", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000000)={'teql0\x00', {0x2, 0x0, @dev}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:02:06 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fbb496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:02:06 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000240)='/dev/rtc0\x00', 0x1, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dsp\x00', 0x400000, 0x0) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000300)={0x0, &(0x7f0000000280), 0x0, r1, 0x8}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, {}, 0x4}, 0xe) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f00000003c0)={0x8, "fcdfad05779af350ef3c3824b68e8a579bb37e623a214352ba35be444d42b988", 0x100, 0x7, 0x21, 0x8, 0x2}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000017c0)={'vcan0\x00', 0x0}) lstat(&(0x7f0000001800)='./file0\x00', &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000018c0)={{{@in6=@mcast1, @in=@dev={0xac, 0x14, 0x14, 0x10}, 0x4e23, 0xffffffffffffffe6, 0x4e24, 0x6, 0xa, 0x874528b847b9837b, 0xa0, 0x0, r3, r4}, {0x0, 0x0, 0x3, 0xfffffffffffffff8, 0x7, 0x0, 0x3, 0x6}, {0x78f, 0x9, 0x1000, 0x9b}, 0x6883, 0x6e6bb2, 0x2, 0x0, 0x0, 0x3}, {{@in6=@dev={0xfe, 0x80, [], 0x10}, 0x4d6, 0x32}, 0x2, @in6=@local, 0x3503, 0x3, 0x1, 0x0, 0x401, 0x0, 0x6}}, 0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000100)={{{@in6=@mcast1, @in6=@ipv4={[], [], @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@mcast1}}, &(0x7f0000000200)=0xe8) mount$9p_xen(&(0x7f0000000380)="397092", &(0x7f0000000340)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x4, &(0x7f0000000080)=ANY=[@ANYRESDEC=r2, @ANYRES64=r5]) 09:02:06 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffffff7f0000]}, 0x10) 09:02:06 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5f89496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:02:06 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x103000, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)="6d696d655f747970652976626f786e6574312c2474727573746564ee2c766d6e6574316b657972696e672e706f7369785f61636c5f61636365737300", 0xffffffffffffff9c}, 0x10) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000086, 0x0, &(0x7f0000000100)={0x77359400}, &(0x7f0000048000), 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x6, 0x100000000000031, 0xffffffffffffffff, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x1) tkill(r2, 0x1000000000016) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000300), 0xc) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000400)) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x0, 0x0, 0x0, 0x7}}, 0x50) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r3, 0xc20, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000090}, 0x4000000) ioctl$BLKROGET(r0, 0x125e, &(0x7f00000002c0)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x801, 0x0) getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f00000004c0)={@multicast2, @remote}, &(0x7f0000000500)=0xc) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r4, &(0x7f0000000080)={0x1a, 0x337, 0x4b, 0x4, 0x3, 0x7f, @local}, 0x10) open(&(0x7f0000000080)='./file0\x00', 0x4000, 0x80) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x0, {}, 0x4}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000040)={0x6e9baa9, 0x594, 0x1, 0x2, 0xcc1, 0x80000000, 0xc0000000000000}, 0xc) 09:02:06 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x27a88510]}, 0x10) 09:02:06 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000000)={'teql0\x00', {0x2, 0x0, @dev}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:02:06 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fa0496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) [ 650.380461] llc_conn_state_process: llc_conn_service failed [ 650.462427] llc_conn_state_process: llc_conn_service failed 09:02:07 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000000)={'teql0\x00', {0x2, 0x0, @dev}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:02:09 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20000000001b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x10000000, 0x0, 0x8, 0x0, 0x7}) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, 0x0, 0x0, 0x0) 09:02:09 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") unshare(0x0) getsockopt$sock_buf(r0, 0x1, 0x1a, 0x0, &(0x7f00000000c0)=0xfffffffffffffee1) 09:02:09 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x1, 0x0) write$P9_RSETATTR(r1, &(0x7f0000000080)={0x7, 0x1b, 0x1}, 0x7) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {}, 0x4}, 0xe) membarrier(0x8, 0x0) write$FUSE_STATFS(r1, &(0x7f00000000c0)={0x60, 0xffffffffffffffff, 0x2, {{0x1ff, 0xbbd, 0x1000, 0xb3f, 0x2, 0x425, 0x1, 0x25dd8917}}}, 0x60) 09:02:09 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fd5496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:02:09 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x10) 09:02:09 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000000)={'teql0\x00', {0x2, 0x0, @dev}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:02:09 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fd9496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:02:09 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {}, 0x4}, 0xe) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x348, 0x40) sendmsg$alg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="ac1762a2acefbc32f2b7cbda4af5c71105f694d7ae056fcbd3f7fd0741b662869ca9f9fb8d7ec1ee957ea5341c5432d1c6e067009d8c3103022f96c83da8b714269f1003f75f4633058115b384e5ac1e0b28c543557070aea2d593f8bef0", 0x5e}], 0x1, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0xa8, 0x117, 0x2, 0x8f, "658cf5c2db2b922229346727a5ec7dad8cf78359a5194ddfa9efb1efe1abcadd1db046bd0331b69afd77d42dfa19b0f5e28fb1cab4ea758e1b904a392fdfe3b1d560adc2010d839296786b434f1523557d19bd7f800403d250d27e662c8eb74c714a4fbed5b279342a304abed06774b952a6e7e51705bf5ed5163a883d3877dfe9d947c2b65fb0b875381cc3bfc1df"}, @assoc={0x18, 0x117, 0x4, 0x4290}], 0x120, 0x80}, 0x0) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) 09:02:09 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_RX_RING(r1, 0x10e, 0x6, &(0x7f0000000040)={0x8000, 0x10000, 0x2, 0x2}, 0x10) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000080)="ef796d3f6fee2611c5831664d953e12d", 0x10) r2 = socket$inet6(0xa, 0x3, 0x6) ioctl(r2, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") unshare(0x20000) getsockopt$sock_buf(r0, 0x1, 0x1a, 0x0, &(0x7f0000000380)) 09:02:09 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe]}, 0x10) 09:02:09 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000000)={'teql0\x00', {0x2, 0x0, @dev}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:02:09 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5f52496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:02:12 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000000)={'teql0\x00', {0x2, 0x0, @dev}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:02:12 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {}, 0x4}, 0xe) 09:02:12 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x80a, 0x5) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") unshare(0x0) getsockopt$sock_buf(r0, 0x1, 0x1a, 0x0, &(0x7f0000000380)) 09:02:12 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0xe00]}, 0x10) 09:02:12 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fb1496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:02:12 executing program 2: 09:02:12 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fd0496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:02:12 executing program 2: 09:02:12 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x408a18d8aa]}, 0x10) 09:02:12 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x210000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc0605345, &(0x7f00000001c0)={0x1, 0x2, {0x2, 0x1, 0x7, 0x3, 0xed}}) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e22, @local}}, 0xffffffffffffffff, 0x5}, &(0x7f0000000140)=0x90) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000180)={r2, 0x5bc1, 0x400}, 0x8) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {}, 0x4}, 0xe) 09:02:12 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x4000080f, 0x6) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x200000, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") unshare(0x0) getsockopt$sock_buf(r0, 0x1, 0x1a, 0x0, &(0x7f0000000380)) 09:02:12 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000000)={'teql0\x00', {0x2, 0x0, @dev}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:02:12 executing program 2: 09:02:12 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$KVM_GET_NESTED_STATE(r1, 0xc080aebe, &(0x7f0000000380)={0x0, 0x0, 0x2080}) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="7570706572644f723d2e2f66696c65302c6c65302c776f726b646972a53d2e2f66697c65315c000000000000000000000000003668bff9f725c3f63592ff716592aa64322fc3fe6098cbf41b1099490f9b6fd09298e1d8fc01af846e4fe9f9e44cb7e21c61391892940343"]) r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f00000002c0), &(0x7f0000000300)=0x4) fchdir(r2) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$FUSE_POLL(r3, &(0x7f0000000280)={0x18}, 0x18) connect$nfc_llcp(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r3, r3, &(0x7f0000000140), 0xd1) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {}, 0x4}, 0xe) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x10003, 0x0) setsockopt$packet_buf(r4, 0x107, 0x7, &(0x7f0000000080)="8c2808c9a96a2fc6793654481122115d40be81131be40bd92538f6aa5d715f000cb7e13d948d51e72f7e3cbc37869285116ab0fd6fc1468f344d08e2f42bc28ca0562cd65f3951bfc414e86c4fec61d99b519bf38dbb17ae2701a01f907e0d72767785715aa4e9684d856173116b22b1379280eddfc17a199ddf8d2cfcaa07e0e188624f6d991263e376242bb586da892f472f9b5675bca35cff526c9e", 0x9d) 09:02:12 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fc0496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:02:12 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0xe803000000000000]}, 0x10) 09:02:12 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") unshare(0x0) getsockopt$sock_buf(r0, 0x1, 0x1a, 0x0, &(0x7f0000000380)) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x42a000, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000040)=0x400001d) 09:02:12 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fstat(r0, &(0x7f0000000040)) 09:02:12 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000000)={'teql0\x00', {0x2, 0x0, @dev}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:02:12 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5f74496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) [ 656.538047] overlayfs: unrecognized mount option "upperdOr=./file0" or missing value 09:02:12 executing program 3: syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x5, 0x9) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") write$binfmt_aout(r1, &(0x7f0000000d80)=ANY=[@ANYBLOB="00000201390100007b0000000008000037030000060000000000000000000000a9ce00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe3b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000034e0f81db84a98351c18222340e08a9f451d78421831b62f3b8670b06735ac98f316f99d504b66b4cb0cbb89130414e355d46646a444e9107c373e6933c4f6d2577bd47f8718bc5a0c0faf667fdca3e6991f28b09c0d303a78e320e18682e0d0bda787b29deb322c56b9255c49968b5266dc87ec68e2cfd630a4193cda5c2062e2b4d3aa07260db5627c5fd858c8be4fcdace12b51f6c5ff25d6ed"], 0x922) getsockopt$sock_buf(r0, 0x1, 0x1a, 0x0, &(0x7f0000000380)) 09:02:13 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}, 0x10) 09:02:13 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_int(r1, 0x29, 0x4c, &(0x7f0000534000), &(0x7f0000000040)=0x4) 09:02:13 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5f12496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:02:13 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000000)={'teql0\x00', {0x2, 0x0, @dev}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 656.912845] overlayfs: unrecognized mount option "upperdOr=./file0" or missing value 09:02:13 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {}, 0x4}, 0xe) r1 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x80000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000080), &(0x7f00000000c0)=0x4) recvmsg(r0, &(0x7f0000000400)={&(0x7f0000000140)=@in, 0x80, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/211, 0xd3}], 0x1, &(0x7f0000000300)=""/241, 0xf1, 0x7}, 0x10000) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000100)=0x7, 0x4) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000440), &(0x7f0000000480)=0x4) 09:02:13 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x8dffffff00000000]}, 0x10) 09:02:13 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") flistxattr(r0, &(0x7f0000000100)=""/172, 0xf) 09:02:13 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") unshare(0x0) getsockopt$sock_buf(r0, 0x1, 0x1a, 0x0, &(0x7f0000000380)) r2 = memfd_create(&(0x7f0000000000)='\x00', 0x6) ioctl$SCSI_IOCTL_DOORLOCK(r2, 0x5380) openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x1, 0x0) 09:02:13 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fae496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:02:13 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000000)={'teql0\x00', {0x2, 0x0, @dev}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:02:13 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5f1c496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:02:13 executing program 3: getpid() r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r4, 0xc008ae88, &(0x7f0000000240)={0x1, 0x0, [0x4000009f]}) getsockopt$sock_buf(r0, 0x1, 0x1a, 0x0, &(0x7f0000000380)) 09:02:13 executing program 2: 09:02:13 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000]}, 0x10) 09:02:13 executing program 2: 09:02:13 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000000)={'teql0\x00', {0x2, 0x0, @dev}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:02:14 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x7, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x1}, 0x4}, 0xe) 09:02:14 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5f1b496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:02:14 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x3, 0x6) syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0xfffffffffffff5b8, 0x400000) unshare(0x0) getsockopt$sock_buf(r0, 0x1, 0x1a, 0x0, &(0x7f0000000380)) 09:02:14 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}, 0x10) 09:02:14 executing program 2: 09:02:14 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000000)={'teql0\x00', {0x2, 0x0, @dev}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:02:14 executing program 2: 09:02:14 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fcc496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:02:14 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x2900, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffff9c, 0xc0086420, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f0000000200)={r3, &(0x7f00000001c0)=""/40}) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") unshare(0x0) getsockopt$sock_buf(r0, 0x1, 0x1a, 0x0, &(0x7f0000000380)) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000240)=0x6) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x200000, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e20, @empty}, @in6={0xa, 0x4e22, 0x9, @mcast1, 0xfffffffffffffff7}, @in={0x2, 0x4e24, @broadcast}, @in6={0xa, 0x4e24, 0x2, @mcast2, 0x7}, @in={0x2, 0x4e22, @multicast1}, @in={0x2, 0x4e20, @broadcast}, @in6={0xa, 0x4e20, 0x2, @remote, 0x3}, @in={0x2, 0x4e24, @broadcast}], 0xa4) 09:02:14 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0xeffdffff]}, 0x10) 09:02:14 executing program 4: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x8000, 0x0) write$smack_current(r0, &(0x7f00000000c0)='}\x00', 0x2) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) prctl$PR_SVE_SET_VL(0x32, 0x595f) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, {}, 0x4}, 0xe) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x9, 0x7fffffff}) 09:02:14 executing program 2: 09:02:14 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x800, 0x10000) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") unshare(0x0) getsockopt$sock_buf(r0, 0x1, 0x1a, 0x0, &(0x7f0000000380)) 09:02:14 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000000)={'teql0\x00', {0x2, 0x0, @dev}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:02:14 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5f69496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:02:14 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffffffff000]}, 0x10) 09:02:14 executing program 4: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100)="e6f81a1d1ced0fc8015e712ae157336746cee21901cb679e1a60d81efdf4c7555527d4d4b1221ffbcc26affa7ab500dea2522cb5616996faafb61b9516c4d8daf5f23b49afa5e89d5fe118b6b05295611f0223213dbff75b29", 0x59, 0xfffffffffffffffa) keyctl$read(0xb, r1, &(0x7f0000000180)=""/137, 0x89) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x4, {}, 0x4}, 0xe) 09:02:14 executing program 2: 09:02:14 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") unshare(0x0) getsockopt$sock_buf(r0, 0x1, 0x1a, 0x0, &(0x7f0000000380)) ioctl$TIOCGWINSZ(r1, 0x5413, &(0x7f0000000000)) 09:02:14 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fc4496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:02:14 executing program 2: getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) syz_open_dev$vivid(0x0, 0x1, 0x2) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000006c0)=0x200, 0x20) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000005c0)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000740)=[{&(0x7f0000003ac0)=""/4096, 0xd400}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$DRM_IOCTL_SET_MASTER(0xffffffffffffffff, 0x641e) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x0) 09:02:14 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0xfffffffffffffffe, 0x0) bind$bt_l2cap(r0, &(0x7f0000000180)={0x1f, 0x0, {}, 0x4}, 0xe) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) r2 = openat(r1, &(0x7f00000001c0)='./file0\x00', 0x40000, 0x8) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x800, 0x0) ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f0000000040)={0x4, 0x0, @pic={0x7b, 0x10001, 0x800, 0x3, 0x5, 0x3, 0x5, 0x5, 0x1, 0x100, 0xff, 0x9, 0xfd, 0x6, 0x0, 0x9}}) ioctl$UI_SET_LEDBIT(r2, 0x40045569, 0x4) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x10) 09:02:14 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}, 0x10) 09:02:14 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000000)={'teql0\x00', {0x2, 0x0, @dev}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:02:14 executing program 3: r0 = socket$inet6(0xa, 0xfffffffffffffffe, 0x1) r1 = socket$inet6(0xa, 0x3, 0x6) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x80000) ioctl$TCSETA(r2, 0x5406, &(0x7f00000001c0)={0xc000000000000000, 0x9, 0x7f, 0x3, 0x81, 0x3, 0xffffffff, 0x1, 0x0, 0xdb6b}) unshare(0x0) getsockopt$sock_buf(r0, 0x1, 0x1a, 0x0, &(0x7f0000000380)) fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000000)='trusted.overlay.upper\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="00fbdd02031d1ddc0bef879547bb74e8656b2a7ca466c8cdcabe059594b580a8ee8a9f1a1a5ad05552bae9ef94daa57ce6c3df244ea639e51c866e64ecc6b1162acd0a0db869e557d4313c570a27b2355c8870a956e261113acb1ca8488ddd0e3ac18d24a96f4c000059478a4d62be93ff8ac81e563d4514124c22bf92b53e78502a010ce29c76bd126a16bbda6fa195a1661a89528c5cc1e9b783b2f14d43d84a903c8a16f6f4e712d7a6f14c6239fd73c3bdd726c2db71dd97bff79a25c37b6b9d30e6971949381516ada2d47e5883c8ce04afc63a8597961fd7af82"], 0xdd, 0x1) ioctl$KVM_GET_API_VERSION(r2, 0xae00, 0x0) 09:02:14 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3400]}, 0x10) 09:02:14 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x6, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {}, 0x4}, 0xe) getpeername(r0, &(0x7f0000000040)=@sco, &(0x7f00000000c0)=0x80) 09:02:15 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5f4d496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:02:15 executing program 3: r0 = socket$inet6(0xa, 0x800, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x20000, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0x3, &(0x7f0000000040)=0xffff, 0x4) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") unshare(0x806) getsockopt$sock_buf(r0, 0x1, 0x1a, 0x0, &(0x7f0000000380)) 09:02:15 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000000000]}, 0x10) 09:02:15 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x101000) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000080)=0x2, 0x4) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, {}, 0x4}, 0xe) 09:02:15 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5f56496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:02:16 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000140)={0x8f, 0x0, [0x4002]}) 09:02:16 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000000)={'teql0\x00', {0x2, 0x0, @dev}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:02:16 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5f92496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:02:16 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000]}, 0x10) 09:02:16 executing program 3: r0 = socket$inet6(0xa, 0x10000040000000b, 0xfffffffffffffabf) r1 = socket$inet6(0xa, 0x1000000000003, 0x6) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") unshare(0x0) getsockopt$sock_buf(r0, 0x1, 0x1a, 0x0, &(0x7f0000000380)) 09:02:16 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x0, 0x0) readlinkat(r1, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=""/247, 0xf7) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {}, 0x4}, 0xe) 09:02:16 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x200, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f00000000c0)={0x2, [0x0, 0x0]}, &(0x7f0000000180)=0xc) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f00000001c0)=""/173) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x400, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r3, 0xc008551c, &(0x7f0000000040)=ANY=[@ANYBLOB="0800000010000000e5ffffff410400000000000003000000"]) ioctl$sock_inet_tcp_SIOCATMARK(r3, 0x8905, &(0x7f0000000000)) unshare(0x0) getsockopt$sock_buf(r0, 0x1, 0x1a, 0x0, &(0x7f0000000380)) 09:02:16 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5f8f496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:02:16 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {}, 0x4}, 0xe) r1 = accept4(r0, &(0x7f0000000040)=@pptp={0x18, 0x2, {0x0, @dev}}, &(0x7f00000000c0)=0x80, 0x80000) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000100)={0xa, [0x7, 0x100000000, 0x9, 0x9, 0x7fffffff, 0xfffffffffffffffc, 0xf14, 0x0, 0x7, 0x4]}, &(0x7f0000000140)=0x18) setsockopt$inet6_int(r1, 0x29, 0xdf, &(0x7f0000000200)=0x7fffffff, 0xffffffffffffff84) 09:02:16 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000]}, 0x10) 09:02:16 executing program 2: syz_execute_func(&(0x7f00000006c0)="3666950fdbf564ff0941c3c4e2c9975842c4c27d794e3366420fe2e33e0f1110c442019dcc6765da6fc56f") clone(0x2000004008500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$inet(0x2, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='\x00\x00\x00') exit(0x0) mknodat(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 09:02:16 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r2 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x7, 