID: 3290 Comm: syz-executor.2 Not tainted 5.0.0+ #6 [ 803.274661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 803.284035] RIP: 0010:kvm_spurious_fault+0x9/0x10 [ 803.288885] Code: e8 5c ce 65 00 41 bd 03 00 00 00 5b 44 89 e8 41 5c 41 5d 5d c3 66 90 66 2e 0f 1f 84 00 00 00 00 00 55 48 89 e5 e8 37 ce 65 00 <0f> 0b 0f 1f 44 00 00 55 48 89 e5 41 57 41 56 49 89 d6 41 55 41 54 [ 803.307816] RSP: 0018:ffff888088cef790 EFLAGS: 00010206 [ 803.313181] RAX: 0000000000040000 RBX: ffff88805421c570 RCX: ffffc9000a21d000 [ 803.314638] kobject: 'loop4' (00000000f10b8a1a): kobject_uevent_env [ 803.320451] RDX: 00000000000004a0 RSI: ffffffff810a1329 RDI: 0000000000000007 [ 803.320461] RBP: ffff888088cef790 R08: ffff8880500ae340 R09: ffff888046963000 [ 803.320470] R10: ffffed1008d2c7ff R11: ffff888046963fff R12: 1ffff1101119def5 [ 803.320478] R13: ffff888046963000 R14: ffff888088cef808 R15: 000000000000ae41 [ 803.320490] FS: 00007f45eb8ae700(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 803.320499] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 803.320511] CR2: 00007f45eb84adb8 CR3: 000000003b468000 CR4: 00000000001426f0 [ 803.342320] kobject: 'loop4' (00000000f10b8a1a): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 803.348702] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 803.348711] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 803.348716] Call Trace: [ 803.348736] loaded_vmcs_init+0x95/0x250 [ 803.348749] ? find_msr_entry+0x170/0x170 [ 803.348766] ? memset+0x32/0x40 [ 803.384880] kobject: 'loop4' (00000000f10b8a1a): kobject_uevent_env [ 803.387635] alloc_loaded_vmcs+0x81/0x170 [ 803.387651] vmx_create_vcpu+0x24e/0x24dd [ 803.387669] ? mutex_trylock+0x1e0/0x1e0 [ 803.387686] ? vmx_exec_control+0x210/0x210 [ 803.401959] kobject: 'loop4' (00000000f10b8a1a): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 803.402226] ? wait_for_completion+0x440/0x440 [ 803.450086] kobject: 'loop4' (00000000f10b8a1a): kobject_uevent_env [ 803.453248] ? ___might_sleep+0x163/0x280 [ 803.453266] kvm_arch_vcpu_create+0x80/0x120 [ 803.453282] kvm_vm_ioctl+0x5ce/0x1900 [ 803.460324] kobject: 'loop4' (00000000f10b8a1a): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 803.463824] ? futex_wait_queue_me+0x414/0x600 [ 803.463838] ? handle_futex_death+0x1f0/0x1f0 [ 803.463855] ? kvm_unregister_device_ops+0x70/0x70 [ 803.495540] ? drop_futex_key_refs.isra.0+0x6f/0xf0 [ 803.500567] ? futex_wait+0x482/0x5e0 [ 803.504376] ? futex_wait_setup+0x390/0x390 [ 803.508700] ? __save_stack_trace+0x8a/0xf0 [ 803.513053] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 803.518245] ? drop_futex_key_refs.isra.0+0x6f/0xf0 [ 803.523266] ? __lock_acquire+0x53b/0x4700 [ 803.527512] ? mark_held_locks+0x100/0x100 [ 803.531769] ? __might_fault+0x12b/0x1e0 [ 803.535833] ? __fget+0x340/0x540 [ 803.539288] ? find_held_lock+0x35/0x130 [ 803.543350] ? __fget+0x340/0x540 [ 803.546809] ? kvm_unregister_device_ops+0x70/0x70 [ 803.551742] do_vfs_ioctl+0xd6e/0x1390 [ 