0x4000) ioctl$KVM_GET_EMULATED_CPUID(r2, 0xc008ae09, &(0x7f0000000040)=""/167) unshare(0x0) getsockopt$sock_buf(r0, 0x1, 0x1a, 0x0, &(0x7f0000000380)) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000100)={0x0, 0x8}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000001c0)=@assoc_value={r3, 0x6}, &(0x7f0000000200)=0x8) 09:02:16 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5f9e496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:02:16 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000000)={'teql0\x00', {0x2, 0x0, @dev}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:02:16 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x0, {0x0, 0x0, 0x6, 0xfffffffffffffffe}, 0x4, 0x3}, 0xe) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0x80045301, &(0x7f0000000040)) r1 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x3, 0x101400) setsockopt$inet_group_source_req(r1, 0x0, 0x2f, &(0x7f00000002c0)={0x9, {{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}}, {{0x2, 0x4e22, @empty}}}, 0x108) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x40001, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={0x0, 0x1f, 0x2}, &(0x7f0000000100)=0xc) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000140)={r3, 0x5}, &(0x7f0000000180)=0x8) 09:02:16 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0xe000]}, 0x10) 09:02:16 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockname$unix(r1, &(0x7f00000000c0), &(0x7f0000000000)=0x6e) 09:02:16 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f00000003c0)=""/4096, &(0x7f0000000000)=0x1000) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") unshare(0x0) getsockopt$sock_buf(r0, 0x1, 0x1a, 0x0, &(0x7f0000000380)) 09:02:16 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fed496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:02:16 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100), 0xc) r1 = dup2(r0, r0) close(r1) 09:02:16 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000000000000]}, 0x10) 09:02:16 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x0, {0x7fff, 0x0, 0x40000000, 0x3ff, 0xfffffffffffffffd}, 0x4}, 0xfed3) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x200, 0x0) write$P9_RXATTRWALK(r1, &(0x7f0000000080)={0xf, 0x1f, 0x1, 0x9}, 0xf) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x3ff, 0x40000) [ 660.383857] IPVS: length: 4096 != 24 09:02:16 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5f16496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:02:16 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000000)={'teql0\x00', {0x2, 0x0, @dev}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 660.424906] IPVS: length: 4096 != 24 09:02:16 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x103000, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)="6d696d655f747970652976626f786e6574312c2474727573746564ee2c766d6e6574316b657972696e672e706f7369785f61636c5f61636365737300", 0xffffffffffffff9c}, 0x10) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000086, 0x0, &(0x7f0000000100)={0x77359400}, &(0x7f0000048000), 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x6, 0x100000000000031, 0xffffffffffffffff, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x1) tkill(r2, 0x1000000000016) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000300), 0xc) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000400)) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x0, 0x0, 0x0, 0x7}}, 0x50) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r3, 0xc20, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000090}, 0x4000000) ioctl$BLKROGET(r0, 0x125e, &(0x7f00000002c0)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x801, 0x0) getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f00000004c0)={@multicast2, @remote}, &(0x7f0000000500)=0xc) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r4, &(0x7f0000000080)={0x1a, 0x337, 0x4b, 0x4, 0x3, 0x7f, @local}, 0x10) open(&(0x7f0000000080)='./file0\x00', 0x4000, 0x80) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x0, {}, 0x4}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000040)={0x6e9baa9, 0x594, 0x1, 0x2, 0xcc1, 0x80000000, 0xc0000000000000}, 0xc) 09:02:16 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0xfe00000000000000]}, 0x10) 09:02:16 executing program 3: r0 = socket$inet6(0xa, 0x804, 0x8) r1 = socket$inet6(0xa, 0x3, 0x6) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r2 = getpgid(0x0) fcntl$setown(r1, 0x8, r2) readv(r1, &(0x7f0000000040)=[{&(0x7f0000000000)=""/54, 0x36}], 0x1) unshare(0x0) r3 = memfd_create(&(0x7f0000000180)='\x00', 0x4) write$P9_RLERRORu(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x1f) getsockopt$sock_buf(r0, 0x1, 0x1a, 0x0, &(0x7f0000000380)) 09:02:16 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x8400, 0x0) getsockname$unix(r1, &(0x7f0000000080), &(0x7f0000000100)=0x6e) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {}, 0x4}, 0xe) 09:02:17 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fb0496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:02:17 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x8dffffff]}, 0x10) 09:02:17 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000000)={'teql0\x00', {0x2, 0x0, @dev}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:02:17 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {}, 0x4}, 0xe) r1 = memfd_create(&(0x7f0000000040)='\\)nodev\\^\x00', 0x0) getsockopt$inet_dccp_int(r1, 0x21, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=0x4) [ 660.731396] llc_conn_state_process: llc_conn_service failed 09:02:17 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x103000, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)="6d696d655f747970652976626f786e6574312c2474727573746564ee2c766d6e6574316b657972696e672e706f7369785f61636c5f61636365737300", 0xffffffffffffff9c}, 0x10) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000086, 0x0, &(0x7f0000000100)={0x77359400}, &(0x7f0000048000), 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x6, 0x100000000000031, 0xffffffffffffffff, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x1) tkill(r2, 0x1000000000016) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000300), 0xc) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000400)) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x0, 0x0, 0x0, 0x7}}, 0x50) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r3, 0xc20, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000090}, 0x4000000) ioctl$BLKROGET(r0, 0x125e, &(0x7f00000002c0)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x801, 0x0) getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f00000004c0)={@multicast2, @remote}, &(0x7f0000000500)=0xc) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r4, &(0x7f0000000080)={0x1a, 0x337, 0x4b, 0x4, 0x3, 0x7f, @local}, 0x10) open(&(0x7f0000000080)='./file0\x00', 0x4000, 0x80) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x0, {}, 0x4}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000040)={0x6e9baa9, 0x594, 0x1, 0x2, 0xcc1, 0x80000000, 0xc0000000000000}, 0xc) 09:02:17 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fda496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:02:17 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}, 0x10) 09:02:17 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000000)={'teql0\x00', {0x2, 0x0, @dev}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:02:17 executing program 4: r0 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x9, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000100)) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000380)={0xdb, 0x9, 0x0, 0x8000, 0x10000, 0x6}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x3, 0x2) openat$cgroup_subtree(r2, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, {}, 0x4}, 0xe) write$vnet(r2, &(0x7f0000000300)={0x1, {&(0x7f0000000140)=""/138, 0x8a, &(0x7f0000000200)=""/246, 0x3, 0x4}}, 0x68) 09:02:17 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1f4]}, 0x10) [ 661.036118] llc_conn_state_process: llc_conn_service failed 09:02:17 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") unshare(0x0) r2 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x3, 0x2) write$UHID_CREATE2(r2, &(0x7f0000000180)={0xb, 'syz1\x00', 'syz0\x00', 'syz1\x00', 0x8, 0x6, 0x9, 0x7, 0x1f, 0xffffffffffffffc0, "2cb4155afba17fa2"}, 0x120) getsockopt$sock_buf(r0, 0x1, 0x1a, 0x0, &(0x7f0000000380)) 09:02:17 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5f22496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:02:17 executing program 4: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x8002, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {}, 0x4}, 0xe) fdatasync(r0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x301000, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r1, 0x40405515, &(0x7f00000000c0)={0xa, 0x3, 0x9, 0x2, 'syz1\x00', 0xffffffffffffff81}) openat$cgroup_int(r1, &(0x7f0000000080)='memory.high\x00', 0x2, 0x0) 09:02:17 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:02:17 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3c00000000000000]}, 0x10) 09:02:17 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}, 0x10) 09:02:17 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fa7496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:02:17 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") unshare(0x0) r2 = memfd_create(&(0x7f0000000000)='!eth0self{\x00', 0x4) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000180)={r0, r0, 0x2, 0x2, &(0x7f0000000040)="60e98d9683649ddaee5ae4a1e5b011fa75f3521fa3206aefb4e3f35991321a49cb7db6716db0eba8aeade2c81996f23bb4a96523a28d5304b0c2c50a83c6477fb3b3a9dd90d83856f21fa3e3a076ea6ee5692a8805430696a5db81b63b45351a30a6276a224a0e408404996ce026e7a95270700630c9c6250eb39e33b5885fead9b3f3ebea7cb495c498bf47965ef743c1edb6d7900fde75e413c63dabf073f927c9e3c15f9726123aac994e48cb", 0x8, 0x0, 0x0, 0x459, 0x100000001, 0x4, 0x2, "6af8a4f64026015ffbcdadc875ec9604154ff5bcb90dfa659b862a5dae346395d2d74339d5d26298cf6d2accab89fd322fc62800364fcb9e26c4e235185f6ae01a3de5b613355a7172cfa182fd8d0ad93a672b577f9c31b14cdc8c66367924892b65d5ef7d21a9e03b7ec4b1f50f13ad239f9fb4cb2626e4f564"}) getsockopt$sock_buf(r0, 0x1, 0x1a, 0x0, &(0x7f0000000380)) 09:02:17 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0xfeffffff00000000]}, 0x10) 09:02:17 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='timers\x00') ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x1, 0x1, 0x6, 0x2, 0x4}}) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, {}, 0x4}, 0xe) 09:02:17 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5f03496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:02:17 executing program 3: r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x48080) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000040)={0x1, 0x4, [@link_local, @dev={[], 0x13}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, @empty]}) r1 = socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x3, 0x6) unshare(0x0) getsockopt$sock_buf(r1, 0x1, 0x1a, 0x0, &(0x7f0000000380)) 09:02:17 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:02:18 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:02:18 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fb5496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:02:18 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x800000]}, 0x10) 09:02:18 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5f7e496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:02:18 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:02:18 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") unshare(0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x4000, 0x50) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000040)={0x2, 0x0, [{0x7f, 0x7, 0x0, 0x0, @msi={0x7ff, 0xfffffffffffff801, 0x7fff}}, {0x1, 0x2, 0x0, 0x0, @adapter={0x2000000000000000, 0xff, 0x6, 0x9}}]}) getsockopt$sock_buf(r0, 0x1, 0x1a, 0x0, &(0x7f0000000380)) 09:02:18 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x50000]}, 0x10) 09:02:18 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5f48496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:02:18 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5f4e496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:02:18 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5f15496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:02:18 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") getsockopt$sock_buf(r0, 0x1, 0x1a, 0x0, &(0x7f0000000380)) 09:02:18 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fe0496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:02:18 executing program 2 (fault-call:9 fault-nth:0): clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20000000001b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x10000000, 0x0, 0x8, 0x0, 0x7}) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 09:02:18 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x40640, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000040)={0x3, 0x0, [0x0, 0x0, 0x0]}) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") unshare(0x0) getsockopt$sock_buf(r0, 0x1, 0x1a, 0x0, &(0x7f0000000380)) 09:02:18 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0xa00]}, 0x10) 09:02:18 executing program 4 (fault-call:2 fault-nth:0): r0 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x80000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_READ(r0, 0xc0287c02, &(0x7f0000000040)) 09:02:18 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000000)={'teql0\x00', {0x2, 0x0, @dev}}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 09:02:18 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20000000001b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x10000000, 0x0, 0x8, 0x0, 0x7}) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 09:02:18 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x10000000000003) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x20000, 0x0) write$nbd(r1, &(0x7f0000000100)={0x67446698, 0x0, 0x3, 0x2, 0x4, "cacb0f1fc64490fa3bc0cb9fd7dda78ba2a6e0e4f114fdc80eafe08acc5d2a7cf3deb39baaf43c30c4665cab225ff78861a7677a661b6bcb0329528f6668ef4a50bb98e6194ebebc4d4b94aea7ed140a4bf5d7064ef352b620d339831c2a9eb8fddd9a9b1c38cba75c6be40f740517dc29d73a5f59968275435685c9538cdf9104e2d8"}, 0x93) r2 = socket$inet6(0xa, 0x3, 0x6) ioctl(r0, 0x1000008911, &(0x7f00000003c0)="0a5c2e023c126285718070218e7ad2a92b8dbc2464744c9d09b2b792e60fe44ddf1945e9ac2853c56874e7086fc4bee0c83f334bbb2463a90cdbaadd925a8fd5c68898feae208c2d4218e1d7682ef5a2123fce65e9d6bc1cc29bbb651542409f9ace45b421967e54ab4c95675c58f63285362944bb5ae0e6f16ec1a9b900f8ffffffffffff84d7a19a10a7951431d1798a") r3 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffffffffffffb, 0x400) getpeername$inet(r3, &(0x7f0000000040)={0x2, 0x0, @local}, &(0x7f0000000080)=0x10) unshare(0x0) getsockopt$sock_buf(r2, 0x1, 0x1d, 0x0, &(0x7f0000000380)=0x18b) 09:02:18 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fdb496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:02:18 executing program 4: r0 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x80000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_READ(r0, 0xc0287c02, &(0x7f0000000040)) 09:02:18 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf401]}, 0x10) 09:02:18 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000000)={'teql0\x00', {0x2, 0x0, @dev}}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 09:02:18 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5f82496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:02:18 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4002000000000000]}, 0x10) 09:02:18 executing program 4: r0 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x80000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_READ(r0, 0xc0189436, &(0x7f0000000040)) 09:02:18 executing program 3: r0 = socket$inet6(0xa, 0x0, 0x7fffffff) r1 = socket$inet6(0xa, 0x3, 0x6) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") unshare(0x0) getsockopt$sock_buf(r0, 0x1, 0x1a, 0x0, &(0x7f0000000380)) getpeername$packet(0xffffffffffffff9c, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r3 = geteuid() setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@local, @in6=@remote, 0x4e22, 0x6814000000000, 0x4e22, 0x9, 0x2, 0x80, 0x20, 0xff, r2, r3}, {0x800, 0x1ff, 0xea85, 0x9, 0x20000, 0x58a, 0xf9, 0xfff}, {0xffff, 0x8000, 0x101, 0x1}, 0x100000001, 0x6e6bba, 0x0, 0x1, 0x3, 0x1}, {{@in=@loopback, 0x4d3, 0x6c}, 0xa, @in=@broadcast, 0x3501, 0x3, 0x2, 0xfffffffffffffffd, 0x200, 0x9, 0x1}}, 0xe8) 09:02:18 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000000)={'teql0\x00', {0x2, 0x0, @dev}}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 09:02:19 executing program 4: r0 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x80000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_READ(r0, 0x2, &(0x7f0000000040)) 09:02:21 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20000000001b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x10000000, 0x0, 0x8, 0x0, 0x7}) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x7fffffffefff, 0x0) 09:02:21 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5f8a496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:02:21 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf401000000000000]}, 0x10) 09:02:21 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) listen(r0, 0xc22e) r1 = socket$inet6(0xa, 0x3, 0x6) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x800, 0x0) setsockopt$netlink_NETLINK_RX_RING(r2, 0x10e, 0x6, &(0x7f0000000040)={0xe54178, 0x7, 0x4, 0xfffffffffffffff8}, 0x10) unshare(0x0) getsockopt$sock_buf(r0, 0x1, 0x1a, 0x0, &(0x7f0000000380)) 09:02:21 executing program 4: r0 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x80000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_READ(r0, 0xc0045878, &(0x7f0000000040)) 09:02:21 executing program 5 (fault-call:8 fault-nth:0): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000000)={'teql0\x00', {0x2, 0x0, @dev}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:02:21 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5f66496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) [ 665.398916] FAULT_INJECTION: forcing a failure. [ 665.398916] name failslab, interval 1, probability 0, space 0, times 0 [ 665.420148] CPU: 0 PID: 30406 Comm: syz-executor5 Not tainted 4.20.0-rc4+ #138 [ 665.427533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 665.436907] Call Trace: [ 665.439518] dump_stack+0x244/0x39d [ 665.443183] ? dump_stack_print_info.cold.1+0x20/0x20 09:02:21 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5faf496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) [ 665.448412] should_fail.cold.4+0xa/0x17 [ 665.452493] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 665.457622] ? print_usage_bug+0xc0/0xc0 [ 665.461700] ? print_usage_bug+0xc0/0xc0 [ 665.465772] ? print_usage_bug+0xc0/0xc0 [ 665.469846] ? zap_class+0x640/0x640 [ 665.473589] ? check_preemption_disabled+0x48/0x280 [ 665.478630] ? find_held_lock+0x36/0x1c0 [ 665.482721] ? __lock_is_held+0xb5/0x140 [ 665.486822] ? perf_trace_sched_process_exec+0x860/0x860 [ 665.492301] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 09:02:21 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fec496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) [ 665.497857] ? check_preemption_disabled+0x48/0x280 [ 665.502896] __should_failslab+0x124/0x180 [ 665.507151] should_failslab+0x9/0x14 [ 665.510958] kmem_cache_alloc+0x2be/0x730 [ 665.515111] ? lock_acquire+0x1ed/0x520 [ 665.519091] ? kvm_arch_vcpu_ioctl_run+0x30f/0x7320 [ 665.524132] mmu_topup_memory_caches+0xfb/0x470 [ 665.528812] ? kvm_inject_realmode_interrupt+0x260/0x260 [ 665.534303] kvm_mmu_load+0x21/0x1290 [ 665.538121] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 665.543673] ? vmx_clear_hlt.isra.39+0xa5/0xd0 09:02:21 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fb6496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) [ 665.548297] kvm_arch_vcpu_ioctl_run+0x2889/0x7320 [ 665.553257] ? perf_trace_lock_acquire+0x15b/0x800 [ 665.558219] ? kvm_arch_vcpu_runnable+0x710/0x710 [ 665.563090] ? zap_class+0x640/0x640 [ 665.566819] ? __lock_acquire+0x62f/0x4c20 [ 665.571072] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 665.576637] ? find_held_lock+0x36/0x1c0 [ 665.580725] ? get_task_pid+0x1ea/0x3b0 [ 665.584721] ? lock_downgrade+0x900/0x900 [ 665.588885] ? check_preemption_disabled+0x48/0x280 [ 665.593919] ? rcu_read_unlock_special+0x1c0/0x1c0 09:02:21 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fe6496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) [ 665.598867] ? kasan_check_read+0x11/0x20 [ 665.601802] cgroup: fork rejected by pids controller in /syz1 [ 665.603029] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 665.603053] ? rcu_softirq_qs+0x20/0x20 [ 665.603081] ? get_task_pid+0x211/0x3b0 [ 665.622158] ? find_get_pid+0x270/0x270 [ 665.626167] ? zap_class+0x640/0x640 [ 665.629903] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 665.635470] kvm_vcpu_ioctl+0x5c8/0x1150 [ 665.639545] ? kvm_vcpu_ioctl+0x5c8/0x1150 [ 665.643800] ? kvm_uevent_notify_change.part.32+0x450/0x450 [ 665.649528] ? find_held_lock+0x36/0x1c0 [ 665.653620] ? __fget+0x4aa/0x740 [ 665.657087] ? check_preemption_disabled+0x48/0x280 [ 665.662120] ? kasan_check_read+0x11/0x20 [ 665.666287] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 665.671577] ? rcu_softirq_qs+0x20/0x20 [ 665.675576] ? __fget+0x4d1/0x740 [ 665.679047] ? ksys_dup3+0x680/0x680 [ 665.682787] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 665.687738] ? kvm_uevent_notify_change.part.32+0x450/0x450 [ 665.693461] do_vfs_ioctl+0x1de/0x1790 [ 665.697361] ? __lock_is_held+0xb5/0x140 [ 665.701439] ? ioctl_preallocate+0x300/0x300 [ 665.705854] ? __fget_light+0x2e9/0x430 [ 665.709844] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 665.715394] ? smack_file_ioctl+0x210/0x3c0 [ 665.719720] ? fget_raw+0x20/0x20 [ 665.723182] ? smack_file_lock+0x2e0/0x2e0 [ 665.727430] ? __sb_end_write+0xd9/0x110 [ 665.731506] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 665.737050] ? fput+0x130/0x1a0 [ 665.740344] ? do_syscall_64+0x9a/0x820 [ 665.744329] ? do_syscall_64+0x9a/0x820 [ 665.748320] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 665.753868] ? security_file_ioctl+0x94/0xc0 [ 665.758298] ksys_ioctl+0xa9/0xd0 [ 665.761763] __x64_sys_ioctl+0x73/0xb0 [ 665.765664] do_syscall_64+0x1b9/0x820 [ 665.769561] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 665.774948] ? syscall_return_slowpath+0x5e0/0x5e0 [ 665.779888] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 665.784749] ? trace_hardirqs_on_caller+0x310/0x310 [ 665.789781] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 665.794810] ? prepare_exit_to_usermode+0x291/0x3b0 [ 665.799843] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 665.804733] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 665.809928] RIP: 0033:0x457569 [ 665.813128] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 665.832033] RSP: 002b:00007f8018763c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 665.839745] RAX: ffffffffffffffda RBX: 00007f8018763c90 RCX: 0000000000457569 09:02:22 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20000000001b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x10000000, 0x0, 0x8, 0x0, 0x7}) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0xffffffff00000000, 0x0) 09:02:22 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") unshare(0x0) getsockopt$sock_buf(r0, 