803.555637] ? ioctl_preallocate+0x210/0x210 [ 803.560047] ? __fget+0x367/0x540 [ 803.563508] ? iterate_fd+0x360/0x360 [ 803.567330] ? nsecs_to_jiffies+0x30/0x30 [ 803.571491] ? security_file_ioctl+0x93/0xc0 [ 803.575920] ksys_ioctl+0xab/0xd0 [ 803.579375] __x64_sys_ioctl+0x73/0xb0 [ 803.583271] do_syscall_64+0x103/0x610 [ 803.587166] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 803.592352] RIP: 0033:0x457e29 [ 803.595558] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 803.614460] RSP: 002b:00007f45eb8adc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 803.622171] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457e29 [ 803.629441] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000009 [ 803.636708] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 803.643977] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f45eb8ae6d4 [ 803.651243] R13: 00000000004c0924 R14: 00000000004d2738 R15: 00000000ffffffff [ 803.658525] Modules linked in: 11:37:46 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="2e0000002e008183ad5de0713c444d00070000001000034000ff39a0053582c137153e37835b3f00040000000000", 0x2e}], 0x1}, 0x0) close(0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 11:37:46 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, 0x0, 0x0) close(0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) [ 803.661956] protocol 88fb is buggy, dev hsr_slave_0 [ 803.666427] protocol 88fb is buggy, dev hsr_slave_0 [ 803.667060] protocol 88fb is buggy, dev hsr_slave_1 [ 803.672088] protocol 88fb is buggy, dev hsr_slave_1 [ 803.677132] protocol 88fb is buggy, dev hsr_slave_0 [ 803.682115] protocol 88fb is buggy, dev hsr_slave_0 [ 803.695172] ------------[ cut here ]------------ [ 803.699955] kernel BUG at arch/x86/kvm/x86.c:357! [ 803.704798] invalid opcode: 0000 [#2] PREEMPT SMP KASAN [ 803.710155] CPU: 0 PID: 9 Comm: ksoftirqd/0 Tainted: G D 5.0.0+ #6 [ 803.717765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 803.727124] RIP: 0010:kvm_spurious_fault+0x9/0x10 [ 803.731959] Code: e8 5c ce 65 00 41 bd 03 00 00 00 5b 44 89 e8 41 5c 41 5d 5d c3 66 90 66 2e 0f 1f 84 00 00 00 00 00 55 48 89 e5 e8 37 ce 65 00 <0f> 0b 0f 1f 44 00 00 55 48 89 e5 41 57 41 56 49 89 d6 41 55 41 54 [ 803.750855] RSP: 0018:ffff8880ae807e80 EFLAGS: 00010006 [ 803.756210] RAX: ffff8880aa25c240 RBX: ffff888029b2cbf0 RCX: ffffffff8132999a [ 803.763473] RDX: 0000000000010100 RSI: ffffffff810a1329 RDI: 0000000000000007 [ 803.770737] RBP: ffff8880ae807e80 R08: ffff8880aa25c240 R09: ffffed1015d05be9 [ 803.778012] R10: ffffed1015d05be8 R11: ffff8880ae82df47 R12: 1ffff11015d00fd3 [ 803.785289] R13: ffff888085747000 R14: ffff8880ae807ef8 R15: 0000000000000000 [ 803.792554] FS: 0000000000000000(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 803.800774] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 803.806652] CR2: ffff8880ae807eb8 CR3: 0000000098b0d000 CR4: 00000000001426f0 [ 803.813919] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 