0x1, 0x1a, 0x0, &(0x7f0000000380)) exit_group(0x1) 09:02:22 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0xe00000000000000]}, 0x10) 09:02:22 executing program 4: r0 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x80000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_READ(r0, 0x5452, &(0x7f0000000040)) [ 665.847025] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 665.854294] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 665.861565] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f80187646d4 [ 665.868838] R13: 00000000004c034e R14: 00000000004d0d60 R15: 0000000000000007 09:02:22 executing program 4: r0 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x80000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_READ(r0, 0x40049409, &(0x7f0000000040)) 09:02:22 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20000000001b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x10000000, 0x0, 0x8, 0x0, 0x7}) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x70500000000000, 0x0) 09:02:22 executing program 5 (fault-call:8 fault-nth:1): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000000)={'teql0\x00', {0x2, 0x0, @dev}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:02:22 executing program 3: r0 = socket$inet6(0xa, 0x8000a, 0xac) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) fcntl$setownex(r0, 0xf, &(0x7f00000000c0)={0x3, r1}) r2 = socket$inet6(0xa, 0x3, 0x6) ioctl(r2, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x802, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r3, &(0x7f0000000180)="e3a9e34a19bef2523b576bdfaa505d2045af1573c23b7fc99c7caf7baa967a5f97ea6ec792a26e6a9e204d56bc887e4295ba7a1731a326cc0d294d176915bd75aabe7e78cb317fa36da051a6a262de459b57dbc9b2d3a847d5ff3e6b66c8c1427bd9dd8a99945ac124dadc365d4301187dc5f9f464604888d1ecf591ed39465095998b838184ef7e897404f3dd6a8a96f5ebff20738193054e3398483902c19d2bf8aa358436bd5d1730cbe9b4439b76860ac3", &(0x7f0000000240)=""/152}, 0x18) unshare(0x0) getsockopt$sock_buf(r0, 0x1, 0x1a, 0x0, &(0x7f0000000380)) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000000)) 09:02:22 executing program 4: r0 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x80000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_READ(r0, 0xc0045878, &(0x7f0000000040)) 09:02:22 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0xe8030000]}, 0x10) 09:02:22 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20000000001b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x10000000, 0x0, 0x8, 0x0, 0x7}) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0xff600000, 0x0) [ 666.460177] FAULT_INJECTION: forcing a failure. [ 666.460177] name failslab, interval 1, probability 0, space 0, times 0 [ 666.481026] CPU: 0 PID: 30472 Comm: syz-executor5 Not tainted 4.20.0-rc4+ #138 [ 666.488409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 666.497787] Call Trace: [ 666.500393] dump_stack+0x244/0x39d [ 666.504039] ? dump_stack_print_info.cold.1+0x20/0x20 [ 666.509265] ? __kernel_text_address+0xd/0x40 [ 666.513808] ? unwind_get_return_address+0x61/0xa0 [ 666.518760] should_fail.cold.4+0xa/0x17 [ 666.522840] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 666.527962] ? save_stack+0xa9/0xd0 [ 666.531608] ? kasan_kmalloc+0xc7/0xe0 [ 666.535505] ? kasan_slab_alloc+0x12/0x20 [ 666.539675] ? kmem_cache_alloc+0x12e/0x730 [ 666.544005] ? mmu_topup_memory_caches+0xfb/0x470 [ 666.548858] ? kvm_mmu_load+0x21/0x1290 [ 666.552842] ? kvm_arch_vcpu_ioctl_run+0x2889/0x7320 [ 666.557986] ? zap_class+0x640/0x640 [ 666.561708] ? __x64_sys_ioctl+0x73/0xb0 [ 666.565781] ? do_syscall_64+0x1b9/0x820 [ 666.569852] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 666.575233] ? find_held_lock+0x36/0x1c0 [ 666.579324] ? __lock_is_held+0xb5/0x140 [ 666.583428] ? perf_trace_sched_process_exec+0x860/0x860 [ 666.588904] __should_failslab+0x124/0x180 [ 666.593154] should_failslab+0x9/0x14 [ 666.596965] kmem_cache_alloc+0x2be/0x730 [ 666.601124] ? lock_acquire+0x1ed/0x520 [ 666.605109] ? kvm_arch_vcpu_ioctl_run+0x30f/0x7320 [ 666.610137] ? mmu_topup_memory_caches+0xfb/0x470 [ 666.615005] mmu_topup_memory_caches+0xfb/0x470 [ 666.619698] ? kvm_inject_realmode_interrupt+0x260/0x260 [ 666.625167] kvm_mmu_load+0x21/0x1290 [ 666.628981] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 666.634542] ? vmx_clear_hlt.isra.39+0xa5/0xd0 [ 666.639135] kvm_arch_vcpu_ioctl_run+0x2889/0x7320 [ 666.644074] ? kvm_vcpu_ioctl+0x1e5/0x1150 [ 666.648331] ? kvm_arch_vcpu_runnable+0x710/0x710 [ 666.653175] ? zap_class+0x640/0x640 [ 666.656900] ? __lock_acquire+0x62f/0x4c20 [ 666.661142] ? lock_downgrade+0x900/0x900 [ 666.665330] ? check_preemption_disabled+0x48/0x280 [ 666.670368] ? find_held_lock+0x36/0x1c0 [ 666.674450] ? get_task_pid+0x1ea/0x3b0 [ 666.678468] ? lock_downgrade+0x900/0x900 [ 666.682629] ? check_preemption_disabled+0x48/0x280 [ 666.687670] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 666.692608] ? kasan_check_read+0x11/0x20 [ 666.696763] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 666.702050] ? rcu_softirq_qs+0x20/0x20 [ 666.706048] ? get_task_pid+0x211/0x3b0 [ 666.710032] ? find_get_pid+0x270/0x270 [ 666.714008] ? zap_class+0x640/0x640 [ 666.717766] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 666.723333] kvm_vcpu_ioctl+0x5c8/0x1150 [ 666.727419] ? kvm_vcpu_ioctl+0x5c8/0x1150 [ 666.731667] ? kvm_uevent_notify_change.part.32+0x450/0x450 [ 666.737394] ? find_held_lock+0x36/0x1c0 [ 666.741471] ? __fget+0x4aa/0x740 [ 666.744938] ? check_preemption_disabled+0x48/0x280 [ 666.750004] ? kasan_check_read+0x11/0x20 [ 666.754158] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 666.759442] ? rcu_softirq_qs+0x20/0x20 [ 666.763436] ? __fget+0x4d1/0x740 [ 666.766952] ? ksys_dup3+0x680/0x680 [ 666.770692] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 666.775638] ? kvm_uevent_notify_change.part.32+0x450/0x450 [ 666.781360] do_vfs_ioctl+0x1de/0x1790 [ 666.785316] ? __lock_is_held+0xb5/0x140 [ 666.789389] ? ioctl_preallocate+0x300/0x300 [ 666.793808] ? __fget_light+0x2e9/0x430 [ 666.797795] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 666.803344] ? smack_file_ioctl+0x210/0x3c0 [ 666.807672] ? fget_raw+0x20/0x20 [ 666.811134] ? smack_file_lock+0x2e0/0x2e0 [ 666.815384] ? __sb_end_write+0xd9/0x110 [ 666.819461] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 666.825010] ? fput+0x130/0x1a0 [ 666.828309] ? do_syscall_64+0x9a/0x820 [ 666.832291] ? do_syscall_64+0x9a/0x820 [ 666.836289] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 666.841836] ? security_file_ioctl+0x94/0xc0 [ 666.846272] ksys_ioctl+0xa9/0xd0 [ 666.849766] __x64_sys_ioctl+0x73/0xb0 [ 666.853679] do_syscall_64+0x1b9/0x820 [ 666.857579] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 666.862966] ? syscall_return_slowpath+0x5e0/0x5e0 [ 666.867907] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 666.872776] ? trace_hardirqs_on_caller+0x310/0x310 [ 666.877808] ? prepare_exit_to_usermode+0x291/0x3b0 [ 666.882837] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 666.887696] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 666.892889] RIP: 0033:0x457569 [ 666.896092] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 666.915001] RSP: 002b:00007f8018763c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 666.922726] RAX: ffffffffffffffda RBX: 00007f8018763c90 RCX: 0000000000457569 [ 666.930015] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 666.937307] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 666.944580] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f80187646d4 [ 666.952344] R13: 00000000004c034e R14: 00000000004d0d60 R15: 0000000000000007 09:02:24 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20000000001b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x10000000, 0x0, 0x8, 0x0, 0x7}) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x1000000, 0x0) 09:02:24 executing program 4: r0 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x80000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_READ(r0, 0xc0287c05, &(0x7f0000000040)) 09:02:24 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x91ffffff]}, 0x10) 09:02:24 executing program 5 (fault-call:8 fault-nth:2): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000000)={'teql0\x00', {0x2, 0x0, @dev}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:02:24 executing program 3: socket$inet6(0xa, 0x2, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x200, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) unshare(0x0) getsockopt$sock_buf(r0, 0x1, 0x1a, 0x0, &(0x7f0000000380)) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x2e, 0x80002) ioctl$RTC_WIE_OFF(r1, 0x7010) 09:02:24 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5f44496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:02:24 executing program 4: r0 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x80000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_READ(r0, 0xc020660b, &(0x7f0000000040)) 09:02:24 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000000)={'gretap0\x00', 0xd1}) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x3, 0x6) write$binfmt_aout(r2, &(0x7f00000003c0)={{0x0, 0x0, 0x3, 0x1b6, 0x85, 0x400, 0x22e, 0x7ff}, "4d1d3f0991b4e39c10d9a5850d95ca4b4033d429454d664b57b25dc1507884dc0729e378ebb817f3802689699db2a7e35f0579fc6ebc5aaf5c4f21cd243fb709c7242d09292e71fe36cc748fe5b07968caea003c768b23a30b87ef24b006d9469fd05ba61515ff84a43e7509496aa794be1bdf8d3624c18fa3c5fa9fb88239f5fdd51c3b38ca90b9b93ccb6caba2a592911e5f782f4f8a86794ce3b225d31c859b7a0ff768bc48414195c75b64cca88d49eebeb0810944db85522a24de7e", [[], [], [], [], [], [], []]}, 0x7de) ioctl(r2, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") unshare(0x0) getsockopt$sock_buf(r1, 0x1, 0x1a, 0x0, &(0x7f0000000380)) 09:02:24 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000]}, 0x10) 09:02:24 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20000000001b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x10000000, 0x0, 0x8, 0x0, 0x7}) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0xffefffffff7f0000, 0x0) [ 668.294349] FAULT_INJECTION: forcing a failure. [ 668.294349] name failslab, interval 1, probability 0, space 0, times 0 [ 668.396048] CPU: 0 PID: 30510 Comm: syz-executor5 Not tainted 4.20.0-rc4+ #138 [ 668.403440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 668.412803] Call Trace: [ 668.415413] dump_stack+0x244/0x39d [ 668.419079] ? dump_stack_print_info.cold.1+0x20/0x20 [ 668.424290] ? __kernel_text_address+0xd/0x40 [ 668.428801] ? unwind_get_return_address+0x61/0xa0 [ 668.433769] should_fail.cold.4+0xa/0x17 [ 668.437847] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 668.443004] ? save_stack+0xa9/0xd0 [ 668.446645] ? kasan_kmalloc+0xc7/0xe0 [ 668.450544] ? kasan_slab_alloc+0x12/0x20 [ 668.454702] ? kmem_cache_alloc+0x12e/0x730 [ 668.459032] ? mmu_topup_memory_caches+0xfb/0x470 [ 668.463881] ? kvm_mmu_load+0x21/0x1290 [ 668.467863] ? kvm_arch_vcpu_ioctl_run+0x2889/0x7320 [ 668.472997] ? zap_class+0x640/0x640 [ 668.476720] ? __x64_sys_ioctl+0x73/0xb0 [ 668.480793] ? do_syscall_64+0x1b9/0x820 [ 668.484864] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 668.490296] ? find_held_lock+0x36/0x1c0 [ 668.494394] ? __lock_is_held+0xb5/0x140 [ 668.498479] ? perf_trace_sched_process_exec+0x860/0x860 [ 668.503964] __should_failslab+0x124/0x180 [ 668.508230] should_failslab+0x9/0x14 [ 668.512059] kmem_cache_alloc+0x2be/0x730 [ 668.516219] ? mark_held_locks+0xc7/0x130 [ 668.520415] ? mmu_topup_memory_caches+0xfb/0x470 [ 668.525292] mmu_topup_memory_caches+0xfb/0x470 [ 668.529969] ? kvm_inject_realmode_interrupt+0x260/0x260 [ 668.535439] kvm_mmu_load+0x21/0x1290 [ 668.539271] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 668.544828] ? vmx_clear_hlt.isra.39+0xa5/0xd0 [ 668.549429] kvm_arch_vcpu_ioctl_run+0x2889/0x7320 [ 668.554392] ? kvm_arch_vcpu_runnable+0x710/0x710 [ 668.559273] ? zap_class+0x640/0x640 [ 668.562995] ? __lock_acquire+0x62f/0x4c20 [ 668.567272] ? lock_downgrade+0x900/0x900 [ 668.571431] ? check_preemption_disabled+0x48/0x280 [ 668.576488] ? find_held_lock+0x36/0x1c0 [ 668.580571] ? get_task_pid+0x1ea/0x3b0 [ 668.584570] ? lock_downgrade+0x900/0x900 [ 668.588727] ? check_preemption_disabled+0x48/0x280 [ 668.593762] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 668.598715] ? kasan_check_read+0x11/0x20 [ 668.602877] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 668.608162] ? rcu_softirq_qs+0x20/0x20 [ 668.612163] ? get_task_pid+0x211/0x3b0 [ 668.616152] ? find_get_pid+0x270/0x270 [ 668.620136] ? zap_class+0x640/0x640 [ 668.623880] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 668.629449] kvm_vcpu_ioctl+0x5c8/0x1150 [ 668.633535] ? kvm_vcpu_ioctl+0x5c8/0x1150 [ 668.637800] ? kvm_uevent_notify_change.part.32+0x450/0x450 [ 668.643561] ? find_held_lock+0x36/0x1c0 [ 668.647703] ? __fget+0x4aa/0x740 [ 668.651195] ? check_preemption_disabled+0x48/0x280 [ 668.656219] ? kasan_check_read+0x11/0x20 [ 668.660382] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 668.665679] ? rcu_softirq_qs+0x20/0x20 [ 668.669689] ? __fget+0x4d1/0x740 [ 668.673153] ? ksys_dup3+0x680/0x680 [ 668.676901] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 668.681842] ? kvm_uevent_notify_change.part.32+0x450/0x450 [ 668.687591] do_vfs_ioctl+0x1de/0x1790 [ 668.691481] ? __lock_is_held+0xb5/0x140 [ 668.695550] ? ioctl_preallocate+0x300/0x300 [ 668.699967] ? __fget_light+0x2e9/0x430 [ 668.703943] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 668.709487] ? smack_file_ioctl+0x210/0x3c0 [ 668.713823] ? fget_raw+0x20/0x20 [ 668.717282] ? smack_file_lock+0x2e0/0x2e0 [ 668.721523] ? __sb_end_write+0xd9/0x110 [ 668.725609] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 668.731153] ? fput+0x130/0x1a0 [ 668.734438] ? do_syscall_64+0x9a/0x820 [ 668.738415] ? do_syscall_64+0x9a/0x820 [ 668.742401] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 668.747946] ? security_file_ioctl+0x94/0xc0 [ 668.752368] ksys_ioctl+0xa9/0xd0 [ 668.755835] __x64_sys_ioctl+0x73/0xb0 [ 668.759729] do_syscall_64+0x1b9/0x820 [ 668.763624] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 668.768997] ? syscall_return_slowpath+0x5e0/0x5e0 [ 668.773935] ? trace_hardirqs_on_caller+0x310/0x310 [ 668.778970] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 668.784008] ? post_copy_siginfo_from_user.isra.25.part.26+0x250/0x250 [ 668.790704] ? __switch_to_asm+0x40/0x70 [ 668.794773] ? __switch_to_asm+0x34/0x70 [ 668.798856] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 668.803715] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 668.808904] RIP: 0033:0x457569 [ 668.812097] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 668.830996] RSP: 002b:00007f8018742c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 668.838737] RAX: ffffffffffffffda RBX: 00007f8018742c90 RCX: 0000000000457569 09:02:25 executing program 4: r0 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x80000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_READ(r0, 0x5421, &(0x7f0000000040)) [ 668.846007] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 668.853277] RBP: 000000000072bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 668.860563] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f80187436d4 [ 668.867837] R13: 00000000004c034e R14: 00000000004d0d60 R15: 0000000000000007 09:02:25 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0xe0000000]}, 0x10) 09:02:25 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20000000001b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x10000000, 0x0, 0x8, 0x0, 0x7}) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x400000000000, 0x0) [ 668.941027] IPVS: ftp: loaded support on port[0] = 21 09:02:25 executing program 4: r0 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x80000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_READ(r0, 0x5451, &(0x7f0000000040)) 09:02:25 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20000000001b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x10000000, 0x0, 0x8, 0x0, 0x7}) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x705000, 0x0) 09:02:25 executing program 5 (fault-call:8 fault-nth:3): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000000)={'teql0\x00', {0x2, 0x0, @dev}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:02:25 executing program 4: r0 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x80000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_READ(r0, 0x5460, &(0x7f0000000040)) [ 669.304840] FAULT_INJECTION: forcing a failure. [ 669.304840] name failslab, interval 1, probability 0, space 0, times 0 [ 669.316626] CPU: 1 PID: 30562 Comm: syz-executor5 Not tainted 4.20.0-rc4+ #138 [ 669.323999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 669.333354] Call Trace: [ 669.335959] dump_stack+0x244/0x39d [ 669.339606] ? dump_stack_print_info.cold.1+0x20/0x20 [ 669.344814] ? __kernel_text_address+0xd/0x40 [ 669.349330] ? unwind_get_return_address+0x61/0xa0 [ 669.354281] should_fail.cold.4+0xa/0x17 [ 669.358360] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 669.363474] ? save_stack+0xa9/0xd0 [ 669.367116] ? kasan_kmalloc+0xc7/0xe0 [ 669.370989] ? kasan_slab_alloc+0x12/0x20 [ 669.375118] ? kmem_cache_alloc+0x12e/0x730 [ 669.379427] ? mmu_topup_memory_caches+0xfb/0x470 [ 669.384261] ? kvm_mmu_load+0x21/0x1290 [ 669.388222] ? kvm_arch_vcpu_ioctl_run+0x2889/0x7320 [ 669.393324] ? zap_class+0x640/0x640 [ 669.397037] ? __x64_sys_ioctl+0x73/0xb0 [ 669.401099] ? do_syscall_64+0x1b9/0x820 [ 669.405147] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 669.410512] ? find_held_lock+0x36/0x1c0 [ 669.414573] ? __lock_is_held+0xb5/0x140 [ 669.418619] ? ZSTD_compressBlock_lazy+0x1068/0x3160 [ 669.423713] ? perf_trace_sched_process_exec+0x860/0x860 [ 669.429166] __should_failslab+0x124/0x180 [ 669.433394] should_failslab+0x9/0x14 [ 669.437181] kmem_cache_alloc+0x2be/0x730 [ 669.441348] ? lock_acquire+0x1ed/0x520 [ 669.445327] ? kvm_arch_vcpu_ioctl_run+0x30f/0x7320 [ 669.450344] ? mmu_topup_memory_caches+0xfb/0x470 [ 669.455175] mmu_topup_memory_caches+0xfb/0x470 [ 669.459870] ? kvm_inject_realmode_interrupt+0x260/0x260 [ 669.465336] kvm_mmu_load+0x21/0x1290 [ 669.469136] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 669.474674] ? vmx_clear_hlt.isra.39+0xa5/0xd0 [ 669.479252] kvm_arch_vcpu_ioctl_run+0x2889/0x7320 [ 669.484173] ? kvm_vcpu_ioctl+0x1e5/0x1150 [ 669.488401] ? kvm_arch_vcpu_runnable+0x710/0x710 [ 669.493229] ? zap_class+0x640/0x640 [ 669.496955] ? __lock_acquire+0x62f/0x4c20 [ 669.501177] ? lock_downgrade+0x900/0x900 [ 669.505315] ? check_preemption_disabled+0x48/0x280 [ 669.510325] ? find_held_lock+0x36/0x1c0 [ 669.514376] ? get_task_pid+0x1ea/0x3b0 [ 669.518346] ? lock_downgrade+0x900/0x900 [ 669.522481] ? check_preemption_disabled+0x48/0x280 [ 669.527483] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 669.532397] ? kasan_check_read+0x11/0x20 [ 669.536527] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 669.541790] ? rcu_softirq_qs+0x20/0x20 [ 669.545759] ? get_task_pid+0x211/0x3b0 [ 669.549729] ? find_get_pid+0x270/0x270 [ 669.553723] ? zap_class+0x640/0x640 [ 669.557447] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 669.562973] kvm_vcpu_ioctl+0x5c8/0x1150 [ 669.567017] ? kvm_vcpu_ioctl+0x5c8/0x1150 [ 669.571246] ? kvm_uevent_notify_change.part.32+0x450/0x450 [ 669.577011] ? find_held_lock+0x36/0x1c0 [ 669.581064] ? __fget+0x4aa/0x740 [ 669.584514] ? check_preemption_disabled+0x48/0x280 [ 669.589533] ? kasan_check_read+0x11/0x20 [ 669.593669] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 669.598931] ? rcu_softirq_qs+0x20/0x20 [ 669.602895] ? __fget+0x4d1/0x740 [ 669.606352] ? ksys_dup3+0x680/0x680 [ 669.610059] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 669.614979] ? kvm_uevent_notify_change.part.32+0x450/0x450 [ 669.620675] do_vfs_ioctl+0x1de/0x1790 [ 669.624551] ? __lock_is_held+0xb5/0x140 [ 669.628597] ? ioctl_preallocate+0x300/0x300 [ 669.632990] ? __fget_light+0x2e9/0x430 [ 669.636963] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 669.642489] ? smack_file_ioctl+0x210/0x3c0 [ 669.646796] ? fget_raw+0x20/0x20 [ 669.650231] ? smack_file_lock+0x2e0/0x2e0 [ 669.654474] ? __sb_end_write+0xd9/0x110 [ 669.658526] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 669.664049] ? fput+0x130/0x1a0 [ 669.667334] ? do_syscall_64+0x9a/0x820 [ 669.671298] ? do_syscall_64+0x9a/0x820 [ 669.675268] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 669.680790] ? security_file_ioctl+0x94/0xc0 [ 669.685184] ksys_ioctl+0xa9/0xd0 [ 669.688640] __x64_sys_ioctl+0x73/0xb0 [ 669.692515] do_syscall_64+0x1b9/0x820 [ 669.696403] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 669.701784] ? syscall_return_slowpath+0x5e0/0x5e0 [ 669.706715] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 669.711547] ? trace_hardirqs_on_caller+0x310/0x310 [ 669.716565] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 669.721569] ? prepare_exit_to_usermode+0x291/0x3b0 [ 669.726572] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 669.731403] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 669.736610] RIP: 0033:0x457569 [ 669.739792] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 669.758677] RSP: 002b:00007f8018763c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 669.766404] RAX: ffffffffffffffda RBX: 00007f8018763c90 RCX: 0000000000457569 [ 669.773658] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 669.780914] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 669.788170] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f80187646d4 [ 669.795434] R13: 00000000004c034e R14: 00000000004d0d60 R15: 0000000000000007 [ 671.161778] device bridge_slave_1 left promiscuous mode [ 671.167331] bridge0: port 2(bridge_slave_1) entered disabled state [ 671.210028] device bridge_slave_0 left promiscuous mode [ 671.215466] bridge0: port 1(bridge_slave_0) entered disabled state [ 673.274773] team0 (unregistering): Port device team_slave_1 removed [ 673.284585] team0 (unregistering): Port device team_slave_0 removed [ 673.295016] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 673.333605] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 673.407728] bond0 (unregistering): Released all slaves [ 673.474900] bridge0: port 1(bridge_slave_0) entered blocking state [ 673.482336] bridge0: port 1(bridge_slave_0) entered disabled state [ 673.489525] device bridge_slave_0 entered promiscuous mode [ 673.517165] bridge0: port 2(bridge_slave_1) entered blocking state [ 673.523868] bridge0: port 2(bridge_slave_1) entered disabled state [ 673.531119] device bridge_slave_1 entered promiscuous mode [ 673.562606] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 673.590465] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 673.714602] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 673.762684] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 673.978562] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 673.985967] team0: Port device team_slave_0 added [ 674.029076] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 674.037075] team0: Port device team_slave_1 added [ 674.081399] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 674.130222] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 674.176780] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 674.184019] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 674.200630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 674.241067] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 674.248205] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 674.265157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 674.713724] bridge0: port 2(bridge_slave_1) entered blocking state [ 674.720170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 674.726893] bridge0: port 1(bridge_slave_0) entered blocking state [ 674.733316] bridge0: port 1(bridge_slave_0) entered forwarding state [ 674.741207] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 675.539444] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 675.801883] 8021q: adding VLAN 0 to HW filter on device bond0 [ 675.892120] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 675.980842] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 675.987056] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 675.994889] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 676.080940] 8021q: adding VLAN 0 to HW filter on device team0 09:02:32 executing program 4: r0 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x80000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_READ(r0, 0x4020940d, &(0x7f0000000040)) 09:02:32 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5f75496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:02:32 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf4010000]}, 0x10) 09:02:32 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20000000001b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x10000000, 0x0, 0x8, 0x0, 0x7}) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x60ff, 0x0) 09:02:32 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r2 = msgget$private(0x0, 0x20) msgsnd(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000000000009920dde3f6cb6978bf92383d9729e7e895d3a5420d138cc7202000292ad6050236f95e006917f0f0440b16bb01fa0525961a30cc14431672b37797e59f0cedba91a25ca7534d8fdad12a4eebf7835a48e8cbe4768f327cf45f3a204898900d9f51394be938ac6e276db6db152303ec7012c4257f3bfcea4eda7fc6eb8f16817511861a9c05f9ba206460f448ad48bda7ff12344115dd19f4d83da466f0aa44e7607126c345c1bd950add7df12f9043cff4bc64bc3a307aad1031f9af896ef8892de991d0853a03097c"], 0xd1, 0x800) unshare(0x0) getsockopt$sock_buf(r0, 0x1, 0x1a, 0x0, &(0x7f0000000000)=0x1d9) 09:02:32 executing program 5 (fault-call:8 fault-nth:4): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000000)={'teql0\x00', {0x2, 0x0, @dev}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:02:33 executing program 4: r0 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x80000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_READ(r0, 0x5450, &(0x7f0000000040)) 09:02:33 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20000000001b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x10000000, 0x0, 0x8, 0x0, 0x7}) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0xffc99a3b, 0x0) 09:02:33 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") unshare(0x0) getsockopt$sock_buf(r0, 0x1, 0x1a, 0x0, &(0x7f0000000380)=0xffffff24) 09:02:33 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fce496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) [ 676.707806] FAULT_INJECTION: forcing a failure. [ 676.707806] name failslab, interval 1, probability 0, space 0, times 0 09:02:33 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x500]}, 0x10) [ 676.801808] CPU: 1 PID: 30831 Comm: syz-executor5 Not tainted 4.20.0-rc4+ #138 [ 676.809191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 676.818552] Call Trace: [ 676.821159] dump_stack+0x244/0x39d [ 676.824813] ? dump_stack_print_info.cold.1+0x20/0x20 [ 676.830050] ? __kernel_text_address+0xd/0x40 [ 676.834562] ? unwind_get_return_address+0x61/0xa0 [ 676.839525] should_fail.cold.4+0xa/0x17 [ 676.843607] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 676.848727] ? save_stack+0xa9/0xd0 [ 676.852373] ? kasan_kmalloc+0xc7/0xe0 [ 676.856278] ? kasan_slab_alloc+0x12/0x20 [ 676.860433] ? kmem_cache_alloc+0x12e/0x730 [ 676.864765] ? mmu_topup_memory_caches+0xfb/0x470 [ 676.869618] ? kvm_mmu_load+0x21/0x1290 [ 676.873595] ? kvm_arch_vcpu_ioctl_run+0x2889/0x7320 [ 676.878709] ? zap_class+0x640/0x640 [ 676.882446] ? __x64_sys_ioctl+0x73/0xb0 [ 676.886511] ? do_syscall_64+0x1b9/0x820 [ 676.890576] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 676.895956] ? find_held_lock+0x36/0x1c0 [ 676.900033] ? __lock_is_held+0xb5/0x140 [ 676.904127] ? perf_trace_sched_process_exec+0x860/0x860 [ 676.909600] __should_failslab+0x124/0x180 [ 676.913855] should_failslab+0x9/0x14 [ 676.917701] kmem_cache_alloc+0x2be/0x730 [ 676.921867] ? lock_acquire+0x1ed/0x520 [ 676.925849] ? kvm_arch_vcpu_ioctl_run+0x30f/0x7320 [ 676.930874] ? mmu_topup_memory_caches+0xfb/0x470 [ 676.935742] mmu_topup_memory_caches+0xfb/0x470 [ 676.940418] ? kvm_inject_realmode_interrupt+0x260/0x260 [ 676.946048] kvm_mmu_load+0x21/0x1290 [ 676.949860] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 676.955414] ? vmx_clear_hlt.isra.39+0xa5/0xd0 [ 676.960011] kvm_arch_vcpu_ioctl_run+0x2889/0x7320 [ 676.964952] ? kvm_vcpu_ioctl+0x1e5/0x1150 [ 676.969214] ? kvm_arch_vcpu_runnable+0x710/0x710 [ 676.974066] ? zap_class+0x640/0x640 [ 676.977789] ? __lock_acquire+0x62f/0x4c20 [ 676.982033] ? lock_downgrade+0x900/0x900 [ 676.986184] ? check_preemption_disabled+0x48/0x280 [ 676.991223] ? find_held_lock+0x36/0x1c0 [ 676.995324] ? get_task_pid+0x1ea/0x3b0 [ 676.999300] ? lock_downgrade+0x900/0x900 [ 677.003447] ? check_preemption_disabled+0x48/0x280 [ 677.008503] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 677.013446] ? kasan_check_read+0x11/0x20 [ 677.017597] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 677.022880] ? rcu_softirq_qs+0x20/0x20 [ 677.026877] ? get_task_pid+0x211/0x3b0 [ 677.030858] ? find_get_pid+0x270/0x270 [ 677.034836] ? zap_class+0x640/0x640 [ 677.038557] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 677.044443] kvm_vcpu_ioctl+0x5c8/0x1150 [ 677.048513] ? kvm_vcpu_ioctl+0x5c8/0x1150 [ 677.052767] ? kvm_uevent_notify_change.part.32+0x450/0x450 [ 677.058492] ? find_held_lock+0x36/0x1c0 [ 677.062571] ? __fget+0x4aa/0x740 [ 677.066033] ? check_preemption_disabled+0x48/0x280 [ 677.071060] ? kasan_check_read+0x11/0x20 [ 677.075222] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 677.080517] ? rcu_softirq_qs+0x20/0x20 [ 677.084512] ? __fget+0x4d1/0x740 [ 677.087982] ? ksys_dup3+0x680/0x680 [ 677.091713] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 677.096657] ? kvm_uevent_notify_change.part.32+0x450/0x450 [ 677.102394] do_vfs_ioctl+0x1de/0x1790 [ 677.106286] ? __lock_is_held+0xb5/0x140 [ 677.110370] ? ioctl_preallocate+0x300/0x300 [ 677.114788] ? __fget_light+0x2e9/0x430 [ 677.118773] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 677.124320] ? smack_file_ioctl+0x210/0x3c0 [ 677.128643] ? fget_raw+0x20/0x20 [ 677.132104] ? smack_file_lock+0x2e0/0x2e0 [ 677.136368] ? __sb_end_write+0xd9/0x110 [ 677.140463] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 677.146006] ? fput+0x130/0x1a0 [ 677.149296] ? do_syscall_64+0x9a/0x820 [ 677.153276] ? do_syscall_64+0x9a/0x820 [ 677.157315] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 677.162863] ? security_file_ioctl+0x94/0xc0 [ 677.167298] ksys_ioctl+0xa9/0xd0 [ 677.170767] __x64_sys_ioctl+0x73/0xb0 [ 677.174665] do_syscall_64+0x1b9/0x820 [ 677.178555] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 677.183943] ? syscall_return_slowpath+0x5e0/0x5e0 [ 677.188874] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 677.193724] ? trace_hardirqs_on_caller+0x310/0x310 [ 677.198757] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 677.203787] ? prepare_exit_to_usermode+0x291/0x3b0 [ 677.208831] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 677.213685] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 677.218876] RIP: 0033:0x457569 [ 677.222081] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 677.241015] RSP: 002b:00007f8018763c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 09:02:33 executing program 4: r0 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x80000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) ioctl$RTC_EPOCH_READ(r0, 0xc0287c02, &(0x7f0000000040)) 09:02:33 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") unshare(0x20000400) getsockopt$sock_buf(r0, 0x1, 0x1a, 0x0, &(0x7f0000000380)) [ 677.248726] RAX: ffffffffffffffda RBX: 00007f8018763c90 RCX: 0000000000457569 [ 677.256001] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 677.263271] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 677.270543] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f80187646d4 [ 677.277809] R13: 00000000004c034e R14: 00000000004d0d60 R15: 0000000000000007 09:02:33 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fe3496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:02:33 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) syz_open_dev$vivid(&(0x7f0000000280)='/dev/video#\x00', 0x0, 0x2) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e22, @broadcast}}, 0x3, 0x6, 0x5, 0x2, 0x8}, &(0x7f0000000180)=0x98) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000340)=0x5, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000001c0)={r2, 0x2, 0x8}, &(0x7f0000000200)=0x76) unshare(0x0) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x2001, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000040)={0x72e8, 0x3, 0xfffffffffffffbaf, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x8, 0x6, 0x729}) getsockopt$sock_buf(r0, 0x1, 0x1a, 0x0, &(0x7f0000000380)) getsockopt$inet_dccp_buf(r3, 0x21, 0xfffffffffffffffe, &(0x7f0000000500)=""/199, &(0x7f00000002c0)=0xc7) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) write$UHID_CREATE(r3, &(0x7f00000003c0)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000240)=""/13, 0xd, 0x6, 0x1, 0x0, 0x80000001, 0x1}, 0x120) 09:02:33 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20000000001b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x10000000, 0x0, 0x8, 0x0, 0x7}) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x400000, 0x0) 09:02:33 executing program 5 (fault-call:8 fault-nth:5): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000000)={'teql0\x00', {0x2, 0x0, @dev}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:02:33 executing program 4: r0 = socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000140)=0x81, 0x4) r1 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x80000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_READ(r1, 0xc0287c02, &(0x7f0000000040)) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000180)=0x5) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000001c0)={{0x3, 0x3, 0x9, 0x3, 0x400000000}}) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000000)='trusted.overlay.redirect\x00', &(0x7f0000000100)='./file0\x00', 0x8, 0x3) 09:02:33 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0xe7a88510]}, 0x10) 09:02:33 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fd7496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:02:33 executing program 3: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x100, 0x0) write$FUSE_BMAP(r0, &(0x7f0000000040)={0x18, 0x0, 0x6, {0x86ae}}, 0x18) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x3, 0x6) ioctl(r2, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") unshare(0x0) getsockopt$sock_buf(r1, 0x1, 0x1a, 0x0, &(0x7f0000000380)) 09:02:33 executing program 4: r0 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x80000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f0000000100)=0xc) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000180)={r1}, 0x8) ioctl$RTC_EPOCH_READ(r0, 0xc0287c02, &(0x7f0000000040)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000001c0)) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000140)=0x2) 09:02:33 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20000000001b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x10000000, 0x0, 0x8, 0x0, 0x7}) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x3b9ac9ff, 0x0) [ 677.625663] FAULT_INJECTION: forcing a failure. [ 677.625663] name failslab, interval 1, probability 0, space 0, times 0 [ 677.670350] CPU: 0 PID: 30889 Comm: syz-executor5 Not tainted 4.20.0-rc4+ #138 [ 677.677725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 677.687083] Call Trace: [ 677.689685] dump_stack+0x244/0x39d [ 677.693332] ? dump_stack_print_info.cold.1+0x20/0x20 [ 677.698548] should_fail.cold.4+0xa/0x17 [ 677.702629] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 677.707751] ? save_stack+0xa9/0xd0 [ 677.711408] ? kasan_kmalloc+0xc7/0xe0 [ 677.715305] ? kasan_slab_alloc+0x12/0x20 [ 677.719467] ? kmem_cache_alloc+0x12e/0x730 [ 677.723804] ? mmu_topup_memory_caches+0xfb/0x470 [ 677.728668] ? kvm_mmu_load+0x21/0x1290 [ 677.732682] ? kvm_arch_vcpu_ioctl_run+0x2889/0x7320 [ 677.737817] ? zap_class+0x640/0x640 [ 677.741549] ? __x64_sys_ioctl+0x73/0xb0 [ 677.745640] ? do_syscall_64+0x1b9/0x820 [ 677.749721] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 677.755105] ? find_held_lock+0x36/0x1c0 [ 677.759176] ? __lock_is_held+0xb5/0x140 [ 677.763319] ? perf_trace_sched_process_exec+0x860/0x860 09:02:34 executing program 4: perf_event_open(&(0x7f0000000040)={0x80000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x4000, 0x0) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f00000001c0)=""/43) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000040)) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x2, 0x7, 0x4}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140)={r1, 0x6}, &(0x7f0000000180)=0x8) connect$vsock_dgram(r0, &(0x7f0000000240)={0x28, 0x0, 0x2710, @hyper}, 0x10) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000000200)={0xbb, @remote, 0x4e23, 0x4, 'lblcr\x00', 0x1e, 0xffffffff, 0x42}, 0x2c) 09:02:34 executing program 4: r0 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x80000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$RTC_WIE_ON(r0, 0x700f) ioctl$RTC_EPOCH_READ(r0, 0xc0287c02, &(0x7f0000000040)) 09:02:34 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5f21496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) [ 677.768783] __should_failslab+0x124/0x180 [ 677.773029] should_failslab+0x9/0x14 [ 677.776848] kmem_cache_alloc+0x2be/0x730 [ 677.781007] ? lock_acquire+0x1ed/0x520 [ 677.785006] ? kvm_arch_vcpu_ioctl_run+0x30f/0x7320 [ 677.790039] ? mmu_topup_memory_caches+0xfb/0x470 [ 677.794902] mmu_topup_memory_caches+0xfb/0x470 [ 677.799582] ? kvm_inject_realmode_interrupt+0x260/0x260 [ 677.805051] kvm_mmu_load+0x21/0x1290 [ 677.808864] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 677.814419] ? vmx_clear_hlt.isra.39+0xa5/0xd0 [ 677.819018] kvm_arch_vcpu_ioctl_run+0x2889/0x7320 [ 677.823968] ? perf_trace_lock_acquire+0x15b/0x800 [ 677.828922] ? kvm_arch_vcpu_runnable+0x710/0x710 [ 677.828939] ? zap_class+0x640/0x640 [ 677.828956] ? __lock_acquire+0x62f/0x4c20 [ 677.828978] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 677.847307] ? find_held_lock+0x36/0x1c0 [ 677.851391] ? get_task_pid+0x1ea/0x3b0 [ 677.855377] ? lock_downgrade+0x900/0x900 [ 677.859537] ? check_preemption_disabled+0x48/0x280 [ 677.859559] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 677.859575] ? kasan_check_read+0x11/0x20 [ 677.859590] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 677.859606] ? rcu_softirq_qs+0x20/0x20 [ 677.859639] ? get_task_pid+0x211/0x3b0 [ 677.878973] ? find_get_pid+0x270/0x270 [ 677.878988] ? zap_class+0x640/0x640 [ 677.879007] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 677.879033] kvm_vcpu_ioctl+0x5c8/0x1150 [ 677.879049] ? kvm_vcpu_ioctl+0x5c8/0x1150 [ 677.879073] ? kvm_uevent_notify_change.part.32+0x450/0x450 [ 677.887019] ? find_held_lock+0x36/0x1c0 [ 677.887045] ? __fget+0x4aa/0x740 [ 677.887067] ? check_preemption_disabled+0x48/0x280 [ 677.887089] ? kasan_check_read+0x11/0x20 [ 677.887104] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 677.887126] ? rcu_softirq_qs+0x20/0x20 [ 677.894806] ? __fget+0x4d1/0x740 [ 677.894830] ? ksys_dup3+0x680/0x680 [ 677.894859] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 677.894885] ? kvm_uevent_notify_change.part.32+0x450/0x450 [ 677.894910] do_vfs_ioctl+0x1de/0x1790 [ 677.904486] ? __lock_is_held+0xb5/0x140 [ 677.904507] ? ioctl_preallocate+0x300/0x300 [ 677.904524] ? __fget_light+0x2e9/0x430 [ 677.904542] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 677.904561] ? smack_file_ioctl+0x210/0x3c0 [ 677.904574] ? fget_raw+0x20/0x20 [ 677.904590] ? smack_file_lock+0x2e0/0x2e0 [ 677.904611] ? __sb_end_write+0xd9/0x110 [ 677.996487] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 678.002035] ? fput+0x130/0x1a0 [ 678.005330] ? do_syscall_64+0x9a/0x820 [ 678.009332] ? do_syscall_64+0x9a/0x820 [ 678.013344] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 678.018940] ? security_file_ioctl+0x94/0xc0 [ 678.023367] ksys_ioctl+0xa9/0xd0 [ 678.026835] __x64_sys_ioctl+0x73/0xb0 [ 678.030784] do_syscall_64+0x1b9/0x820 [ 678.034682] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 678.040058] ? syscall_return_slowpath+0x5e0/0x5e0 [ 678.044994] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 678.049844] ? trace_hardirqs_on_caller+0x310/0x310 [ 678.054881] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 678.059910] ? prepare_exit_to_usermode+0x291/0x3b0 [ 678.064965] ? trace_hardirqs_off_thunk+0x1a/0x1c 09:02:34 executing program 3: socket$inet6(0xa, 0x2, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") unshare(0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vsock\x00', 0x40, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0xfffffffffffffe0f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, 0x0, 0x8000000000000, r1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000d08ff7)='/dev/sg#\x00', 0x0, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(r2, 0x4040ae75, &(0x7f0000000180)={0x5, 0x40, 0x122, 0x100}) r4 = syz_open_dev$vcsa(&(0x7f0000000380)='/dev/vcsa#\x00', 0x0, 0x0) sendmsg$alg(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="98000000000000001701000002feffff7f00000004fb2d8bdf65a70a810f0b43ca07ae036a2a8a3c3ae42cb6c791e5558127993c599b36f93edbe1001000000000000029375c6dcd29c5c763af4a262c0006000000000000ded8dd344890aece8e1245d0988ddba27af582d260002a524a0673cae4263e65d51b4f5087ac434e948da37d04752415fca618c82c1ac2172b8748478765b51d80bc59fb150320e405875b000000004fd79bc9d8d71acaaf2ab671050ee4e4d2166a8580fe861c5589306bdb2c4f65f73ad281181b051bdeae14ed2b5b96597a2707520fe8becbb1caf438cd2b348d877ddf40e42bc43c18b74c0c70aa37c42b37684a711e783c468fe1be356d9ed74ab1aa87a663a5c0db02bddafe2ff678d80e5693da0a2336507619b7751b180f69eb713eb12c791ae27b1f827795f851edfa54a10a93b87197a7b5d8364fefdeaa57b5f892d1a9e2e789cdeb31c3513d7a0ed8331ad791b43514532211b6502969dfb881ecd185f26e39d218d5c5f34246e2e0c9deb9756673b5a2349903"], 0x185}, 0x4000010) r5 = gettid() getgid() timer_create(0x6, &(0x7f0000000200)={0x0, 0x12, 0x40000000000, @thr={&(0x7f0000000300)="94c48285f1f48609eba6e32269a74cddd0010a6524c0702a29f02e3e571010bf3254098a59d57c8b50cba26aed7808c360fd2452886c3938e4fcf10c7905947534154d0f4fcfa603d732739c27ecba2ed593002c0ba51f453af5d69ad507cabdb5b53938c33ec2a4e2e192d6853cbd85fb1d477d5381d8a98e4561eb", &(0x7f0000000440)="b3e33e23f43965bbe5d6ac0ad495f1fb37cddd3db85693f67c392bc22bceb2ca0a37e4a7c0dc467022bc3f7b6535f612ed53b07ce9e54c4f7a5251194273486bc59208f86ae9fd6ff6e35f67f7246e40d2c976"}}, &(0x7f0000044000)=0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, &(0x7f0000000000)) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000080)=r5) sendmsg$alg(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000001900)="591dfdef4e36437bcc2fe7624547b950b975cc0c815d26aef4f008c6923c210f560546d90815f7caaf08226f44c7de94fcae5051073d0cc8e3150754f5b68720861bd8cc72551ce6bf973bab472df4a4b9a15c1e2d78f104680e9edd3354a8c114e77587a3b3aa6f15e24b6ae54f757c6a8826cd78efb859ee617907f9de5f5e7284d0", 0x83}], 0x1, 0x0, 0x0, 0x4000}, 0x40000) tkill(r5, 0x1004000000016) fgetxattr(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="737973ffffff7f000000007972696e67007ce77cd3dcec7ecec5bf43812f8957f1628a41e20e75764ea830"], 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r1, 0x4080aebf, &(0x7f0000001a00)={0x1, 0x0, 0x2080, {0x0, 0x10002, 0x3}, [], "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", "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"}) close(r1) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) dup3(0xffffffffffffffff, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) timer_delete(r6) fsetxattr$trusted_overlay_redirect(r3, &(0x7f0000000000)='trusted.overlay.redirect\x00', &(0x7f0000000280)='./file0\x00', 0x398, 0x0) 09:02:34 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20000000001b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x10000000, 0x0, 0x8, 0x0, 0x7}) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0xfffffffe, 0x0) [ 678.069863] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 678.070362] Unknown ioctl 44545 [ 678.075056] RIP: 0033:0x457569 [ 678.075073] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 678.075082] RSP: 002b:00007f8018763c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 678.075098] RAX: ffffffffffffffda RBX: 00007f8018763c90 RCX: 0000000000457569 [ 678.075108] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 678.075117] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 678.075126] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f80187646d4 [ 678.075141] R13: 00000000004c034e R14: 00000000004d0d60 R15: 0000000000000007 09:02:34 executing program 5 (fault-call:8 fault-nth:6): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000000)={'teql0\x00', {0x2, 0x0, @dev}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:02:34 executing program 4: r0 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x80000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_READ(r0, 0xc0287c02, &(0x7f0000000040)) sendto$inet(r0, &(0x7f0000000200)="53afe82dc2e773c34fea2748a1fe41e1ec95b4994bdec0993ed3794a18b397ac8ac8bb695b4f1e6f435fa0e2d890e1e0e9f35baaadcdc145bc93242a0694407be05b21fa50aba2a5e7ef056000022addd64d8525381208183cfb0ee3261446e24ddebac96c5d9151e552", 0x6a, 0x0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) ioctl$RTC_EPOCH_READ(r0, 0x8008700d, &(0x7f0000000000)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={0x0, r1, 0x0, 0xc, &(0x7f0000000440)='/dev/media#\x00'}, 0x30) fstat(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$security_evm(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='security.evm\x00', &(0x7f0000000840)=@v1={0x2, "2861f88803a3ecd105"}, 0xa, 0x1) r4 = getgid() r5 = getpid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000540)={0x0, 0x0}, &(0x7f0000000580)=0xc) stat(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(r0, &(0x7f00000006c0)={&(0x7f00000002c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000340)="831fe2aa0110ebb236a140036a4984e7c77f28182c0be91c7d67deeba0ca6ba741340efbac3303c0b743833c488315ca95", 0x31}, {&(0x7f0000000380)="8d550f9b073ea734d78eace1a43495b8f234657ed1c2020c99796107ecdcecdfcdb003d5a936c07efc7142b8ce07a3563fd82d1bb9c0926ad09d1556afe2abd726e5a20b9212c9f6925a3e1477a0f2342ef4f6c7a1927b1975dc09758adbe7ea52", 0x61}], 0x2, &(0x7f0000000680)=[@cred={0x20, 0x1, 0x2, r2, r3, r4}, @cred={0x20, 0x1, 0x2, r5, r6, r7}], 0x40, 0x84}, 0x4) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f0000000100)=""/198) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000740)={0x3, {0x2, 0x4e21, @multicast2}, {0x2, 0x4e23, @multicast1}, {0x2, 0x4e23, @remote}, 0xe, 0x6, 0x4, 0x7, 0x2, &(0x7f0000000700)='ipddp0\x00', 0x8, 0x2, 0xffffffff}) 09:02:34 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5f34496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:02:34 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20000000001b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x10000000, 