803.821187] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 803.828445] Call Trace: [ 803.831014] [ 803.833168] loaded_vmcs_init+0x95/0x250 [ 803.837222] ? find_msr_entry+0x170/0x170 [ 803.841370] __loaded_vmcs_clear+0x229/0x360 [ 803.845775] flush_smp_call_function_queue+0x14a/0x500 [ 803.851047] ? loaded_vmcs_init+0x250/0x250 [ 803.855370] generic_smp_call_function_single_interrupt+0x13/0x2b [ 803.861615] smp_call_function_single_interrupt+0xa3/0x460 [ 803.867239] call_function_single_interrupt+0xf/0x20 [ 803.872352] [ 803.874593] RIP: 0010:unwind_next_frame.part.0+0x110/0x9a0 [ 803.880216] Code: 00 fc ff df 4c 89 d2 48 c1 ea 03 80 3c 02 00 0f 85 47 05 00 00 48 b8 00 00 00 00 00 fc ff df 48 8b 53 28 48 8d 7a 18 48 89 fe <48> c1 ee 03 80 3c 06 00 0f 85 de 04 00 00 48 8b 42 18 48 8d b8 48 [ 803.900020] RSP: 0018:ffff8880aa26ec30 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff04 [ 803.907731] RAX: dffffc0000000000 RBX: ffff8880aa26ed08 RCX: ffff8880aa26ecb8 [ 803.914992] RDX: ffff8880aa25c240 RSI: ffff8880aa25c258 RDI: ffff8880aa25c258 [ 803.922312] RBP: ffff8880aa26ece0 R08: 0000000000000001 R09: ffff8880aa26ed58 [ 803.929605] R10: ffff8880aa26ed30 R11: ffff8880aa26ed40 R12: 1ffff1101544dd8b [ 803.936872] R13: 0000000000000000 R14: ffff8880aa26f830 R15: ffff88812c3f0ac0 [ 803.944156] ? unwind_dump+0x100/0x100 [ 803.948042] ? unwind_dump+0x100/0x100 [ 803.951938] unwind_next_frame+0x3b/0x50 [ 803.955994] __save_stack_trace+0x7a/0xf0 [ 803.960164] ? __netif_receive_skb+0x2c/0x1c0 [ 803.964658] save_stack_trace+0x1a/0x20 [ 803.968627] save_stack+0x45/0xd0 [ 803.972077] ? save_stack+0x45/0xd0 [ 803.975701] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 803.980799] ? kasan_kmalloc+0x9/0x10 [ 803.984592] ? kmem_cache_alloc_node_trace+0x153/0x720 [ 803.990702] ? __kmalloc_node_track_caller+0x3d/0x70 [ 803.995801] ? __kmalloc_reserve.isra.0+0x40/0xf0 [ 804.000653] ? __alloc_skb+0x10b/0x5e0 [ 804.004548] ? __tcp_send_ack.part.0+0x6a/0x5b0 [ 804.009210] ? tcp_send_ack+0x88/0xa0 [ 804.013003] ? __tcp_ack_snd_check+0x165/0x8d0 [ 804.017582] ? tcp_rcv_established+0x175d/0x1fb0 [ 804.022330] ? tcp_v4_do_rcv+0x616/0x8d0 [ 804.026404] ? tcp_v4_rcv+0x2d11/0x3730 [ 804.030577] ? ip_protocol_deliver_rcu+0x60/0x8f0 [ 804.035417] ? ip_local_deliver_finish+0x23b/0x390 [ 804.040341] ? ip_local_deliver+0x1e9/0x520 [ 804.044655] ? ip_rcv_finish+0x1e1/0x300 [ 804.048710] ? ip_rcv+0xe8/0x3f0 [ 804.052073] ? __netif_receive_skb_one_core+0x115/0x1a0 [ 804.057430] ? __netif_receive_skb+0x2c/0x1c0 [ 804.061935] ? netif_receive_skb_internal+0x117/0x660 [ 804.067122] ? napi_gro_receive+0x532/0x740 [ 804.071440] ? receive_buf+0xebe/0x53b0 [ 804.075405] ? virtnet_poll+0x5f8/0xe82 [ 804.079374] ? net_rx_action+0x4fa/0x1070 [ 804.083525] ? __do_softirq+0x266/0x95a [ 804.087503] ? run_ksoftirqd+0x8e/0x110 [ 804.091492] ? smpboot_thread_fn+0x6ab/0xa10 [ 804.095904] ? kthread+0x357/0x430 [ 804.099436] ? ret_from_fork+0x3a/0x50 [ 804.103321] ? __netif_receive_skb_one_core+0x115/0x1a0 [ 804.108678] ? __netif_receive_skb+0x2c/0x1c0 [ 804.113168] ? netif_receive_skb_internal+0x117/0x660 [ 804.118347] ? napi_gro_receive+0x532/0x740 [ 804.122667] ? receive_buf+0xebe/0x53b0 [ 804.126634] ? virtnet_poll+0x5f8/0xe82 [ 804.130600] ? net_rx_action+0x4fa/0x1070 [ 804.134744] ? __do_softirq+0x266/0x95a [ 804.138717] ? run_ksoftirqd+0x8e/0x110 [ 804.142687] ? smpboot_thread_fn+0x6ab/0xa10 [ 804.147090] ? kthread+0x357/0x430 [ 804.150621] ? ret_from_fork+0x3a/0x50 [ 804.154506] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 804.160067] ? should_fail+0x14d/0x85c [ 804.163950] ? lock_downgrade+0x810/0x810 [ 804.168095] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 804.173193] ? ip_local_out+0xcc/0x1b0 [ 804.177073] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 804.182619] ? should_fail+0x14d/0x85c [ 804.186503] ? kasan_unpoison_shadow+0x35/0x50 [ 804.191095] __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 804.196025] kasan_kmalloc+0x9/0x10 [ 804.199645] kmem_cache_alloc_node_trace+0x153/0x720 [ 804.204744] ? kasan_unpoison_shadow+0x35/0x50 [ 804.209322] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 804.214424] __kmalloc_node_track_caller+0x3d/0x70 [ 804.219352] __kmalloc_reserve.isra.0+0x40/0xf0 [ 804.224019] __alloc_skb+0x10b/0x5e0 [ 804.227727] ? skb_scrub_packet+0x440/0x440 [ 804.232045] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 804.237598] ? tcp_try_coalesce+0x1b2/0x760 [ 804.242008] __tcp_send_ack.part.0+0x6a/0x5b0 [ 804.246499] tcp_send_ack+0x88/0xa0 [ 804.250134] __tcp_ack_snd_check+0x165/0x8d0 [ 804.254550] tcp_rcv_established+0x175d/0x1fb0 [ 804.259134] ? tcp_data_queue+0x4b70/0x4b70 [ 804.263453] ? rwlock_bug.part.0+0x90/0x90 [ 804.267684] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 804.272698] tcp_v4_do_rcv+0x616/0x8d0 [ 804.276582] tcp_v4_rcv+0x2d11/0x3730 [ 804.280376] ? mark_held_locks+0x100/0x100 [ 804.284645] ? nf_ct_deliver_cached_events+0x83/0x6e0 [ 804.289838] ? tcp_v4_early_demux+0x8f0/0x8f0 [ 804.294347] ? nf_ct_expect_unregister_notifier+0x140/0x140 [ 804.300055] ? nf_nat_inet_fn+0x211/0x8b0 [ 804.304203] ip_protocol_deliver_rcu+0x60/0x8f0 [ 804.308889] ip_local_deliver_finish+0x23b/0x390 [ 804.313643] ip_local_deliver+0x1e9/0x520 [ 804.317789] ? ip_local_deliver_finish+0x390/0x390 [ 804.322711] ? tcp_v4_early_demux+0x5f/0x8f0 [ 804.327117] ? ip_protocol_deliver_rcu+0x8f0/0x8f0 [ 804.332039] ? ip_rcv_finish_core.isra.0+0x828/0x1ba0 [ 804.337242] ip_rcv_finish+0x1e1/0x300 [ 804.341123] ip_rcv+0xe8/0x3f0 [ 804.344312] ? ip_local_deliver+0x520/0x520 [ 804.348645] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 804.354195] ? ip_rcv_finish_core.isra.0+0x1ba0/0x1ba0 [ 804.359473] ? ip_local_deliver+0x520/0x520 [ 804.363793] __netif_receive_skb_one_core+0x115/0x1a0 [ 804.368983] ? __netif_receive_skb_core+0x3010/0x3010 [ 804.374170] ? lock_acquire+0x16f/0x3f0 [ 804.378141] ? netif_receive_skb_internal+0x95/0x660 [ 804.383238] __netif_receive_skb+0x2c/0x1c0 [ 804.387558] netif_receive_skb_internal+0x117/0x660 [ 804.392569] ? dev_cpu_dead+0x920/0x920 [ 804.396552] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 804.401561] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 804.407097] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 804.412111] napi_gro_receive+0x532/0x740 [ 804.416255] receive_buf+0xebe/0x53b0 [ 804.420046] ? find_held_lock+0x35/0x130 [ 804.424110] ? virtnet_probe+0x2220/0x2220 [ 804.428337] ? __lock_acquire+0x53b/0x4700 [ 804.432565] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 804.438098] ? detach_buf_split+0x570/0x7a0 [ 804.442417] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 804.447945] ? virtqueue_get_buf_ctx+0x182/0xf60 [ 804.452702] virtnet_poll+0x5f8/0xe82 [ 804.456502] ? receive_buf+0x53b0/0x53b0 [ 804.460572] ? check_preemption_disabled+0x48/0x290 [ 804.465584] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 804.471117] ? trace_hardirqs_on+0x67/0x230 [ 804.475436] net_rx_action+0x4fa/0x1070 [ 804.479406] ? napi_complete_done+0x4b0/0x4b0 [ 804.483895] ? check_preemption_disabled+0x48/0x290 [ 804.488905] ? net_tx_action+0x5d4/0xc00 [ 804.492966] __do_softirq+0x266/0x95a [ 804.496762] ? pci_mmcfg_check_reserved+0x170/0x170 [ 804.501775] ? takeover_tasklets+0x7b0/0x7b0 [ 804.506175] run_ksoftirqd+0x8e/0x110 [ 804.509974] smpboot_thread_fn+0x6ab/0xa10 [ 804.514205] ? sort_range+0x30/0x30 [ 804.517831] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 804.523362] ? __kthread_parkme+0xfb/0x1b0 [ 804.527591] kthread+0x357/0x430 [ 804.530947] ? sort_range+0x30/0x30 [ 804.534568] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 804.540099] ret_from_fork+0x3a/0x50 [ 804.543804] Modules linked in: [ 804.546998] ---[ end trace ccbb67993c95a1b5 ]--- [ 804.551748] RIP: 0010:kvm_spurious_fault+0x9/0x10 [ 804.556586] Code: e8 5c ce 65 00 41 bd 03 00 00 00 5b 44 89 e8 41 5c 41 5d 5d c3 66 90 66 2e 0f 1f 84 00 00 00 00 00 55 48 89 e5 e8 37 ce 65 00 <0f> 0b 0f 1f 44 00 00 55 48 89 e5 41 57 41 56 49 89 d6 41 55 41 54 [ 804.575482] RSP: 0018:ffff888088cef790 EFLAGS: 00010206 [ 804.580836] RAX: 0000000000040000 RBX: ffff88805421c570 RCX: ffffc9000a21d000 [ 804.588099] RDX: 00000000000004a0 RSI: ffffffff810a1329 RDI: 0000000000000007 [ 804.595362] RBP: ffff888088cef790 R08: ffff8880500ae340 R09: ffff888046963000 [ 804.602628] R10: ffffed1008d2c7ff R11: ffff888046963fff R12: 1ffff1101119def5 [ 804.609919] R13: ffff888046963000 R14: ffff888088cef808 R15: 000000000000ae41 [ 804.617199] FS: 0000000000000000(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 804.625413] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 804.631315] CR2: ffff8880ae807eb8 CR3: 0000000098b0d000 CR4: 00000000001426f0 [ 804.638583] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 804.645864] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 804.653127] Kernel panic - not syncing: Fatal exception in interrupt [ 804.660326] Kernel Offset: disabled [ 804.663945] Rebooting in 86400 seconds..