0x0, 0x8, 0x0, 0x7}) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x730000, 0x0) 09:02:34 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000]}, 0x10) 09:02:34 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5f71496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:02:34 executing program 4: r0 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r0, 0x40045731, &(0x7f0000000200)=0x9) r1 = perf_event_open(&(0x7f0000000040)={0x80000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_S_AUDIO(r0, 0x40345622, &(0x7f00000001c0)={0x7, "a8b1ed1955b0274b5a7a7419424de9e48dbded52064f81ba4dddd4732df8602c", 0x2, 0x1}) ioctl$RTC_EPOCH_READ(r0, 0x8008700d, &(0x7f0000000100)) ioctl$RTC_EPOCH_READ(r0, 0xc0287c02, &(0x7f0000000000)) fsetxattr$security_ima(r1, &(0x7f0000000140)='security.ima\x00', &(0x7f0000000180)=@md5={0x1, "11c08808750f1623e035f596f16d8a9d"}, 0x11, 0x3) 09:02:34 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20000000001b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x10000000, 0x0, 0x8, 0x0, 0x7}) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0xffffffffff600000, 0x0) [ 678.328874] FAULT_INJECTION: forcing a failure. [ 678.328874] name failslab, interval 1, probability 0, space 0, times 0 [ 678.355155] CPU: 0 PID: 30949 Comm: syz-executor5 Not tainted 4.20.0-rc4+ #138 [ 678.362586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 678.371954] Call Trace: [ 678.374558] dump_stack+0x244/0x39d 09:02:34 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5f28496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:02:34 executing program 4: r0 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x80000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VT_WAITACTIVE(r0, 0x5607) ioctl$RTC_EPOCH_READ(r0, 0xc0287c02, &(0x7f0000000040)) [ 678.378202] ? dump_stack_print_info.cold.1+0x20/0x20 [ 678.383407] ? debug_smp_processor_id+0x1c/0x20 [ 678.388093] ? perf_trace_lock+0x14d/0x7a0 [ 678.392349] should_fail.cold.4+0xa/0x17 [ 678.396428] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 678.401551] ? save_stack+0xa9/0xd0 [ 678.405194] ? kasan_kmalloc+0xc7/0xe0 [ 678.409085] ? kasan_slab_alloc+0x12/0x20 [ 678.413281] ? kmem_cache_alloc+0x12e/0x730 [ 678.417615] ? mmu_topup_memory_caches+0xfb/0x470 [ 678.422472] ? kvm_mmu_load+0x21/0x1290 [ 678.426455] ? kvm_arch_vcpu_ioctl_run+0x2889/0x7320 [ 678.431573] ? zap_class+0x640/0x640 [ 678.435354] ? __x64_sys_ioctl+0x73/0xb0 [ 678.439438] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 678.444826] ? find_held_lock+0x36/0x1c0 [ 678.448903] ? __lock_is_held+0xb5/0x140 [ 678.452992] ? perf_trace_sched_process_exec+0x860/0x860 [ 678.458484] __should_failslab+0x124/0x180 [ 678.462740] should_failslab+0x9/0x14 [ 678.466527] kmem_cache_alloc+0x2be/0x730 [ 678.470665] ? lock_acquire+0x1ed/0x520 [ 678.474627] ? kvm_arch_vcpu_ioctl_run+0x30f/0x7320 [ 678.479638] ? mmu_topup_memory_caches+0xfb/0x470 [ 678.484466] mmu_topup_memory_caches+0xfb/0x470 [ 678.489130] ? kvm_inject_realmode_interrupt+0x260/0x260 [ 678.494583] kvm_mmu_load+0x21/0x1290 [ 678.498374] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 678.503897] ? vmx_clear_hlt.isra.39+0xa5/0xd0 [ 678.508466] kvm_arch_vcpu_ioctl_run+0x2889/0x7320 [ 678.513394] ? perf_trace_lock+0x14d/0x7a0 [ 678.517635] ? kvm_vcpu_ioctl+0x1e5/0x1150 [ 678.521869] ? kvm_arch_vcpu_runnable+0x710/0x710 [ 678.526697] ? zap_class+0x640/0x640 [ 678.530408] ? __lock_acquire+0x62f/0x4c20 [ 678.534639] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 678.540168] ? find_held_lock+0x36/0x1c0 [ 678.544222] ? get_task_pid+0x1ea/0x3b0 [ 678.548192] ? lock_downgrade+0x900/0x900 [ 678.552330] ? check_preemption_disabled+0x48/0x280 [ 678.557333] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 678.562273] ? kasan_check_read+0x11/0x20 [ 678.566421] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 678.571684] ? rcu_softirq_qs+0x20/0x20 [ 678.575648] ? get_task_pid+0x211/0x3b0 [ 678.579604] ? find_get_pid+0x270/0x270 [ 678.583593] ? debug_smp_processor_id+0x1c/0x20 [ 678.588265] kvm_vcpu_ioctl+0x5c8/0x1150 [ 678.592314] ? kvm_vcpu_ioctl+0x5c8/0x1150 [ 678.596553] ? kvm_uevent_notify_change.part.32+0x450/0x450 [ 678.602284] ? find_held_lock+0x36/0x1c0 [ 678.606334] ? __fget+0x4aa/0x740 [ 678.609776] ? check_preemption_disabled+0x48/0x280 [ 678.614794] ? kasan_check_read+0x11/0x20 [ 678.618937] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 678.624197] ? rcu_softirq_qs+0x20/0x20 [ 678.628166] ? __fget+0x4d1/0x740 [ 678.631611] ? ksys_dup3+0x680/0x680 [ 678.635318] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 678.640235] ? kvm_uevent_notify_change.part.32+0x450/0x450 [ 678.645958] do_vfs_ioctl+0x1de/0x1790 [ 678.649832] ? ioctl_preallocate+0x300/0x300 [ 678.654250] ? __fget_light+0x2e9/0x430 [ 678.658262] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 678.663807] ? smack_file_ioctl+0x210/0x3c0 [ 678.668119] ? fget_raw+0x20/0x20 [ 678.671600] ? smack_file_lock+0x2e0/0x2e0 [ 678.675848] ? __sb_end_write+0xd9/0x110 [ 678.679894] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 678.685421] ? fput+0x130/0x1a0 [ 678.688701] ? do_syscall_64+0x9a/0x820 [ 678.692673] ? do_syscall_64+0x9a/0x820 [ 678.696634] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 678.702166] ? security_file_ioctl+0x94/0xc0 [ 678.706561] ksys_ioctl+0xa9/0xd0 [ 678.710002] __x64_sys_ioctl+0x73/0xb0 [ 678.713906] do_syscall_64+0x1b9/0x820 [ 678.717793] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 678.723143] ? syscall_return_slowpath+0x5e0/0x5e0 [ 678.728057] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 678.732891] ? trace_hardirqs_on_caller+0x310/0x310 [ 678.737894] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 678.742895] ? prepare_exit_to_usermode+0x291/0x3b0 [ 678.747900] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 678.752743] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 678.757917] RIP: 0033:0x457569 [ 678.761096] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 678.779988] RSP: 002b:00007f8018763c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 678.787695] RAX: ffffffffffffffda RBX: 00007f8018763c90 RCX: 0000000000457569 [ 678.794947] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 678.802198] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 678.809449] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f80187646d4 [ 678.816705] R13: 00000000004c034e R14: 00000000004d0d60 R15: 0000000000000007 09:02:37 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20000000001b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x10000000, 0x0, 0x8, 0x0, 0x7}) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x70700000000000, 0x0) 09:02:37 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5f33496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:02:37 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000]}, 0x10) 09:02:37 executing program 4: r0 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x80000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_READ(r0, 0xc0287c02, &(0x7f0000000040)) ioctl$sock_proto_private(r0, 0x89e7, &(0x7f0000000100)="62a91e2449919107ce70a572be12389dc38ea1513b3be2865b5baa678e21197331801a45a0397e0385f2a02b7e7c48b534b2634a9384e44886f0532e30d50f251404cf5a49b962ad86d5565fd4c8e165546ce1a4800acabca64f31a4c58ba56a8bee359239a1dca5a334d3222cbbe196973d7fafeca76dfaf915098d08af58baccd26ee38273c3cd04d117c24ba0ca7830e31595323f358d129422eec39e95c3ca7662ad0c1094301a195e56aa1e3dcf801f") 09:02:37 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000080)={r1, 0x4000}, &(0x7f00000000c0)=0x8) r2 = socket$inet6(0xa, 0x3, 0x6) ioctl(r2, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") unshare(0x0) getsockopt$sock_buf(r0, 0x1, 0x1a, 0x0, &(0x7f0000000380)) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x40, 0x0) getsockopt$packet_buf(r3, 0x107, 0x17, &(0x7f0000000180)=""/70, &(0x7f0000000200)=0x46) 09:02:37 executing program 5 (fault-call:8 fault-nth:7): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000000)={'teql0\x00', {0x2, 0x0, @dev}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:02:37 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20000000001b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x10000000, 0x0, 0x8, 0x0, 0x7}) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x9300, 0x0) 09:02:37 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x80000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000140)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000200)={{0x7, 0x0, 0xfffffffffffffffe, 0xffffffffffffff01, '\x00', 0x9}, 0x3, 0x713, 0x5ef5, r2, 0x6, 0x6, 'syz1\x00', &(0x7f0000000180)=['wlan1[--#systemmd5sumselinux}selfwlan0\\,.(\x00', '\x00', "47504c766d6e657430706f7369785f61636c5f616363657373c476626f786e65743100", '/dev/media#\x00', '\\GPLselinuxeth1\x00', '\x00'], 0x6c, [], [0x2, 0x100000001, 0xfffffffffffffff7, 0x2d3766ec]}) ioctl$RTC_EPOCH_READ(r0, 0xc0287c02, &(0x7f0000000040)) fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f00000000c0)) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000000)) 09:02:37 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x8000) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x40, 0x0) ioctl$RTC_UIE_OFF(r1, 0x7004) r2 = socket$inet6(0xa, 0x3, 0x6) ioctl(r2, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") unshare(0x0) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000300)=0x4, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score\x00') sendmsg(r1, &(0x7f00000002c0)={&(0x7f0000000180)=@ethernet={0x307, @broadcast}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000200)="f07c1876eb4f1c3e5f8a2a1e784895f765cbba7b97cef0db70f7e789a23227fe1301cde8fc816403ccf42caf71305dd4ecfb0b79a29c5dc89a898c42da80e8e0c1af82e7fa0ca2a003614b08b19f4249a4108f4068f72985ee15427099f754a4d8b90356b085444dd89d52db7877b2071883c57227c251786696b77887d14b4f269dd154376dfc90", 0x88}, {&(0x7f00000003c0)="f6eb0d7f8ea685ac002b14e99e114c6c806a2197321e7d2693e45f2e96974af15256b1a9a641b1f213a39c94388d6b979ceac81e022b3c7e3aa17204253a783c3bd0d302b8eb77256159f11be7b1bd1ad7e0ba50b70c125b53e51627024e46c21def9eb4c9ec6b34253d7a7f81f85fd3ce544e3eac15a5c74bdabeb8a63e89d63207435afc5bb9f38c89bfaad129fbe99443a38dc1db99125f1b137d2d866ab9033c1c6326c64107fce866a7615433bcc814f53abeef04b0380cb69c18f20d4e5c9d10ea316176a1ed087f44de8b838e5cb2ab0c33e9d751365c906834e10179d88071df1c6801b000044636fe1cdc7ad3fbf3a1d8bc39c7666648ae57aa17157dd2f516670d8b12ec0252687135c5f6a991e9d4bf1cdc887f6940d8d5ef53a70cc4fe3b1ee16aa35202b5ac7b1dd0587b8b5506cc6e8f872cf8e2ca46f314e5efe3a57987bd32649d678b109467bec723cea34bb2d1ea752ea5d8bd2d5e5b8e6667491b192866bef743b9098e110dc6ed8ad95b6a9eb8927d389d5e5cd4345e6d6d03c697ec2b52ffea44135a366e841443c4f704457f5a8e147af42fc03eb1d5332fa6683786bd4c3fad3e07b129f422c1f31c7caa70959c301be4b4e3094597bf56454d7c437485f343fe428fbd1d6d485a99daae79ec8d3c24bea468b5a207a448a371ffa453e9044c6cd92bc88b1c0ba770f31e35eaad82694a03f3488ceb0358c88dd4c7b36a02c31149e13659f0febbd6d71690730df8a4f36bd381cea849d43279d0ab1cf17793c6c6eb31c4400318a214d8e5c054d74703851970abd1f23e5d1f503401aeef495b30ddaa8c6dc02ff4a0248f879c0b631bb1fbdab4b3314d31f1377eeaa1438f77ce79cbdcf888ff7b39964efaa357714fa1d902601c9e347f9c1c90cc361acdd5ecc76cd048368b05f2d36b66f372ee6a4dd372aa54e8457de27b6be0b3803061a5eddb15918f83e6b27a93d9a36366b08d4d7447e4c175bd09e7df95d217b09cdd13b6d89ae6fd025af3438f4f44ace93dcb65ef25b0a256f494a106764ce7f6e7a0514ae5ab310a7e0a12036efc827af343e4ccc7386ecd36342532d31329ca9e36b011a0e03d16b79184ffbf219edc04572f93f701e9ec374db87d7c8d3d827eef61dd805456071c5122e27882dfc7a7c8640a44b2e3350a1589e5c59a0d451f619343a7c594161959189a67f79da10548f3285f62d696012c367b89ee73d55177f284469d050d4ecdc0fe54e21b65662221d7a0f7c31e5da43aa0fc5804ed6d71327eeb72a500ee2ba4bdc418e414c800ac5bb4eeb012c3253708cd7e8283d10b9b9578f834f74fcdf199868c3d5dbf017b427cdbab9d0f18398a1d5d6df5c29b1362d1bd1ce05cc17a5cce6f750c71117223459ead94ef8545437a9457071fac507933eaa8a79c73ee2f1bf04016b72551267d15519a4205c85f421c3a8a2c1c37078dbb55ea78a7c9c263eef8deada87c47d1f6268b93fb060af3031fe16bc1759ddb519ac39bb13945b9a14be1ea33926982c9f8c706c0a40be6c5eeb8f270538015eb22d653400036672ee5113968ed7f47ff8d21eae10c829d2b08e7823ca1e3261a39adac929f44742ee1dfa9d2459bce1bcf7fddf9eab275e7a8e15098e662dab99ad7f642658e78435c8907dd1d04702acfc450222d52ac0d7415f1738d191be3e2503752acd313319a347eacc04fc7c62a262fceb892dd16030cd78ade74ca7c56e5345d13dde28fad0ecec5fb3000053cb9fcec8db0779b4562d3dde2bb59d1a49f685aec39b569fea5da9256a56278678b220754a2af4b51e603923ae3b601fb0314d5de6bc2a9ccc8d8a0641bc902795ed2573d9bd9138bd5f26380172dcef9807fd68b564e9fed5dadd0b19a4e7ea88f583cb8b092a19732813c7e7714b4d477d218c31307693fe1fcd73c1bb983b9580a7973d44a91f88347e97a8e60851645b36fe0cca33c070d3eb2cf99e40f0771fa650f1cd1b2b05fce0ab0c6f02422ecd000db623455ae50aab5a22b14bdeea4ed7f272a2986897bea9b21c4c90441e91d68bd944a49af7a5de49bec7cf179e47c6ece36c28607ecab713107ecccd378f4f0cc0c75f87b6a2ff8627e6b8e9ab48a6efe0f35e67c1a7f0143e7a2a6062be5a0a952c85cb00d62803896a90ae468c4a062bab838eccfb17528ce9e9670b75814a1da2feda911e77ed4b7be629e0a1c4e60fcc82f9e8f63ec0235d9e5e2d5204cb40b0b4f1ffce76487c6b6da63e906c51a05eba6a60d09fd4ae484f6254403476cd4a0d2b74e57d262fb8c654e167c9a78062f42f46cfe33dfc9d70f6d3200d43bd6c3426fa62cc4304b858611a940ba7ad3cfc31d72ceb34fabeb7fd3a22234aac9bd1d939b936073328fe9ec29ac740cc227230ea1c1fd36b717369441e5eeb68f590e97c3e4d81a68c456262cca2aeb5ac0523031b7ffc8c107b69e26761cb24364a465b0bff00dff22bc4cb172dea242f41ddacb02165a3d38056691f6f0fd7653926f84f89d05b411726b574d12f3565f3d71a180f09a537a8c5a1cbb717375eb536c6b7b72c4ef95c8bc9f8511a67ef132fa809bc5f39f341547d2682f2b428b753d6d545e1c033b169edfc2aefc2ba750b1f2dac91fe1985a7acb43f2fecf6fe94b819f5fa3ad5cec81474b57e91c1ff2b8bae192b519fc886863eb5b063aaffb0acc0c624fa8cc506d3f8a3d7015e94e18610aacdc5e1a7e069080cc10c973bc20ca43804e9d29930e2bdedbe43c6a554f15d711d887e66360be426f88132c67040a79fd19ef3bd18f9ebb58c200205292dfac5f677aedda9bd99cabf68e96c75f6fe48799acd10e27998b863884f5150334bb6fb6fd2445a81cb24d40d697a36e8481a4416efb27aa54101e1b27fcdd0d5a1f1961ceb9525b89c00aa73da00fb7cf861bdd1645f470d68a89a736fcf33f17ddac79b0bc6841b090511e1b766c9d2978fe445e2ecec9d241673f61280790bd6f9745bfa9414184806c00c587575e14721260c9eb7cc23e6ba6acb6085bb9fcf6c82e4143cda3d95bec321909c803a039b64a747b9a9384b14b57cf6a4e8b6db80e98298dae258d8c3e487b64084bffc5917392397d670c569ad2fb6f1ac929c88e64d2944ed811724baf850f21a4a7e83a0d64ec357adc59ba75b75620d3033e58c7f0ffa9048f73f62e85428ff8bea3ddabec00fe84dc94167fc551b33a2e223432842ba4b14ace364ff6a189b197952fa146e6106f5491be1068f9a5442f82b75c59a58f698f43c7ad743594a0f23339812625df7f26b3ab656790d0406fcf4edde4cde41ae7f33dcd0cda62a4fe08eaac9c6c081ab38f3293123950389f3fd33b7d649460bfc23edd93f3988c885a744c573115998e9674c26002f9f9de050c66db5545997db0df1c980974c6356ebbb7c309006d28eb026b234b03499f662c557e89c36dfbb4dd8ee245a8bcdfccd512d33f2c8de73b886aefcc16fa25c9e5730becb448abff546a41e5ba9b69886b3bc1be159624695c67cf78c8dc853a9e5409ed5598663860f525b360ece0658e0093406ce98ecce30b17d45af1026b803cc56b078f04a9a4dff282717e7dae70d25b183ad09025b372b94bf19e89a96eb788aa47cfb2c419d13cd0feb0be2c9ba7982a342d24e806c7cec6c8734c529bb46f00c1b91bd1a939fb2ef04025f668fbaff3f47da66d2cc1c222de97606dbfe8d0e21425cc00d0092bb5a7d5b944814236a40fe971dddd65da7001f3aba1bc4305aa8d9e59993db1626fbac980fae223abcfc61c23075815188c498ca4e1e86c742b4bb1fd7a091ee190e82dc29daa8b844d5295ae63f33fb7ead5652b771294bb1580b00e543b4ef2472a2b6d382aae5e88aff3b451ac0b729d9fb79231b6ac7f8e61eff1119b7570987c68163b8512cfa480da4ab28f2f60733ecea4eefeb78e4166fa75cd155f701f205ab794de127642d314e59e7ba04f0d4b9a460c124366aaf04b43dbd53982dbf09887c4b6d3a3bd2424286c3ad1275ca402ef16f48ba6412ec3a01b168b095ebe86172afd87b56d849e4d31506e8aaf691e635928ed2753a43e4cdcbd22634bd4752d8f0f05cfe05169b78a103802d1fad65770a1dae7c50e9f2c388b519b6e11f427e523e368e529b45104ffa54233af2a98ced8c7f08feaae0f60d465ef7b3047958e8e85d87d46fe402f0d1c5832c8886c95d927f019ad1157ed40863350765ec09fc369c6d0ae0f4782169b50eb400930799e0504a4212ca3936d4415e664d4264ee979b67ffb8adaf47cbfc174e11cce4391039b93127c8e2840727508301d9b7a00d2f6bacf4e35fd37042b871a45239c07e9ff2a8b7e133a08bd8609a9b523b247d4027b4015b49f42a4b14ab875d32518c0c0f9568b5c88625f84884884687d1787cb122abd8f84272e60644fc1f19766c2f2bcfd8947f21143f0fb2ee6cdd42b840561243464ff4f766e54ea5d1f9b4698af16af032ed15c4c090181b903f21739051bf3338732ff5a1863e15e46c29992e3299e4485fa3dfbd33273d42001ca87bae40d901b3b229688cd1291b554775e67eda212ff103839d2000881cceed80fccff021fef35521bf7344422007de3c813546e08a98434780a0bb5c004129c4ad4cac04434fba886d15e7308b60eba5da50230f804e4135e4faaa1a3ba79cf1551ee28c0df8267f75c4b6e5b95ad0ebce7776bdda2714c2a4c55b2877d4e4b6672ae1d3fd0bf457a5a25c13be6d95fc662646b32265015b33c2eb3cfb15838e86541d3a03decb8c2d3c257ed736635a5c9310ca08aa4e3984e80be0756cfa9dc05c5d0e227c29360513c9674f3e017912ef6ad670f3938d1525eed7221d56eea55d43bd87068a284a9ad0370cff77ebd7b34df944e9ebe08b8d6e9f888444a4e0068c7ec76d669c8ab3c51d72e48eef1db5f23596dd95e86e25c433f20c459463fb9575a9c10493b0acdd660f26ec8bfd4db9e2f577b86ee8a08296b0723604bad3c08c00ca82976acba354e8fdcd98dd9be78d0a50860980102a60896449493daeb00712812006b9118320e3993a1bf2eff0080ad20089a48d3a92ffb5816d58d9686b260b80d9d168d5ee3011c53500a93dbc0d23d045b61bef9e789d05315465eee4526a310d6271e4a8212435cd47b77bd62c87d5e2dcb03e0f26774382c60987f429ec2a90e1f68c6e2a45db9a8069044e41d3080196afaf2b9263ab41a0d6e0b610651deea1c0bd4c0983a962ee3ab5f9761d3c8270cf2316beee67f49d0a6f16f1875cc1f6c0898db90ee063d0bfef20fdf881a5ac4d9231fab59cdf453ff938859bc50cddacdba62da665c095defbd852bf85d523c8c86da5309a7cedbc70e266156d59e516c666f2ea1b644754c818eba4aa3fda91f8f564f5a649472e74f940cc79fe86613935b5c0ea2fb807dfeff81614bd36b9999fffc11a26ebe311eefb5003bffcf8cf5a9acde21292afc9e3037943118a8cb4e63f59e66281acbd80fbc7bc4d5b9d5c6aff5442df9187757f22a39026080c9c104fbe159adc2a3389de43075bb78395f759f763020a3cb7622b3eaedf664d2f04430efc42c5723d014a462abda3f2b35d8938501177e78a032b21b051b18cfda8619d022fc70b74c9d8419959cea64dfa4d1238c487bdc467c14fb0d1b9f2b0feeab39ca0c02dce01ad173e96b965a4e17ffc3eafbea0067a3c2918ea22bc83fdc384851b2de98c72eeece7c06ff40fd55d2d1c72302ba5b5dc4205f8e753b65eeb379f0b7ad", 0x1000}, {&(0x7f00000013c0)="6523124f3afaf6bd9e3e4c40f39641bc6d6b4e8245aa52b31fb655e2b5d8d89b0fca9c55a042f98c6dc5d177495d60756b3cefc608f8f8fdcd0d29cf6632bcabd8610addd2de19de3fcf2b40e7939b7e181d14c5d75fdd5df389d708e518e87f042aa59378b3d7fb989da188adc224e6beeccabd8f22695aceb54cbeb62a7ed7dac0870383c3b5f2608440cebf33e4a352a8bd0c983813bfa9e69b48756cbdc7d6c3f22c396352ecc975a59d732e19151be24760a0ca5647190a4fece1fb1fe43fbe0a2d84660db34c65e2d19d47c0fe4a518c536588137452b3ddf869f6626ef5a07caaad0089d816cf77345e3d302901b7f589f831abeb", 0xf8}], 0x3, &(0x7f00000014c0)=[{0xe0, 0x118, 0x8, "970e17f5dcbab6fbb59f4b1980807dd6285e19a2176c339f3f871e9a79bd382850ff0d2d1a7cc0b2d1725d03946c1dd9e2261d4c961593ad3e5884c2cc41da40326e67269e84519f1be8c176f57c5eb4fd62346938a4639e283728a846b8067ad96aba3a6b96855786e41869e050fe102c12b2d30d3a0b5fb9ccb2d9e7f9ec994a85cc1538efdf76ba555ab56b0cd930ced126ab90c7ad5a999843a11e167e77e15ee80803d6e0b3bfcc5fe800d82373f5fb674ece23236741accbfd45909ec09aff40f6be492af3b8581dd2"}, {0x10, 0x3a, 0x8}, {0xe0, 0x10f, 0x6e88000000000, "5b700a29148afabc947a8886a2a838cbe7ebabdbb4429653dfedd8d67d0fc899967410703e70e1acdff7a6fdc22ea7c6b9d796b91d8c6aeb14307675196502671d9fa62ae12c076063f18fdc45766b2f9e4b99a14cd210731d19df7cef1d5d3896689ab548e32bd0507c975d1b9f8e3bffdb55e0279a07cb99aef420d3a884e4573469f39613943a4b242c1edaf1c0783b305e7f27347da69e53269e2099dfb155bd1a411e15d6bff59142829a2362be46a97600331676eaab0ee8b0667abc0895ee35165bbf32db55d6bf"}, {0x60, 0x10f, 0x7, "6412a66b9b26cdf600eb6fabd02a659289ea104e2de303590fab0a07e11e362ff893562f3831b4660bc2e3df506dda10ad0d1e01c404925b0b8e969c40c72ed100d87c27f5f7cc7450174ed6"}, {0x108, 0x115, 0x1, "aa441fef875fb57a9293f5b0fc7a0e3045055a4927107864009894046f19be519d44ebc7cd42fad11401142081a8b20e637a68f215ed9f8ddc7cc2a203c79a6b4fc4cab84039f5028a920e88da23f8675e938c3ad5568af19f276f61a718ddf4f8c896373fdb2424de52036c534bbc8a4b31593857b1734aae8d621394525688c4707334352c8cf0ad41dc0e5ff017f263f969211e7502da2e6aedf5b0752ae80e4351e80ade5a30cc16dd5c14c5adb5c091fa2772183265aae4112db410b698aed9a0043bf6cf659cdc3f7a83d7a999b2af1992fe8b81c23679ec9a056d86fe095760f7d2703e78e9b07b2fc38b96e323ed9b"}], 0x338, 0x1}, 0x4040000) ioctl$VIDIOC_S_TUNER(r3, 0x4054561e, &(0x7f0000000040)={0x4, "1277aad04c906860c8715aac9cf0d4f2670fbf7f2b6ce9bcb6d4cb26491360e4", 0x0, 0x800, 0x37, 0x100000000, 0x0, 0x7, 0x80, 0x7ff}) getsockopt$sock_buf(r0, 0x1, 0x1a, 0x0, &(0x7f0000000380)) 09:02:37 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5f76496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) [ 681.314178] FAULT_INJECTION: forcing a failure. [ 681.314178] name failslab, interval 1, probability 0, space 0, times 0 09:02:37 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x34000000]}, 0x10) [ 681.389694] CPU: 1 PID: 30974 Comm: syz-executor5 Not tainted 4.20.0-rc4+ #138 [ 681.397091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 681.406497] Call Trace: [ 681.409109] dump_stack+0x244/0x39d [ 681.412779] ? dump_stack_print_info.cold.1+0x20/0x20 [ 681.417984] ? __kernel_text_address+0xd/0x40 [ 681.422488] ? unwind_get_return_address+0x61/0xa0 [ 681.427437] should_fail.cold.4+0xa/0x17 [ 681.431516] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 681.436635] ? save_stack+0xa9/0xd0 [ 681.440282] ? kasan_kmalloc+0xc7/0xe0 [ 681.444176] ? kasan_slab_alloc+0x12/0x20 [ 681.448331] ? kmem_cache_alloc+0x12e/0x730 [ 681.452678] ? mmu_topup_memory_caches+0xfb/0x470 [ 681.457529] ? kvm_mmu_load+0x21/0x1290 [ 681.461521] ? kvm_arch_vcpu_ioctl_run+0x2889/0x7320 [ 681.466649] ? zap_class+0x640/0x640 [ 681.470396] ? __x64_sys_ioctl+0x73/0xb0 [ 681.474461] ? do_syscall_64+0x1b9/0x820 [ 681.478544] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 681.483922] ? find_held_lock+0x36/0x1c0 [ 681.487996] ? __lock_is_held+0xb5/0x140 [ 681.492085] ? perf_trace_sched_process_exec+0x860/0x860 [ 681.497553] __should_failslab+0x124/0x180 [ 681.501795] should_failslab+0x9/0x14 [ 681.505597] kmem_cache_alloc+0x2be/0x730 [ 681.509748] ? lock_acquire+0x1ed/0x520 [ 681.513728] ? kvm_arch_vcpu_ioctl_run+0x30f/0x7320 [ 681.518766] ? mmu_topup_memory_caches+0xfb/0x470 [ 681.523621] mmu_topup_memory_caches+0xfb/0x470 [ 681.528311] ? kvm_inject_realmode_interrupt+0x260/0x260 [ 681.533779] kvm_mmu_load+0x21/0x1290 [ 681.537591] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 681.543155] ? vmx_clear_hlt.isra.39+0xa5/0xd0 [ 681.547744] kvm_arch_vcpu_ioctl_run+0x2889/0x7320 [ 681.552711] ? kvm_vcpu_ioctl+0x1e5/0x1150 [ 681.556976] ? kvm_arch_vcpu_runnable+0x710/0x710 [ 681.561823] ? zap_class+0x640/0x640 [ 681.565545] ? __lock_acquire+0x62f/0x4c20 [ 681.569792] ? lock_downgrade+0x900/0x900 [ 681.573951] ? check_preemption_disabled+0x48/0x280 [ 681.579021] ? find_held_lock+0x36/0x1c0 [ 681.583101] ? get_task_pid+0x1ea/0x3b0 [ 681.587083] ? lock_downgrade+0x900/0x900 [ 681.591236] ? check_preemption_disabled+0x48/0x280 [ 681.596278] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 681.601215] ? kasan_check_read+0x11/0x20 [ 681.605377] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 681.610663] ? rcu_softirq_qs+0x20/0x20 [ 681.614662] ? get_task_pid+0x211/0x3b0 [ 681.618641] ? find_get_pid+0x270/0x270 [ 681.622618] ? zap_class+0x640/0x640 [ 681.626340] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 681.631898] kvm_vcpu_ioctl+0x5c8/0x1150 [ 681.635968] ? kvm_vcpu_ioctl+0x5c8/0x1150 [ 681.640219] ? kvm_uevent_notify_change.part.32+0x450/0x450 [ 681.645981] ? find_held_lock+0x36/0x1c0 [ 681.650061] ? __fget+0x4aa/0x740 [ 681.653532] ? check_preemption_disabled+0x48/0x280 [ 681.658561] ? kasan_check_read+0x11/0x20 [ 681.662713] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 681.668107] ? rcu_softirq_qs+0x20/0x20 [ 681.672121] ? __fget+0x4d1/0x740 [ 681.675591] ? ksys_dup3+0x680/0x680 [ 681.679349] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 681.684297] ? kvm_uevent_notify_change.part.32+0x450/0x450 [ 681.690015] do_vfs_ioctl+0x1de/0x1790 [ 681.693910] ? __lock_is_held+0xb5/0x140 [ 681.697984] ? ioctl_preallocate+0x300/0x300 [ 681.702398] ? __fget_light+0x2e9/0x430 [ 681.706377] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 681.711926] ? smack_file_ioctl+0x210/0x3c0 [ 681.716254] ? fget_raw+0x20/0x20 [ 681.719716] ? smack_file_lock+0x2e0/0x2e0 [ 681.723962] ? __sb_end_write+0xd9/0x110 [ 681.728036] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 681.733579] ? fput+0x130/0x1a0 [ 681.736866] ? do_syscall_64+0x9a/0x820 [ 681.740864] ? do_syscall_64+0x9a/0x820 [ 681.744853] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 681.750398] ? security_file_ioctl+0x94/0xc0 [ 681.754825] ksys_ioctl+0xa9/0xd0 [ 681.758315] __x64_sys_ioctl+0x73/0xb0 [ 681.762210] do_syscall_64+0x1b9/0x820 [ 681.766108] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 681.771482] ? syscall_return_slowpath+0x5e0/0x5e0 [ 681.776414] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 681.781274] ? trace_hardirqs_on_caller+0x310/0x310 [ 681.786300] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 681.791337] ? prepare_exit_to_usermode+0x291/0x3b0 [ 681.796368] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 681.801260] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 681.806452] RIP: 0033:0x457569 [ 681.809653] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 681.828556] RSP: 002b:00007f8018763c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 09:02:38 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x400, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000240)='/dev/usbmon#\x00', 0x7, 0x0) ioctl$BLKREPORTZONE(r0, 0xc0101282, &(0x7f0000000100)=ANY=[@ANYBLOB="8100000000000000040000000000000009000000000000000000000000000000050000000000000000050401000000000000000000000000000000000000000000000000000000000000000000000000320000000000000003000000000000000000000000083f0600000000000000000000000000000000000000000000000000000000000000000000000000080000000000000020070101000000000000000000000000000000000000000000000000000000000000000000000000fffffffffeffffff01800000000000001f000000000000000807009900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"]) r2 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x80000005, 0x233, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f0000000280)="cf2e3e68d81525f5dcb3295dfd1d97535d67c34cc1eb0985b3de042b9c093e2a2f3261e31a0e79c195dd429e76bf62bf43f1174de51684679c29ea8eeff01598917dca757a5c205b0cc9bc0880fbbcfffa53aebb3078804d2409d51ded540d4d200161f18f8b095073047dfee2ed8e") ioctl$RTC_EPOCH_READ(r2, 0xc0287c02, &(0x7f0000000300)) 09:02:38 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") sync_file_range(r0, 0x1f, 0x6, 0x4) unshare(0x0) getsockopt$sock_buf(r0, 0x1, 0x1a, 0x0, &(0x7f0000000380)) [ 681.836270] RAX: ffffffffffffffda RBX: 00007f8018763c90 RCX: 0000000000457569 [ 681.843543] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 681.850817] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 681.858088] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f80187646d4 [ 681.865362] R13: 00000000004c034e R14: 00000000004d0d60 R15: 0000000000000007 09:02:38 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20000000001b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x10000000, 0x0, 0x8, 0x0, 0x7}) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x507000, 0x0) 09:02:38 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5f95496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:02:38 executing program 5 (fault-call:8 fault-nth:8): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000000)={'teql0\x00', {0x2, 0x0, @dev}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:02:38 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0xfe00]}, 0x10) [ 682.040872] QAT: Invalid ioctl [ 682.051721] QAT: Invalid ioctl 09:02:38 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") unshare(0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000000)="ca09333074b4afad1a2877cfa4864fbfe34fda3424076f6f67405f91916ec2f48b638ac0392f419489c11509b05a74dd300e9188fc7c0fd9dc2e17fa6dee358e99bfacf1f04e11d2e1df6cebe8eb5462c4290c46aa5aaf09bf4cf93ae3ed4b8d7fdefb555043cc3bdb35493cf5bdd12a3837ad0311ef1895e6b9bddbb3da052dadff0c3a629fe16da3dfc92e3ac1341602598b2978449715e9e75f06b31e0be07d7e6bec16d5632e954cfae6e9419271a402a8fa1a0ce91ac30cfb06e23909b747e209", 0xc3, r1}, 0x68) getsockopt$sock_buf(r0, 0x1, 0x1a, 0x0, &(0x7f0000000380)) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r2 = open(&(0x7f0000000100)='./file0\x00', 0x200, 0xa0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x58, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x9, @loopback, 0x9}, @in={0x2, 0x4e21, @multicast2}, @in6={0xa, 0x4e22, 0x3, @mcast2, 0x7ff}, @in={0x2, 0x4e21, @loopback}]}, &(0x7f00000002c0)=0x10) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f0000000300)={r3, 0x8, 0x43}, 0x8) 09:02:38 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5feb496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:02:38 executing program 4: r0 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x80000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$RTC_EPOCH_READ(r0, 0xc0287c02, &(0x7f0000000040)) fsetxattr$trusted_overlay_nlink(r1, &(0x7f0000000000)='trusted.overlay.nlink\x00', &(0x7f0000000100)={'L+', 0xe5d}, 0x28, 0x2) accept4$alg(r0, 0x0, 0x0, 0x0) [ 682.138622] FAULT_INJECTION: forcing a failure. [ 682.138622] name failslab, interval 1, probability 0, space 0, times 0 [ 682.164347] CPU: 0 PID: 31029 Comm: syz-executor5 Not tainted 4.20.0-rc4+ #138 [ 682.171728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 682.181087] Call Trace: [ 682.183711] dump_stack+0x244/0x39d [ 682.183746] ? dump_stack_print_info.cold.1+0x20/0x20 [ 682.192550] ? __kernel_text_address+0xd/0x40 [ 682.192568] ? unwind_get_return_address+0x61/0xa0 [ 682.192594] should_fail.cold.4+0xa/0x17 [ 682.192616] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 682.192638] ? save_stack+0xa9/0xd0 [ 682.214884] ? kasan_kmalloc+0xc7/0xe0 [ 682.218781] ? kasan_slab_alloc+0x12/0x20 [ 682.222943] ? kmem_cache_alloc+0x12e/0x730 [ 682.227329] ? mmu_topup_memory_caches+0xfb/0x470 [ 682.232182] ? kvm_mmu_load+0x21/0x1290 09:02:38 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20000000001b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x10000000, 0x0, 0x8, 0x0, 0x7}) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x730000000000, 0x0) 09:02:38 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5f49496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) [ 682.236164] ? kvm_arch_vcpu_ioctl_run+0x2889/0x7320 [ 682.241311] ? zap_class+0x640/0x640 [ 682.245037] ? __x64_sys_ioctl+0x73/0xb0 [ 682.249114] ? do_syscall_64+0x1b9/0x820 [ 682.253186] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 682.258586] ? find_held_lock+0x36/0x1c0 [ 682.262670] ? __lock_is_held+0xb5/0x140 [ 682.266739] ? skb_split+0xab8/0x11e0 [ 682.270564] ? perf_trace_sched_process_exec+0x860/0x860 [ 682.276037] __should_failslab+0x124/0x180 [ 682.280304] should_failslab+0x9/0x14 [ 682.284119] kmem_cache_alloc+0x2be/0x730 [ 682.288294] ? lock_acquire+0x1ed/0x520 [ 682.292301] ? kvm_arch_vcpu_ioctl_run+0x30f/0x7320 [ 682.297329] ? mmu_topup_memory_caches+0xfb/0x470 [ 682.302223] mmu_topup_memory_caches+0xfb/0x470 [ 682.306921] ? kvm_inject_realmode_interrupt+0x260/0x260 [ 682.312404] kvm_mmu_load+0x21/0x1290 [ 682.316220] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 682.321782] ? vmx_clear_hlt.isra.39+0xa5/0xd0 [ 682.326383] kvm_arch_vcpu_ioctl_run+0x2889/0x7320 [ 682.331327] ? kvm_vcpu_ioctl+0x1e5/0x1150 09:02:38 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5f65496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) [ 682.335597] ? kvm_arch_vcpu_runnable+0x710/0x710 [ 682.340451] ? zap_class+0x640/0x640 [ 682.344179] ? __lock_acquire+0x62f/0x4c20 [ 682.348426] ? lock_downgrade+0x900/0x900 [ 682.352589] ? check_preemption_disabled+0x48/0x280 [ 682.357631] ? find_held_lock+0x36/0x1c0 [ 682.361736] ? get_task_pid+0x1ea/0x3b0 [ 682.365736] ? lock_downgrade+0x900/0x900 [ 682.369896] ? check_preemption_disabled+0x48/0x280 [ 682.374927] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 682.379866] ? kasan_check_read+0x11/0x20 [ 682.384054] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 682.389354] ? rcu_softirq_qs+0x20/0x20 [ 682.393370] ? get_task_pid+0x211/0x3b0 [ 682.397357] ? find_get_pid+0x270/0x270 [ 682.401338] ? zap_class+0x640/0x640 [ 682.405062] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 682.410620] kvm_vcpu_ioctl+0x5c8/0x1150 [ 682.414726] ? kvm_vcpu_ioctl+0x5c8/0x1150 [ 682.418975] ? kvm_uevent_notify_change.part.32+0x450/0x450 [ 682.424715] ? find_held_lock+0x36/0x1c0 [ 682.424740] ? __fget+0x4aa/0x740 [ 682.424790] ? check_preemption_disabled+0x48/0x280 [ 682.424812] ? kasan_check_read+0x11/0x20 [ 682.424830] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 682.446773] ? rcu_softirq_qs+0x20/0x20 [ 682.450767] ? __fget+0x4d1/0x740 [ 682.454235] ? ksys_dup3+0x680/0x680 [ 682.458001] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 682.462955] ? kvm_uevent_notify_change.part.32+0x450/0x450 [ 682.468678] do_vfs_ioctl+0x1de/0x1790 [ 682.472590] ? __lock_is_held+0xb5/0x140 [ 682.476683] ? ioctl_preallocate+0x300/0x300 [ 682.481132] ? __fget_light+0x2e9/0x430 [ 682.485117] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 682.490686] ? smack_file_ioctl+0x210/0x3c0 [ 682.495014] ? fget_raw+0x20/0x20 [ 682.498474] ? smack_file_lock+0x2e0/0x2e0 [ 682.502794] ? __sb_end_write+0xd9/0x110 [ 682.506869] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 682.512418] ? fput+0x130/0x1a0 [ 682.515754] ? do_syscall_64+0x9a/0x820 [ 682.519737] ? do_syscall_64+0x9a/0x820 [ 682.523722] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 682.529297] ? security_file_ioctl+0x94/0xc0 [ 682.533732] ksys_ioctl+0xa9/0xd0 [ 682.537200] __x64_sys_ioctl+0x73/0xb0 [ 682.541112] do_syscall_64+0x1b9/0x820 [ 682.545008] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 682.550387] ? syscall_return_slowpath+0x5e0/0x5e0 [ 682.555324] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 682.560182] ? trace_hardirqs_on_caller+0x310/0x310 [ 682.565210] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 682.570261] ? prepare_exit_to_usermode+0x291/0x3b0 [ 682.575303] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 682.580163] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 682.585362] RIP: 0033:0x457569 09:02:38 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x8000) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x40, 0x0) ioctl$RTC_UIE_OFF(r1, 0x7004) r2 = socket$inet6(0xa, 0x3, 0x6) ioctl(r2, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") unshare(0x0) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000300)=0x4, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score\x00') sendmsg(r1, &(0x7f00000002c0)={&(0x7f0000000180)=@ethernet={0x307, @broadcast}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000200)="f07c1876eb4f1c3e5f8a2a1e784895f765cbba7b97cef0db70f7e789a23227fe1301cde8fc816403ccf42caf71305dd4ecfb0b79a29c5dc89a898c42da80e8e0c1af82e7fa0ca2a003614b08b19f4249a4108f4068f72985ee15427099f754a4d8b90356b085444dd89d52db7877b2071883c57227c251786696b77887d14b4f269dd154376dfc90", 0x88}, {&(0x7f00000003c0)="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", 0x1000}, {&(0x7f00000013c0)="6523124f3afaf6bd9e3e4c40f39641bc6d6b4e8245aa52b31fb655e2b5d8d89b0fca9c55a042f98c6dc5d177495d60756b3cefc608f8f8fdcd0d29cf6632bcabd8610addd2de19de3fcf2b40e7939b7e181d14c5d75fdd5df389d708e518e87f042aa59378b3d7fb989da188adc224e6beeccabd8f22695aceb54cbeb62a7ed7dac0870383c3b5f2608440cebf33e4a352a8bd0c983813bfa9e69b48756cbdc7d6c3f22c396352ecc975a59d732e19151be24760a0ca5647190a4fece1fb1fe43fbe0a2d84660db34c65e2d19d47c0fe4a518c536588137452b3ddf869f6626ef5a07caaad0089d816cf77345e3d302901b7f589f831abeb", 0xf8}], 0x3, &(0x7f00000014c0)=[{0xe0, 0x118, 0x8, "970e17f5dcbab6fbb59f4b1980807dd6285e19a2176c339f3f871e9a79bd382850ff0d2d1a7cc0b2d1725d03946c1dd9e2261d4c961593ad3e5884c2cc41da40326e67269e84519f1be8c176f57c5eb4fd62346938a4639e283728a846b8067ad96aba3a6b96855786e41869e050fe102c12b2d30d3a0b5fb9ccb2d9e7f9ec994a85cc1538efdf76ba555ab56b0cd930ced126ab90c7ad5a999843a11e167e77e15ee80803d6e0b3bfcc5fe800d82373f5fb674ece23236741accbfd45909ec09aff40f6be492af3b8581dd2"}, {0x10, 0x3a, 0x8}, {0xe0, 0x10f, 0x6e88000000000, "5b700a29148afabc947a8886a2a838cbe7ebabdbb4429653dfedd8d67d0fc899967410703e70e1acdff7a6fdc22ea7c6b9d796b91d8c6aeb14307675196502671d9fa62ae12c076063f18fdc45766b2f9e4b99a14cd210731d19df7cef1d5d3896689ab548e32bd0507c975d1b9f8e3bffdb55e0279a07cb99aef420d3a884e4573469f39613943a4b242c1edaf1c0783b305e7f27347da69e53269e2099dfb155bd1a411e15d6bff59142829a2362be46a97600331676eaab0ee8b0667abc0895ee35165bbf32db55d6bf"}, {0x60, 0x10f, 0x7, "6412a66b9b26cdf600eb6fabd02a659289ea104e2de303590fab0a07e11e362ff893562f3831b4660bc2e3df506dda10ad0d1e01c404925b0b8e969c40c72ed100d87c27f5f7cc7450174ed6"}, {0x108, 0x115, 0x1, "aa441fef875fb57a9293f5b0fc7a0e3045055a4927107864009894046f19be519d44ebc7cd42fad11401142081a8b20e637a68f215ed9f8ddc7cc2a203c79a6b4fc4cab84039f5028a920e88da23f8675e938c3ad5568af19f276f61a718ddf4f8c896373fdb2424de52036c534bbc8a4b31593857b1734aae8d621394525688c4707334352c8cf0ad41dc0e5ff017f263f969211e7502da2e6aedf5b0752ae80e4351e80ade5a30cc16dd5c14c5adb5c091fa2772183265aae4112db410b698aed9a0043bf6cf659cdc3f7a83d7a999b2af1992fe8b81c23679ec9a056d86fe095760f7d2703e78e9b07b2fc38b96e323ed9b"}], 0x338, 0x1}, 0x4040000) ioctl$VIDIOC_S_TUNER(r3, 0x4054561e, &(0x7f0000000040)={0x4, "1277aad04c906860c8715aac9cf0d4f2670fbf7f2b6ce9bcb6d4cb26491360e4", 0x0, 0x800, 0x37, 0x100000000, 0x0, 0x7, 0x80, 0x7ff}) getsockopt$sock_buf(r0, 0x1, 0x1a, 0x0, &(0x7f0000000380)) 09:02:38 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fb2496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:02:38 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x8000) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x40, 0x0) ioctl$RTC_UIE_OFF(r1, 0x7004) r2 = socket$inet6(0xa, 0x3, 0x6) ioctl(r2, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") unshare(0x0) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000300)=0x4, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score\x00') sendmsg(r1, &(0x7f00000002c0)={&(0x7f0000000180)=@ethernet={0x307, @broadcast}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000200)="f07c1876eb4f1c3e5f8a2a1e784895f765cbba7b97cef0db70f7e789a23227fe1301cde8fc816403ccf42caf71305dd4ecfb0b79a29c5dc89a898c42da80e8e0c1af82e7fa0ca2a003614b08b19f4249a4108f4068f72985ee15427099f754a4d8b90356b085444dd89d52db7877b2071883c57227c251786696b77887d14b4f269dd154376dfc90", 0x88}, {&(0x7f00000003c0)="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", 0x1000}, {&(0x7f00000013c0)="6523124f3afaf6bd9e3e4c40f39641bc6d6b4e8245aa52b31fb655e2b5d8d89b0fca9c55a042f98c6dc5d177495d60756b3cefc608f8f8fdcd0d29cf6632bcabd8610addd2de19de3fcf2b40e7939b7e181d14c5d75fdd5df389d708e518e87f042aa59378b3d7fb989da188adc224e6beeccabd8f22695aceb54cbeb62a7ed7dac0870383c3b5f2608440cebf33e4a352a8bd0c983813bfa9e69b48756cbdc7d6c3f22c396352ecc975a59d732e19151be24760a0ca5647190a4fece1fb1fe43fbe0a2d84660db34c65e2d19d47c0fe4a518c536588137452b3ddf869f6626ef5a07caaad0089d816cf77345e3d302901b7f589f831abeb", 0xf8}], 0x3, &(0x7f00000014c0)=[{0xe0, 0x118, 0x8, "970e17f5dcbab6fbb59f4b1980807dd6285e19a2176c339f3f871e9a79bd382850ff0d2d1a7cc0b2d1725d03946c1dd9e2261d4c961593ad3e5884c2cc41da40326e67269e84519f1be8c176f57c5eb4fd62346938a4639e283728a846b8067ad96aba3a6b96855786e41869e050fe102c12b2d30d3a0b5fb9ccb2d9e7f9ec994a85cc1538efdf76ba555ab56b0cd930ced126ab90c7ad5a999843a11e167e77e15ee80803d6e0b3bfcc5fe800d82373f5fb674ece23236741accbfd45909ec09aff40f6be492af3b8581dd2"}, {0x10, 0x3a, 0x8}, {0xe0, 0x10f, 0x6e88000000000, "5b700a29148afabc947a8886a2a838cbe7ebabdbb4429653dfedd8d67d0fc899967410703e70e1acdff7a6fdc22ea7c6b9d796b91d8c6aeb14307675196502671d9fa62ae12c076063f18fdc45766b2f9e4b99a14cd210731d19df7cef1d5d3896689ab548e32bd0507c975d1b9f8e3bffdb55e0279a07cb99aef420d3a884e4573469f39613943a4b242c1edaf1c0783b305e7f27347da69e53269e2099dfb155bd1a411e15d6bff59142829a2362be46a97600331676eaab0ee8b0667abc0895ee35165bbf32db55d6bf"}, {0x60, 0x10f, 0x7, "6412a66b9b26cdf600eb6fabd02a659289ea104e2de303590fab0a07e11e362ff893562f3831b4660bc2e3df506dda10ad0d1e01c404925b0b8e969c40c72ed100d87c27f5f7cc7450174ed6"}, {0x108, 0x115, 0x1, "aa441fef875fb57a9293f5b0fc7a0e3045055a4927107864009894046f19be519d44ebc7cd42fad11401142081a8b20e637a68f215ed9f8ddc7cc2a203c79a6b4fc4cab84039f5028a920e88da23f8675e938c3ad5568af19f276f61a718ddf4f8c896373fdb2424de52036c534bbc8a4b31593857b1734aae8d621394525688c4707334352c8cf0ad41dc0e5ff017f263f969211e7502da2e6aedf5b0752ae80e4351e80ade5a30cc16dd5c14c5adb5c091fa2772183265aae4112db410b698aed9a0043bf6cf659cdc3f7a83d7a999b2af1992fe8b81c23679ec9a056d86fe095760f7d2703e78e9b07b2fc38b96e323ed9b"}], 0x338, 0x1}, 0x4040000) ioctl$VIDIOC_S_TUNER(r3, 0x4054561e, &(0x7f0000000040)={0x4, "1277aad04c906860c8715aac9cf0d4f2670fbf7f2b6ce9bcb6d4cb26491360e4", 0x0, 0x800, 0x37, 0x100000000, 0x0, 0x7, 0x80, 0x7ff}) getsockopt$sock_buf(r0, 0x1, 0x1a, 0x0, &(0x7f0000000380)) 09:02:38 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fcd496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) [ 682.588566] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 682.607468] RSP: 002b:00007f8018763c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 682.607485] RAX: ffffffffffffffda RBX: 00007f8018763c90 RCX: 0000000000457569 [ 682.607495] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 682.607505] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 682.607514] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f80187646d4 [ 682.607528] R13: 00000000004c034e R14: 00000000004d0d60 R15: 0000000000000007 09:02:39 executing program 5 (fault-call:8 fault-nth:9): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000000)={'teql0\x00', {0x2, 0x0, @dev}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:02:39 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fc3496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:02:39 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}, 0x10) 09:02:39 executing program 4: r0 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x80000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x2, 0x2, 0x10001, 0xfffffffffffffff8, 0x0, 0x0, 0x804, 0xf, 0x9, 0x80000001, 0x6, 0x2, 0x4, 0x2, 0x3db9, 0x4, 0x2, 0x0, 0x2, 0x4, 0xd2, 0xffffffffffffffb3, 0x100, 0x7, 0x7ff, 0x65, 0x5, 0x1, 0x9, 0x80, 0x200, 0x6, 0xff, 0x400, 0x0, 0x9, 0x0, 0xffffffffffff5172, 0x2, @perf_config_ext={0x6, 0x5}, 0x0, 0x200, 0x5, 0x4, 0x8, 0xfffffffffffffffa, 0x7fff}, r1, 0x2, r0, 0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffff9c, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x2, 0x3ff, 0x1, 0x0, 0x1}, &(0x7f0000000180)=0x14) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000001c0)={r2, 0x8cc, 0x2, 0x3, 0x0, 0x3}, 0x14) ioctl$RTC_EPOCH_READ(r0, 0xc0287c02, &(0x7f0000000040)) 09:02:39 executing program 4: r0 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x80000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_READ(r0, 0xc0287c02, &(0x7f0000000040)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000280)={{{@in=@empty, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@loopback}}, &(0x7f0000000380)=0xe8) mount$9p_xen(&(0x7f0000000000)='md5sum%/*vboxnet1,!\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x2200400, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=xen,access=', @ANYRESDEC=r1, @ANYBLOB=',cachetag=[{@,dfltuid=', @ANYRESHEX=r2, @ANYBLOB=',obj_type=,^ontext=root,\x00']) [ 682.940862] FAULT_INJECTION: forcing a failure. [ 682.940862] name failslab, interval 1, probability 0, space 0, times 0 [ 682.962575] CPU: 0 PID: 31078 Comm: syz-executor5 Not tainted 4.20.0-rc4+ #138 [ 682.969960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 682.979426] Call Trace: [ 682.982045] dump_stack+0x244/0x39d [ 682.985687] ? dump_stack_print_info.cold.1+0x20/0x20 [ 682.990902] ? __kernel_text_address+0xd/0x40 [ 682.995424] ? unwind_get_return_address+0x61/0xa0 [ 683.000373] should_fail.cold.4+0xa/0x17 [ 683.004445] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 683.009577] ? save_stack+0xa9/0xd0 [ 683.013212] ? kasan_kmalloc+0xc7/0xe0 [ 683.017118] ? kasan_slab_alloc+0x12/0x20 [ 683.021285] ? kmem_cache_alloc+0x12e/0x730 [ 683.025617] ? mmu_topup_memory_caches+0xfb/0x470 [ 683.030464] ? kvm_mmu_load+0x21/0x1290 [ 683.034446] ? kvm_arch_vcpu_ioctl_run+0x2889/0x7320 [ 683.039562] ? zap_class+0x640/0x640 [ 683.043308] ? __x64_sys_ioctl+0x73/0xb0 [ 683.047377] ? do_syscall_64+0x1b9/0x820 [ 683.051450] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 683.056826] ? find_held_lock+0x36/0x1c0 [ 683.060899] ? __lock_is_held+0xb5/0x140 [ 683.064984] ? perf_trace_sched_process_exec+0x860/0x860 [ 683.070458] __should_failslab+0x124/0x180 [ 683.074724] should_failslab+0x9/0x14 [ 683.078560] kmem_cache_alloc+0x2be/0x730 [ 683.082723] ? lock_acquire+0x1ed/0x520 [ 683.086704] ? kvm_arch_vcpu_ioctl_run+0x30f/0x7320 [ 683.091742] ? mmu_topup_memory_caches+0xfb/0x470 [ 683.096599] mmu_topup_memory_caches+0xfb/0x470 [ 683.101316] ? kvm_inject_realmode_interrupt+0x260/0x260 [ 683.106779] kvm_mmu_load+0x21/0x1290 [ 683.110596] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 683.116142] ? vmx_clear_hlt.isra.39+0xa5/0xd0 [ 683.120734] kvm_arch_vcpu_ioctl_run+0x2889/0x7320 [ 683.125675] ? kvm_vcpu_ioctl+0x1e5/0x1150 [ 683.129934] ? kvm_arch_vcpu_runnable+0x710/0x710 [ 683.134779] ? zap_class+0x640/0x640 [ 683.138504] ? __lock_acquire+0x62f/0x4c20 [ 683.142751] ? lock_downgrade+0x900/0x900 [ 683.146906] ? check_preemption_disabled+0x48/0x280 [ 683.151938] ? find_held_lock+0x36/0x1c0 [ 683.156017] ? get_task_pid+0x1ea/0x3b0 [ 683.159997] ? lock_downgrade+0x900/0x900 [ 683.164150] ? check_preemption_disabled+0x48/0x280 [ 683.169178] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 683.174113] ? kasan_check_read+0x11/0x20 [ 683.178285] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 683.183573] ? rcu_softirq_qs+0x20/0x20 [ 683.187573] ? get_task_pid+0x211/0x3b0 [ 683.191552] ? find_get_pid+0x270/0x270 [ 683.195537] ? zap_class+0x640/0x640 [ 683.199275] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 683.204829] kvm_vcpu_ioctl+0x5c8/0x1150 [ 683.208899] ? kvm_vcpu_ioctl+0x5c8/0x1150 [ 683.213144] ? kvm_uevent_notify_change.part.32+0x450/0x450 [ 683.218866] ? find_held_lock+0x36/0x1c0 [ 683.222957] ? __fget+0x4aa/0x740 [ 683.226424] ? check_preemption_disabled+0x48/0x280 [ 683.231454] ? kasan_check_read+0x11/0x20 [ 683.235611] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 683.240896] ? rcu_softirq_qs+0x20/0x20 [ 683.244889] ? __fget+0x4d1/0x740 [ 683.248356] ? ksys_dup3+0x680/0x680 [ 683.252086] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 683.257028] ? kvm_uevent_notify_change.part.32+0x450/0x450 [ 683.262747] do_vfs_ioctl+0x1de/0x1790 [ 683.266680] ? __lock_is_held+0xb5/0x140 [ 683.270750] ? ioctl_preallocate+0x300/0x300 [ 683.275167] ? __fget_light+0x2e9/0x430 [ 683.279150] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 683.284721] ? smack_file_ioctl+0x210/0x3c0 [ 683.289084] ? fget_raw+0x20/0x20 [ 683.292547] ? smack_file_lock+0x2e0/0x2e0 [ 683.296834] ? __sb_end_write+0xd9/0x110 [ 683.300909] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 683.306458] ? fput+0x130/0x1a0 [ 683.309747] ? do_syscall_64+0x9a/0x820 [ 683.313735] ? do_syscall_64+0x9a/0x820 [ 683.317722] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 683.323289] ? security_file_ioctl+0x94/0xc0 [ 683.327707] ksys_ioctl+0xa9/0xd0 [ 683.331178] __x64_sys_ioctl+0x73/0xb0 [ 683.335083] do_syscall_64+0x1b9/0x820 [ 683.338981] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 683.344352] ? syscall_return_slowpath+0x5e0/0x5e0 [ 683.349309] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 683.354168] ? trace_hardirqs_on_caller+0x310/0x310 [ 683.359196] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 683.364228] ? prepare_exit_to_usermode+0x291/0x3b0 [ 683.369311] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 683.374174] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 683.379363] RIP: 0033:0x457569 [ 683.382561] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 683.401455] RSP: 002b:00007f8018763c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 683.409157] RAX: ffffffffffffffda RBX: 00007f8018763c90 RCX: 0000000000457569 [ 683.416427] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 683.423683] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 683.430952] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f80187646d4 [ 683.438237] R13: 00000000004c034e R14: 00000000004d0d60 R15: 0000000000000007 [ 685.099650] device bridge_slave_1 left promiscuous mode [ 685.105205] bridge0: port 2(bridge_slave_1) entered disabled state [ 685.149976] device bridge_slave_0 left promiscuous mode [ 685.155471] bridge0: port 1(bridge_slave_0) entered disabled state 09:02:41 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5f30496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:02:41 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20000000001b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x10000000, 0x0, 0x8, 0x0, 0x7}) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x930000000000, 0x0) 09:02:41 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000]}, 0x10) 09:02:41 executing program 5 (fault-call:8 fault-nth:10): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000000)={'teql0\x00', {0x2, 0x0, @dev}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:02:41 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x6, 0x4081) perf_event_open(&(0x7f0000000040)={0x80000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)={0x3, 0x0, 0x4e255504e7c26bbe, 0x3}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000140)={0x5, r1}) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000180)={{0x3c, @loopback, 0x4e22, 0x3, 'rr\x00', 0x10, 0x9ffe, 0x2a}, {@empty, 0x4e21, 0x2, 0xfffffffffffffffc, 0x7fffffff, 0x5}}, 0x44) ioctl$DRM_IOCTL_AGP_UNBIND(r0, 0x40106437, &(0x7f0000000200)={r1, 0x1}) ioctl$RTC_EPOCH_READ(r0, 0xc0287c02, &(0x7f0000000100)) getsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f00000002c0), &(0x7f0000000300)=0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000240)=[@in6={0xa, 0x4e24, 0x8, @remote, 0x8}, @in6={0xa, 0x4e20, 0x6, @mcast1, 0x2}, @in6={0xa, 0x4e24, 0x6, @remote, 0x7}, @in={0x2, 0x4e24, @loopback}], 0x64) 09:02:41 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x8000) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x40, 0x0) ioctl$RTC_UIE_OFF(r1, 0x7004) r2 = socket$inet6(0xa, 0x3, 0x6) ioctl(r2, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") unshare(0x0) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000300)=0x4, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score\x00') sendmsg(r1, &(0x7f00000002c0)={&(0x7f0000000180)=@ethernet={0x307, @broadcast}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000200)="f07c1876eb4f1c3e5f8a2a1e784895f765cbba7b97cef0db70f7e789a23227fe1301cde8fc816403ccf42caf71305dd4ecfb0b79a29c5dc89a898c42da80e8e0c1af82e7fa0ca2a003614b08b19f4249a4108f4068f72985ee15427099f754a4d8b90356b085444dd89d52db7877b2071883c57227c251786696b77887d14b4f269dd154376dfc90", 0x88}, {&(0x7f00000003c0)="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", 0x1000}, {&(0x7f00000013c0)="6523124f3afaf6bd9e3e4c40f39641bc6d6b4e8245aa52b31fb655e2b5d8d89b0fca9c55a042f98c6dc5d177495d60756b3cefc608f8f8fdcd0d29cf6632bcabd8610addd2de19de3fcf2b40e7939b7e181d14c5d75fdd5df389d708e518e87f042aa59378b3d7fb989da188adc224e6beeccabd8f22695aceb54cbeb62a7ed7dac0870383c3b5f2608440cebf33e4a352a8bd0c983813bfa9e69b48756cbdc7d6c3f22c396352ecc975a59d732e19151be24760a0ca5647190a4fece1fb1fe43fbe0a2d84660db34c65e2d19d47c0fe4a518c536588137452b3ddf869f6626ef5a07caaad0089d816cf77345e3d302901b7f589f831abeb", 0xf8}], 0x3, &(0x7f00000014c0)=[{0xe0, 0x118, 0x8, "970e17f5dcbab6fbb59f4b1980807dd6285e19a2176c339f3f871e9a79bd382850ff0d2d1a7cc0b2d1725d03946c1dd9e2261d4c961593ad3e5884c2cc41da40326e67269e84519f1be8c176f57c5eb4fd62346938a4639e283728a846b8067ad96aba3a6b96855786e41869e050fe102c12b2d30d3a0b5fb9ccb2d9e7f9ec994a85cc1538efdf76ba555ab56b0cd930ced126ab90c7ad5a999843a11e167e77e15ee80803d6e0b3bfcc5fe800d82373f5fb674ece23236741accbfd45909ec09aff40f6be492af3b8581dd2"}, {0x10, 0x3a, 0x8}, {0xe0, 0x10f, 0x6e88000000000, "5b700a29148afabc947a8886a2a838cbe7ebabdbb4429653dfedd8d67d0fc899967410703e70e1acdff7a6fdc22ea7c6b9d796b91d8c6aeb14307675196502671d9fa62ae12c076063f18fdc45766b2f9e4b99a14cd210731d19df7cef1d5d3896689ab548e32bd0507c975d1b9f8e3bffdb55e0279a07cb99aef420d3a884e4573469f39613943a4b242c1edaf1c0783b305e7f27347da69e53269e2099dfb155bd1a411e15d6bff59142829a2362be46a97600331676eaab0ee8b0667abc0895ee35165bbf32db55d6bf"}, {0x60, 0x10f, 0x7, "6412a66b9b26cdf600eb6fabd02a659289ea104e2de303590fab0a07e11e362ff893562f3831b4660bc2e3df506dda10ad0d1e01c404925b0b8e969c40c72ed100d87c27f5f7cc7450174ed6"}, {0x108, 0x115, 0x1, "aa441fef875fb57a9293f5b0fc7a0e3045055a4927107864009894046f19be519d44ebc7cd42fad11401142081a8b20e637a68f215ed9f8ddc7cc2a203c79a6b4fc4cab84039f5028a920e88da23f8675e938c3ad5568af19f276f61a718ddf4f8c896373fdb2424de52036c534bbc8a4b31593857b1734aae8d621394525688c4707334352c8cf0ad41dc0e5ff017f263f969211e7502da2e6aedf5b0752ae80e4351e80ade5a30cc16dd5c14c5adb5c091fa2772183265aae4112db410b698aed9a0043bf6cf659cdc3f7a83d7a999b2af1992fe8b81c23679ec9a056d86fe095760f7d2703e78e9b07b2fc38b96e323ed9b"}], 0x338, 0x1}, 0x4040000) ioctl$VIDIOC_S_TUNER(r3, 0x4054561e, &(0x7f0000000040)={0x4, "1277aad04c906860c8715aac9cf0d4f2670fbf7f2b6ce9bcb6d4cb26491360e4", 0x0, 0x800, 0x37, 0x100000000, 0x0, 0x7, 0x80, 0x7ff}) getsockopt$sock_buf(r0, 0x1, 0x1a, 0x0, &(0x7f0000000380)) [ 685.332419] FAULT_INJECTION: forcing a failure. [ 685.332419] name failslab, interval 1, probability 0, space 0, times 0 [ 685.362406] CPU: 0 PID: 31092 Comm: syz-executor5 Not tainted 4.20.0-rc4+ #138 [ 685.369811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 685.379168] Call Trace: [ 685.381790] dump_stack+0x244/0x39d [ 685.385440] ? dump_stack_print_info.cold.1+0x20/0x20 [ 685.390647] ? __kernel_text_address+0xd/0x40 [ 685.395154] ? unwind_get_return_address+0x61/0xa0 [ 685.400100] should_fail.cold.4+0xa/0x17 [ 685.404183] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 685.409300] ? save_stack+0xa9/0xd0 [ 685.412942] ? kasan_kmalloc+0xc7/0xe0 [ 685.416851] ? kasan_slab_alloc+0x12/0x20 [ 685.421009] ? kmem_cache_alloc+0x12e/0x730 [ 685.425343] ? mmu_topup_memory_caches+0xfb/0x470 [ 685.430212] ? kvm_mmu_load+0x21/0x1290 [ 685.434212] ? kvm_arch_vcpu_ioctl_run+0x2889/0x7320 [ 685.439341] ? zap_class+0x640/0x640 [ 685.443063] ? __x64_sys_ioctl+0x73/0xb0 [ 685.447181] ? do_syscall_64+0x1b9/0x820 [ 685.451265] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 685.456648] ? find_held_lock+0x36/0x1c0 [ 685.460738] ? __lock_is_held+0xb5/0x140 [ 685.464834] ? perf_trace_sched_process_exec+0x860/0x860 [ 685.470324] __should_failslab+0x124/0x180 [ 685.474572] should_failslab+0x9/0x14 [ 685.478379] kmem_cache_alloc+0x2be/0x730 [ 685.482535] ? lock_acquire+0x1ed/0x520 [ 685.486517] ? kvm_arch_vcpu_ioctl_run+0x30f/0x7320 [ 685.491588] ? mmu_topup_memory_caches+0xfb/0x470 [ 685.496453] mmu_topup_memory_caches+0xfb/0x470 [ 685.501132] ? kvm_inject_realmode_interrupt+0x260/0x260 [ 685.506597] kvm_mmu_load+0x21/0x1290 [ 685.510409] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 685.515955] ? vmx_clear_hlt.isra.39+0xa5/0xd0 [ 685.520579] kvm_arch_vcpu_ioctl_run+0x2889/0x7320 [ 685.525520] ? kvm_vcpu_ioctl+0x1e5/0x1150 [ 685.529797] ? kvm_arch_vcpu_runnable+0x710/0x710 [ 685.534650] ? zap_class+0x640/0x640 [ 685.538364] ? __lock_acquire+0x62f/0x4c20 [ 685.542601] ? lock_downgrade+0x900/0x900 [ 685.546759] ? check_preemption_disabled+0x48/0x280 [ 685.551800] ? find_held_lock+0x36/0x1c0 [ 685.555878] ? get_task_pid+0x1ea/0x3b0 [ 685.559863] ? lock_downgrade+0x900/0x900 [ 685.564038] ? check_preemption_disabled+0x48/0x280 [ 685.569071] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 685.574008] ? kasan_check_read+0x11/0x20 [ 685.578170] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 685.583453] ? rcu_softirq_qs+0x20/0x20 [ 685.587450] ? get_task_pid+0x211/0x3b0 [ 685.591433] ? find_get_pid+0x270/0x270 [ 685.595414] ? zap_class+0x640/0x640 [ 685.599160] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 685.604717] kvm_vcpu_ioctl+0x5c8/0x1150 [ 685.608794] ? kvm_vcpu_ioctl+0x5c8/0x1150 [ 685.613056] ? kvm_uevent_notify_change.part.32+0x450/0x450 [ 685.618780] ? find_held_lock+0x36/0x1c0 [ 685.622886] ? __fget+0x4aa/0x740 [ 685.626354] ? check_preemption_disabled+0x48/0x280 [ 685.631386] ? kasan_check_read+0x11/0x20 [ 685.635541] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 685.640844] ? rcu_softirq_qs+0x20/0x20 [ 685.644844] ? __fget+0x4d1/0x740 [ 685.648330] ? ksys_dup3+0x680/0x680 [ 685.649455] cgroup: fork rejected by pids controller in /syz2 [ 685.652064] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 685.652091] ? kvm_uevent_notify_change.part.32+0x450/0x450 [ 685.652109] do_vfs_ioctl+0x1de/0x1790 [ 685.652129] ? __lock_is_held+0xb5/0x140 [ 685.676553] ? ioctl_preallocate+0x300/0x300 [ 685.680970] ? __fget_light+0x2e9/0x430 [ 685.684979] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 685.690529] ? smack_file_ioctl+0x210/0x3c0 [ 685.694852] ? fget_raw+0x20/0x20 [ 685.698317] ? smack_file_lock+0x2e0/0x2e0 [ 685.702566] ? __sb_end_write+0xd9/0x110 [ 685.706646] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 685.712197] ? fput+0x130/0x1a0 [ 685.715495] ? do_syscall_64+0x9a/0x820 [ 685.719484] ? do_syscall_64+0x9a/0x820 [ 685.723480] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 685.729049] ? security_file_ioctl+0x94/0xc0 09:02:41 executing program 4: r0 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x80000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x4) ioctl$RTC_EPOCH_READ(r0, 0xc0287c02, &(0x7f0000000040)) 09:02:41 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20000000001b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x10000000, 0x0, 0x8, 0x0, 0x7}) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x710000000000, 0x0) 09:02:41 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20000000001b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x10000000, 0x0, 0x8, 0x0, 0x7}) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x707000, 0x0) [ 685.733472] ksys_ioctl+0xa9/0xd0 [ 685.736942] __x64_sys_ioctl+0x73/0xb0 [ 685.740849] do_syscall_64+0x1b9/0x820 [ 685.744747] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 685.750127] ? syscall_return_slowpath+0x5e0/0x5e0 [ 685.755064] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 685.759914] ? trace_hardirqs_on_caller+0x310/0x310 [ 685.759932] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 685.759964] ? prepare_exit_to_usermode+0x291/0x3b0 [ 685.759986] ? trace_hardirqs_off_thunk+0x1a/0x1c 09:02:42 executing program 4: r0 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x80000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_READ(r0, 0xc0287c02, &(0x7f0000000100)) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)=0x0) perf_event_open(&(0x7f0000000140)={0x7, 0x70, 0x1000, 0x80, 0x10000, 0x8, 0x0, 0x4a97, 0x1, 0x408bc0744ecfde9, 0xe1, 0x8, 0x8000, 0x9, 0xdf6d, 0x10000, 0x7, 0x40d, 0x2, 0x9, 0x9, 0x4, 0x2, 0xf1a, 0x2, 0x8, 0x5, 0xea79, 0x8001, 0x0, 0x8, 0x0, 0x3f, 0x6, 0x8, 0x400, 0x8, 0xeb, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000000), 0x4cb5cedd7a332ed5}, 0x200, 0x8, 0x200, 0x7, 0x9, 0x100000000, 0x20}, r1, 0xd, r0, 0x1) [ 685.760006] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 685.785040] RIP: 0033:0x457569 [ 685.788277] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 685.807202] RSP: 002b:00007f8018763c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 685.814954] RAX: ffffffffffffffda RBX: 00007f8018763c90 RCX: 0000000000457569 [ 685.822230] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 09:02:42 executing program 4: r0 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x0, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r0, 0xc004aea7, &(0x7f0000000000)=0x8) perf_event_open(&(0x7f0000000040)={0x80000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$RTC_EPOCH_READ(r0, 0xc0287c02, &(0x7f0000000040)) 09:02:42 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000]}, 0x10) [ 685.829523] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 685.836804] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f80187646d4 [ 685.844082] R13: 00000000004c034e R14: 00000000004d0d60 R15: 0000000000000007 [ 687.802588] team0 (unregistering): Port device team_slave_1 removed [ 687.815303] team0 (unregistering): Port device team_slave_0 removed [ 687.827987] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 687.880036] bond0 (unregistering): Released all slaves [ 689.056568] IPVS: ftp: loaded support on port[0] = 21 09:02:45 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fa9496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:02:45 executing program 5 (fault-call:8 fault-nth:11): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000000)={'teql0\x00', {0x2, 0x0, @dev}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:02:45 executing program 4: r0 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x80000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000100)={0x49d, 0x7, 0x5, [], &(0x7f0000000000)=0x4}) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e20, 0x7, @local, 0x2}}, 0x81, 0x6}, &(0x7f0000000480)=0x90) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000004c0)=ANY=[@ANYRES32=r1, @ANYBLOB="de000000e9beb4342c5927c6b82f31fe1b7b70506c9a45f4ad3402f716ab79b846d8493a8af2ab876d7e93b977c0ee0d075ff48f58f6b0d3869c91ea864719f30998a178339ae5bd9e88ff446631086d88a9a185f14bd61d6472bcacbc4623a38c3fc55d8c4fd9adb6aa13336f6cf730522f523af64980e3f063e3e9d6ec83ba5ee7d24ef016fc444fa9c0ca3b6251c6d678721b49059102db7f98cec45c4d8e5a729e0010a7ec4e59bac2d35aead1d70de3cf57c38b091d53bce3be7f5cf6c65ba500c8c4fdb6cbebefec8717ee64adf30ec7f7caf0000000000000000000000000"], &(0x7f00000005c0)=0xe6) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20200000}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x180, r2, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x80, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'yam0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0xfffffffffffffffe}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bridge\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bridge\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bridge\x00'}]}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7f5}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x1}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'lc\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0xff}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x4}}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0xfffffffffffffff8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x8880}, 0x24000000) ioctl$RTC_EPOCH_READ(r0, 0xc0287c02, &(0x7f0000000040)) 09:02:45 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0xfe000000]}, 0x10) 09:02:45 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20000000001b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x10000000, 0x0, 0x8, 0x0, 0x7}) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x7100, 0x0) [ 689.225759] FAULT_INJECTION: forcing a failure. [ 689.225759] name failslab, interval 1, probability 0, space 0, times 0 [ 689.263078] CPU: 0 PID: 31156 Comm: syz-executor5 Not tainted 4.20.0-rc4+ #138 [ 689.270455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 689.279808] Call Trace: [ 689.279837] dump_stack+0x244/0x39d [ 689.279865] ? dump_stack_print_info.cold.1+0x20/0x20 [ 689.279887] ? __kernel_text_address+0xd/0x40 [ 689.279914] ? unwind_get_return_address+0x61/0xa0 [ 689.291293] should_fail.cold.4+0xa/0x17 [ 689.291314] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 689.291336] ? save_stack+0xa9/0xd0 [ 689.291354] ? kasan_kmalloc+0xc7/0xe0 [ 689.291368] ? kasan_slab_alloc+0x12/0x20 [ 689.291386] ? kmem_cache_alloc+0x12e/0x730 [ 689.325931] ? mmu_topup_memory_caches+0xfb/0x470 [ 689.330788] ? kvm_mmu_load+0x21/0x1290 [ 689.334775] ? kvm_arch_vcpu_ioctl_run+0x2889/0x7320 [ 689.339890] ? zap_class+0x640/0x640 [ 689.343618] ? __x64_sys_ioctl+0x73/0xb0 [ 689.347695] ? do_syscall_64+0x1b9/0x820 [ 689.351771] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 689.357158] ? find_held_lock+0x36/0x1c0 [ 689.361232] ? __lock_is_held+0xb5/0x140 [ 689.365388] ? perf_trace_sched_process_exec+0x860/0x860 [ 689.370860] __should_failslab+0x124/0x180 [ 689.375117] should_failslab+0x9/0x14 [ 689.378934] kmem_cache_alloc+0x2be/0x730 [ 689.383110] ? mark_held_locks+0xc7/0x130 [ 689.387304] ? mmu_topup_memory_caches+0xfb/0x470 [ 689.392274] mmu_topup_memory_caches+0xfb/0x470 [ 689.396958] ? kvm_inject_realmode_interrupt+0x260/0x260 [ 689.402423] kvm_mmu_load+0x21/0x1290 [ 689.406289] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 689.411889] ? vmx_clear_hlt.isra.39+0xa5/0xd0 [ 689.416490] kvm_arch_vcpu_ioctl_run+0x2889/0x7320 [ 689.421453] ? kvm_arch_vcpu_runnable+0x710/0x710 [ 689.426307] ? zap_class+0x640/0x640 [ 689.430050] ? __lock_acquire+0x62f/0x4c20 [ 689.434303] ? lock_downgrade+0x900/0x900 [ 689.438468] ? check_preemption_disabled+0x48/0x280 [ 689.443506] ? find_held_lock+0x36/0x1c0 [ 689.447587] ? get_task_pid+0x1ea/0x3b0 [ 689.451573] ? lock_downgrade+0x900/0x900 [ 689.455731] ? check_preemption_disabled+0x48/0x280 [ 689.460757] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 689.465701] ? kasan_check_read+0x11/0x20 [ 689.469865] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 689.475158] ? rcu_softirq_qs+0x20/0x20 [ 689.479197] ? get_task_pid+0x211/0x3b0 [ 689.483216] ? find_get_pid+0x270/0x270 [ 689.487217] ? zap_class+0x640/0x640 [ 689.491046] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 689.496606] kvm_vcpu_ioctl+0x5c8/0x1150 [ 689.500672] ? kvm_vcpu_ioctl+0x5c8/0x1150 [ 689.504971] ? kvm_uevent_notify_change.part.32+0x450/0x450 [ 689.510693] ? find_held_lock+0x36/0x1c0 [ 689.514838] ? __fget+0x4aa/0x740 [ 689.518309] ? check_preemption_disabled+0x48/0x280 [ 689.523340] ? kasan_check_read+0x11/0x20 [ 689.527515] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 689.532804] ? rcu_softirq_qs+0x20/0x20 [ 689.536795] ? __fget+0x4d1/0x740 [ 689.540274] ? ksys_dup3+0x680/0x680 [ 689.544010] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 689.548958] ? kvm_uevent_notify_change.part.32+0x450/0x450 [ 689.554688] do_vfs_ioctl+0x1de/0x1790 [ 689.558597] ? __lock_is_held+0xb5/0x140 [ 689.562673] ? ioctl_preallocate+0x300/0x300 [ 689.567099] ? __fget_light+0x2e9/0x430 [ 689.571097] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 689.576651] ? smack_file_ioctl+0x210/0x3c0 [ 689.580998] ? fget_raw+0x20/0x20 [ 689.584464] ? smack_file_lock+0x2e0/0x2e0 [ 689.588802] ? __sb_end_write+0xd9/0x110 [ 689.592881] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 689.598518] ? fput+0x130/0x1a0 [ 689.601824] ? do_syscall_64+0x9a/0x820 [ 689.605829] ? do_syscall_64+0x9a/0x820 [ 689.605849] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 689.605866] ? security_file_ioctl+0x94/0xc0 [ 689.605883] ksys_ioctl+0xa9/0xd0 [ 689.615387] __x64_sys_ioctl+0x73/0xb0 [ 689.615405] do_syscall_64+0x1b9/0x820 [ 689.615436] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 689.615456] ? syscall_return_slowpath+0x5e0/0x5e0 [ 689.623295] ? trace_hardirqs_on_caller+0x310/0x310 [ 689.623313] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 689.623332] ? post_copy_siginfo_from_user.isra.25.part.26+0x250/0x250 [ 689.623349] ? __switch_to_asm+0x40/0x70 [ 689.631099] ? __switch_to_asm+0x34/0x70 [ 689.631122] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 689.631144] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 689.631157] RIP: 0033:0x457569 [ 689.631173] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 689.631182] RSP: 002b:00007f8018742c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 689.641474] RAX: ffffffffffffffda RBX: 00007f8018742c90 RCX: 0000000000457569 [ 689.641484] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 689.641494] RBP: 000000000072bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 689.641504] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f80187436d4 [ 689.641513] R13: 00000000004c034e R14: 00000000004d0d60 R15: 0000000000000007 [ 689.970653] bridge0: port 1(bridge_slave_0) entered blocking state [ 689.977049] bridge0: port 1(bridge_slave_0) entered disabled state [ 689.984127] device bridge_slave_0 entered promiscuous mode [ 690.012307] bridge0: port 2(bridge_slave_1) entered blocking state [ 690.018700] bridge0: port 2(bridge_slave_1) entered disabled state [ 690.026015] device bridge_slave_1 entered promiscuous mode [ 690.054909] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 690.082502] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 690.159042] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 690.188184] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 690.306551] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 690.315263] team0: Port device team_slave_0 added [ 690.341303] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 690.348464] team0: Port device team_slave_1 added [ 690.374779] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 690.402910] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 690.431706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 690.461751] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 690.726312] bridge0: port 2(bridge_slave_1) entered blocking state [ 690.732704] bridge0: port 2(bridge_slave_1) entered forwarding state [ 690.739490] bridge0: port 1(bridge_slave_0) entered blocking state [ 690.745833] bridge0: port 1(bridge_slave_0) entered forwarding state [ 691.668646] 8021q: adding VLAN 0 to HW filter on device bond0 [ 691.756361] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 691.847739] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 691.854147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 691.861496] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 691.952385] 8021q: adding VLAN 0 to HW filter on device team0 09:02:48 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fce496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:02:48 executing program 4: r0 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x80000005, 0x70, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x3}, 0x0, 0x0, 0x100000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_READ(r0, 0xc0287c02, &(0x7f0000000040)) 09:02:48 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x10) 09:02:48 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20000000001b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x10000000, 0x0, 0x8, 0x0, 0x7}) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0xfeffffff, 0x0) 09:02:48 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5f7c496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:02:48 executing program 5 (fault-call:8 fault-nth:12): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000000)={'teql0\x00', {0x2, 0x0, @dev}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:02:48 executing program 4: r0 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x80000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_READ(r0, 0xc0287c02, &(0x7f0000000040)) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f0000000000)) [ 692.603435] FAULT_INJECTION: forcing a failure. [ 692.603435] name failslab, interval 1, probability 0, space 0, times 0 [ 692.624735] CPU: 0 PID: 31421 Comm: syz-executor5 Not tainted 4.20.0-rc4+ #138 [ 692.632115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 692.641470] Call Trace: [ 692.644111] dump_stack+0x244/0x39d [ 692.647778] ? dump_stack_print_info.cold.1+0x20/0x20 [ 692.652994] ? __kernel_text_address+0xd/0x40 [ 692.657499] ? unwind_get_return_address+0x61/0xa0 [ 692.662455] should_fail.cold.4+0xa/0x17 [ 692.666554] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 692.671672] ? save_stack+0xa9/0xd0 [ 692.675333] ? kasan_kmalloc+0xc7/0xe0 [ 692.679235] ? kasan_slab_alloc+0x12/0x20 [ 692.683414] ? kmem_cache_alloc+0x12e/0x730 [ 692.687746] ? mmu_topup_memory_caches+0xfb/0x470 [ 692.692603] ? kvm_mmu_load+0x21/0x1290 [ 692.696601] ? kvm_arch_vcpu_ioctl_run+0x2889/0x7320 [ 692.701713] ? zap_class+0x640/0x640 [ 692.705435] ? __x64_sys_ioctl+0x73/0xb0 [ 692.709514] ? do_syscall_64+0x1b9/0x820 [ 692.713591] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 692.718970] ? find_held_lock+0x36/0x1c0 [ 692.723050] ? __lock_is_held+0xb5/0x140 [ 692.727155] ? perf_trace_sched_process_exec+0x860/0x860 [ 692.732638] __should_failslab+0x124/0x180 [ 692.736908] should_failslab+0x9/0x14 [ 692.740726] kmem_cache_alloc+0x2be/0x730 [ 692.744891] ? lock_acquire+0x1ed/0x520 [ 692.748877] ? kvm_arch_vcpu_ioctl_run+0x30f/0x7320 09:02:49 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fce496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:02:49 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5f2e496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:02:49 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20000000001b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x10000000, 0x0, 0x8, 0x0, 0x7}) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x4000, 0x0) 09:02:49 executing program 3: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20000000001b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x10000000, 0x0, 0x8, 0x0, 0x7}) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0xffefffffff7f0000, 0x0) [ 692.753924] ? mmu_topup_memory_caches+0xfb/0x470 [ 692.758783] mmu_topup_memory_caches+0xfb/0x470 [ 692.763455] ? kvm_inject_realmode_interrupt+0x260/0x260 [ 692.763478] kvm_mmu_load+0x21/0x1290 [ 692.763499] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 692.763550] ? vmx_clear_hlt.isra.39+0xa5/0xd0 [ 692.763570] kvm_arch_vcpu_ioctl_run+0x2889/0x7320 [ 692.787839] ? kvm_vcpu_ioctl+0x1e5/0x1150 [ 692.792096] ? kvm_arch_vcpu_runnable+0x710/0x710 [ 692.792113] ? zap_class+0x640/0x640 [ 692.792129] ? __lock_acquire+0x62f/0x4c20 [ 692.792151] ? lock_downgrade+0x900/0x900 [ 692.800708] ? check_preemption_disabled+0x48/0x280 [ 692.800739] ? find_held_lock+0x36/0x1c0 [ 692.800764] ? get_task_pid+0x1ea/0x3b0 [ 692.800784] ? lock_downgrade+0x900/0x900 [ 692.826417] ? check_preemption_disabled+0x48/0x280 [ 692.831448] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 692.836386] ? kasan_check_read+0x11/0x20 [ 692.840542] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 692.845830] ? rcu_softirq_qs+0x20/0x20 [ 692.849841] ? get_task_pid+0x211/0x3b0 09:02:49 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5f23496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:02:49 executing program 4: r0 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x0, 0x0) ioctl$SG_GET_KEEP_ORPHAN(r0, 0x2288, &(0x7f0000000100)) perf_event_open(&(0x7f0000000040)={0x80000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @dev, @dev}, &(0x7f0000000180)=0xc) ioctl$RTC_EPOCH_READ(r0, 0xc0287c02, &(0x7f0000000040)) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20, 0xfffffffffffffff5, 0x6, {0x5b, 0x4, 0x7fff, 0x8}}, 0x20) ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0x1e54) [ 692.853818] ? find_get_pid+0x270/0x270 [ 692.857808] ? zap_class+0x640/0x640 [ 692.861532] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 692.867106] kvm_vcpu_ioctl+0x5c8/0x1150 [ 692.871178] ? kvm_vcpu_ioctl+0x5c8/0x1150 [ 692.875441] ? kvm_uevent_notify_change.part.32+0x450/0x450 [ 692.881168] ? find_held_lock+0x36/0x1c0 [ 692.885268] ? __fget+0x4aa/0x740 [ 692.888750] ? check_preemption_disabled+0x48/0x280 [ 692.893785] ? kasan_check_read+0x11/0x20 [ 692.897936] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 692.897952] ? rcu_softirq_qs+0x20/0x20 [ 692.897978] ? __fget+0x4d1/0x740 [ 692.897998] ? ksys_dup3+0x680/0x680 [ 692.910717] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 692.919335] ? kvm_uevent_notify_change.part.32+0x450/0x450 [ 692.925061] do_vfs_ioctl+0x1de/0x1790 [ 692.928981] ? __lock_is_held+0xb5/0x140 [ 692.933055] ? ioctl_preallocate+0x300/0x300 [ 692.937474] ? __fget_light+0x2e9/0x430 [ 692.941459] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 692.947493] ? smack_file_ioctl+0x210/0x3c0 09:02:49 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5f55496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) [ 692.951823] ? fget_raw+0x20/0x20 [ 692.955301] ? smack_file_lock+0x2e0/0x2e0 [ 692.959549] ? __sb_end_write+0xd9/0x110 [ 692.963651] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 692.969200] ? fput+0x130/0x1a0 [ 692.972504] ? do_syscall_64+0x9a/0x820 [ 692.976513] ? do_syscall_64+0x9a/0x820 [ 692.980520] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 692.986068] ? security_file_ioctl+0x94/0xc0 [ 692.990490] ksys_ioctl+0xa9/0xd0 [ 692.993976] __x64_sys_ioctl+0x73/0xb0 [ 692.997890] do_syscall_64+0x1b9/0x820 [ 693.001790] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 693.007170] ? syscall_return_slowpath+0x5e0/0x5e0 [ 693.012110] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 693.016969] ? trace_hardirqs_on_caller+0x310/0x310 [ 693.022011] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 693.027040] ? prepare_exit_to_usermode+0x291/0x3b0 [ 693.032071] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 693.036940] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 693.042152] RIP: 0033:0x457569 [ 693.045878] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 693.064816] RSP: 002b:00007f8018763c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 693.072541] RAX: ffffffffffffffda RBX: 00007f8018763c90 RCX: 0000000000457569 [ 693.079946] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 693.087215] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 693.094473] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f80187646d4 [ 693.101739] R13: 00000000004c034e R14: 00000000004d0d60 R15: 0000000000000007 09:02:49 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x34]}, 0x10) 09:02:49 executing program 4: syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x80000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:02:49 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5f19496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:02:49 executing program 5 (fault-call:8 fault-nth:13): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000000)={'teql0\x00', {0x2, 0x0, @dev}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:02:49 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vhci\x00', 0x4400, 0x0) bind$vsock_stream(r0, &(0x7f00000005c0)={0x28, 0x0, 0x1, @reserved}, 0x1c3) r1 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x80000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_READ(r1, 0xc0287c02, &(0x7f0000000040)) 09:02:49 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5f8d496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:02:49 executing program 4: r0 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x80000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f0000000100)={[{0x7ff, 0x4, 0x3, 0x7, 0x7fffffff, 0x8000, 0x7, 0x400, 0x3, 0x0, 0x7, 0x80, 0x2}, {0x100000001, 0x90, 0x9, 0x2, 0x1ff, 0xd6, 0xf9b, 0x9, 0x4, 0x5, 0x1, 0x1ff, 0x400}, {0x7, 0x2, 0xb20, 0x401, 0x3, 0x4, 0x10001, 0x7, 0x8, 0x2, 0xffffffff8d240da6, 0x0, 0x7}], 0x6}) ioctl$RTC_EPOCH_READ(r0, 0xc0287c02, &(0x7f0000000040)) [ 693.282531] FAULT_INJECTION: forcing a failure. [ 693.282531] name failslab, interval 1, probability 0, space 0, times 0 [ 693.315005] CPU: 0 PID: 31471 Comm: syz-executor5 Not tainted 4.20.0-rc4+ #138 [ 693.322397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 693.331752] Call Trace: [ 693.334338] dump_stack+0x244/0x39d [ 693.337973] ? dump_stack_print_info.cold.1+0x20/0x20 [ 693.343179] ? __kernel_text_address+0xd/0x40 [ 693.347688] ? unwind_get_return_address+0x61/0xa0 [ 693.352671] should_fail.cold.4+0xa/0x17 [ 693.356745] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 693.361863] ? save_stack+0xa9/0xd0 [ 693.365501] ? kasan_kmalloc+0xc7/0xe0 [ 693.369398] ? kasan_slab_alloc+0x12/0x20 [ 693.369414] ? kmem_cache_alloc+0x12e/0x730 [ 693.369432] ? mmu_topup_memory_caches+0xfb/0x470 [ 693.369448] ? kvm_mmu_load+0x21/0x1290 [ 693.369462] ? kvm_arch_vcpu_ioctl_run+0x2889/0x7320 [ 693.369483] ? zap_class+0x640/0x640 [ 693.377940] ? __x64_sys_ioctl+0x73/0xb0 [ 693.377958] ? do_syscall_64+0x1b9/0x820 [ 693.377978] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 693.409093] ? find_held_lock+0x36/0x1c0 [ 693.413162] ? __lock_is_held+0xb5/0x140 [ 693.417219] ? perf_trace_sched_process_exec+0x860/0x860 [ 693.422666] __should_failslab+0x124/0x180 [ 693.426894] should_failslab+0x9/0x14 [ 693.430684] kmem_cache_alloc+0x2be/0x730 [ 693.434818] ? lock_acquire+0x1ed/0x520 [ 693.438864] ? kvm_arch_vcpu_ioctl_run+0x30f/0x7320 [ 693.443884] ? mmu_topup_memory_caches+0xfb/0x470 [ 693.448731] mmu_topup_memory_caches+0xfb/0x470 [ 693.453389] ? kvm_inject_realmode_interrupt+0x260/0x260 [ 693.458826] kvm_mmu_load+0x21/0x1290 [ 693.462617] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 693.468145] ? vmx_clear_hlt.isra.39+0xa5/0xd0 [ 693.472716] kvm_arch_vcpu_ioctl_run+0x2889/0x7320 [ 693.477632] ? kvm_vcpu_ioctl+0x1e5/0x1150 [ 693.481863] ? kvm_arch_vcpu_runnable+0x710/0x710 [ 693.486695] ? zap_class+0x640/0x640 [ 693.490395] ? __lock_acquire+0x62f/0x4c20 [ 693.494615] ? lock_downgrade+0x900/0x900 [ 693.498758] ? check_preemption_disabled+0x48/0x280 [ 693.503779] ? find_held_lock+0x36/0x1c0 [ 693.507835] ? get_task_pid+0x1ea/0x3b0 [ 693.511800] ? lock_downgrade+0x900/0x900 [ 693.515934] ? check_preemption_disabled+0x48/0x280 [ 693.520939] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 693.525856] ? kasan_check_read+0x11/0x20 [ 693.529990] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 693.535263] ? rcu_softirq_qs+0x20/0x20 [ 693.539275] ? get_task_pid+0x211/0x3b0 [ 693.543262] ? find_get_pid+0x270/0x270 [ 693.547223] ? zap_class+0x640/0x640 [ 693.550930] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 693.556457] kvm_vcpu_ioctl+0x5c8/0x1150 [ 693.560505] ? kvm_vcpu_ioctl+0x5c8/0x1150 [ 693.564730] ? kvm_uevent_notify_change.part.32+0x450/0x450 [ 693.570442] ? find_held_lock+0x36/0x1c0 [ 693.574510] ? __fget+0x4aa/0x740 [ 693.577951] ? check_preemption_disabled+0x48/0x280 [ 693.582962] ? kasan_check_read+0x11/0x20 [ 693.587097] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 693.592358] ? rcu_softirq_qs+0x20/0x20 [ 693.596348] ? __fget+0x4d1/0x740 [ 693.599806] ? ksys_dup3+0x680/0x680 [ 693.603513] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 693.608435] ? kvm_uevent_notify_change.part.32+0x450/0x450 [ 693.614136] do_vfs_ioctl+0x1de/0x1790 [ 693.618008] ? __lock_is_held+0xb5/0x140 [ 693.622067] ? ioctl_preallocate+0x300/0x300 [ 693.626478] ? __fget_light+0x2e9/0x430 [ 693.630446] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 693.635985] ? smack_file_ioctl+0x210/0x3c0 [ 693.640292] ? fget_raw+0x20/0x20 [ 693.643731] ? smack_file_lock+0x2e0/0x2e0 [ 693.647953] ? __sb_end_write+0xd9/0x110 [ 693.652004] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 693.657525] ? fput+0x130/0x1a0 [ 693.660810] ? do_syscall_64+0x9a/0x820 [ 693.664801] ? do_syscall_64+0x9a/0x820 [ 693.668787] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 693.674310] ? security_file_ioctl+0x94/0xc0 [ 693.678722] ksys_ioctl+0xa9/0xd0 [ 693.682163] __x64_sys_ioctl+0x73/0xb0 [ 693.686058] do_syscall_64+0x1b9/0x820 [ 693.689960] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 693.695327] ? syscall_return_slowpath+0x5e0/0x5e0 [ 693.700242] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 693.705101] ? trace_hardirqs_on_caller+0x310/0x310 [ 693.710125] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 693.715131] ? prepare_exit_to_usermode+0x291/0x3b0 [ 693.720134] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 693.724965] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 693.730140] RIP: 0033:0x457569 [ 693.733333] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 693.752229] RSP: 002b:00007f8018763c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 693.759944] RAX: ffffffffffffffda RBX: 00007f8018763c90 RCX: 0000000000457569 [ 693.767203] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 693.774458] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 693.781711] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f80187646d4 [ 693.788964] R13: 00000000004c034e R14: 00000000004d0d60 R15: 0000000000000007 09:02:52 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20000000001b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x10000000, 0x0, 0x8, 0x0, 0x7}) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x930000, 0x0) 09:02:52 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0xe00000000000000]}, 0x10) 09:02:52 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff8d]}, 0x10) 09:02:52 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) readahead(r0, 0x1ff, 0x4) r1 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x80000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_READ(r1, 0xc0287c02, &(0x7f0000000040)) 09:02:52 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5f0b496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:02:52 executing program 5 (fault-call:8 fault-nth:14): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000000)={'teql0\x00', {0x2, 0x0, @dev}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:02:52 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20000000001b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x10000000, 0x0, 0x8, 0x0, 0x7}) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x60ffffffffff, 0x0) 09:02:52 executing program 4: r0 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) perf_event_open(&(0x7f0000000040)={0x80000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_READ(r0, 0xc0287c02, &(0x7f0000000040)) 09:02:52 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fc8496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) [ 695.930064] FAULT_INJECTION: forcing a failure. [ 695.930064] name failslab, interval 1, probability 0, space 0, times 0 09:02:52 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20000000001b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x10000000, 0x0, 0x8, 0x0, 0x7}) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x8000000000000000, 0x0) [ 695.977954] CPU: 0 PID: 31501 Comm: syz-executor5 Not tainted 4.20.0-rc4+ #138 [ 695.985350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 695.994706] Call Trace: [ 695.997354] dump_stack+0x244/0x39d [ 696.001018] ? dump_stack_print_info.cold.1+0x20/0x20 [ 696.006239] should_fail.cold.4+0xa/0x17 [ 696.010341] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 696.015464] ? save_stack+0xa9/0xd0 [ 696.019111] ? kasan_kmalloc+0xc7/0xe0 [ 696.023013] ? kasan_slab_alloc+0x12/0x20 09:02:52 executing program 4: r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xc63d, 0x0) ioctl$VIDIOC_DECODER_CMD(r0, 0xc0485660, &(0x7f0000000180)={0x0, 0x1, @start={0x1, 0x1}}) r1 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x80000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000280)=@sack_info={0x0, 0x7, 0xff}, &(0x7f00000002c0)=0xc) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000300)={r2, 0xb2, 0x20}, &(0x7f0000000340)=0xc) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000700)={0x8, @sliced={0x7f, [0x1, 0x2, 0x100000001, 0x2, 0x200, 0x36, 0x80000000, 0x10001, 0x2, 0x20, 0x7f, 0x100000000, 0x7fffffff, 0x8, 0x401, 0x7, 0x3, 0x8, 0x2, 0x8, 0x6, 0x9, 0x6, 0x40, 0x1f, 0x9, 0x400, 0x7fffffff, 0x5, 0x4, 0xd86, 0x5, 0xffffffffffff8b49, 0x6, 0x800, 0x20, 0x2, 0x6, 0x5, 0x4, 0x180000000000000, 0x8, 0x65, 0x7, 0x48c, 0x3f, 0x1ff, 0x6], 0x1}}) ioctl$RTC_EPOCH_READ(r1, 0xc0287c02, &(0x7f0000000040)) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000440)={{{@in=@dev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f0000000540)=0xe8) fstat(r1, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000600)={{{@in=@rand_addr=0x8, @in6=@ipv4={[], [], @local}, 0x4e20, 0x3, 0x4e24, 0xd0, 0xa, 0x0, 0x20, 0x0, r3, r4}, {0x1, 0xffffffffffffffff, 0xf6, 0x800, 0xfffffffffffffff8, 0x8000, 0x9, 0x7}, {0x1ff, 0xb9d, 0x3, 0x19}, 0xfffffffffffffffd, 0x0, 0x0, 0x1, 0x1, 0x3}, {{@in=@broadcast, 0x4d5, 0x6f}, 0xa, @in6=@local, 0x3505, 0x0, 0x2, 0x80, 0x0, 0x3, 0x101}}, 0xe8) write$FUSE_DIRENT(r1, &(0x7f0000000100)={0x60, 0x0, 0x6, [{0x1, 0x70, 0xc, 0x3, '/dev/media#\x00'}, {0x3, 0x2, 0xc, 0x2, '/dev/media#\x00'}]}, 0x60) accept4$inet(r0, &(0x7f0000000200)={0x2, 0x0, @remote}, &(0x7f0000000240)=0x10, 0x80800) [ 696.027169] ? kmem_cache_alloc+0x12e/0x730 [ 696.031503] ? mmu_topup_memory_caches+0xfb/0x470 [ 696.036972] ? kvm_mmu_load+0x21/0x1290 [ 696.040957] ? kvm_arch_vcpu_ioctl_run+0x2889/0x7320 [ 696.046074] ? zap_class+0x640/0x640 [ 696.049796] ? __x64_sys_ioctl+0x73/0xb0 [ 696.053871] ? do_syscall_64+0x1b9/0x820 [ 696.057939] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 696.063322] ? find_held_lock+0x36/0x1c0 [ 696.067403] ? __lock_is_held+0xb5/0x140 [ 696.071492] ? perf_trace_sched_process_exec+0x860/0x860 09:02:52 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5f84496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) [ 696.076963] __should_failslab+0x124/0x180 [ 696.081213] should_failslab+0x9/0x14 [ 696.085034] kmem_cache_alloc+0x2be/0x730 [ 696.089185] ? lock_acquire+0x1ed/0x520 [ 696.089201] ? kvm_arch_vcpu_ioctl_run+0x30f/0x7320 [ 696.089218] ? mmu_topup_memory_caches+0xfb/0x470 [ 696.089239] mmu_topup_memory_caches+0xfb/0x470 [ 696.089275] ? kvm_inject_realmode_interrupt+0x260/0x260 [ 696.113219] kvm_mmu_load+0x21/0x1290 [ 696.117143] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 696.122691] ? vmx_clear_hlt.isra.39+0xa5/0xd0 [ 696.122714] kvm_arch_vcpu_ioctl_run+0x2889/0x7320 [ 696.122733] ? perf_trace_lock_acquire+0x15b/0x800 [ 696.122763] ? kvm_arch_vcpu_runnable+0x710/0x710 [ 696.142028] ? zap_class+0x640/0x640 [ 696.145758] ? __lock_acquire+0x62f/0x4c20 [ 696.150010] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 696.155575] ? find_held_lock+0x36/0x1c0 [ 696.159659] ? get_task_pid+0x1ea/0x3b0 [ 696.163650] ? lock_downgrade+0x900/0x900 [ 696.167813] ? check_preemption_disabled+0x48/0x280 [ 696.172888] ? rcu_read_unlock_special+0x1c0/0x1c0 09:02:52 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0xea9, 0x1ffff) perf_event_open(&(0x7f0000000040)={0x80000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_READ(r0, 0xc0287c02, &(0x7f0000000040)) [ 696.177844] ? kasan_check_read+0x11/0x20 [ 696.182001] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 696.187300] ? rcu_softirq_qs+0x20/0x20 [ 696.191318] ? get_task_pid+0x211/0x3b0 [ 696.195305] ? find_get_pid+0x270/0x270 [ 696.199297] ? zap_class+0x640/0x640 [ 696.203038] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 696.208596] kvm_vcpu_ioctl+0x5c8/0x1150 [ 696.212667] ? kvm_vcpu_ioctl+0x5c8/0x1150 [ 696.216936] ? kvm_uevent_notify_change.part.32+0x450/0x450 [ 696.222662] ? find_held_lock+0x36/0x1c0 [ 696.226745] ? __fget+0x4aa/0x740 [ 696.230212] ? check_preemption_disabled+0x48/0x280 [ 696.235270] ? kasan_check_read+0x11/0x20 [ 696.239434] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 696.244723] ? rcu_softirq_qs+0x20/0x20 [ 696.248722] ? __fget+0x4d1/0x740 [ 696.252194] ? ksys_dup3+0x680/0x680 [ 696.255931] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 696.260879] ? kvm_uevent_notify_change.part.32+0x450/0x450 [ 696.266597] do_vfs_ioctl+0x1de/0x1790 [ 696.270498] ? __lock_is_held+0xb5/0x140 [ 696.274569] ? ioctl_preallocate+0x300/0x300 [ 696.279006] ? __fget_light+0x2e9/0x430 [ 696.282986] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 696.283006] ? smack_file_ioctl+0x210/0x3c0 [ 696.283019] ? fget_raw+0x20/0x20 [ 696.283040] ? smack_file_lock+0x2e0/0x2e0 [ 696.292883] ? __sb_end_write+0xd9/0x110 [ 696.292904] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 696.292919] ? fput+0x130/0x1a0 [ 696.292937] ? do_syscall_64+0x9a/0x820 [ 696.292952] ? do_syscall_64+0x9a/0x820 [ 696.292972] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 696.292988] ? security_file_ioctl+0x94/0xc0 [ 696.293007] ksys_ioctl+0xa9/0xd0 [ 696.334821] __x64_sys_ioctl+0x73/0xb0 [ 696.338728] do_syscall_64+0x1b9/0x820 [ 696.342599] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 696.347948] ? syscall_return_slowpath+0x5e0/0x5e0 [ 696.352883] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 696.357711] ? trace_hardirqs_on_caller+0x310/0x310 [ 696.362714] ? prepare_exit_to_usermode+0x291/0x3b0 [ 696.367732] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 696.372579] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 696.377792] RIP: 0033:0x457569 [ 696.380969] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 696.399850] RSP: 002b:00007f8018763c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 696.407539] RAX: ffffffffffffffda RBX: 00007f8018763c90 RCX: 0000000000457569 [ 696.414793] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 696.422045] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 09:02:52 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5f10496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:02:52 executing program 4: r0 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x80000005, 0x70, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x92f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffea2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x55, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_READ(r0, 0xc0287c02, &(0x7f0000000040)) 09:02:52 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0xe00000000000000]}, 0x10) 09:02:52 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4002]}, 0x10) [ 696.429307] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f80187646d4 [ 696.436566] R13: 00000000004c034e R14: 00000000004d0d60 R15: 0000000000000007 09:02:52 executing program 5 (fault-call:8 fault-nth:15): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000000)={'teql0\x00', {0x2, 0x0, @dev}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:02:52 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5f4a496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:02:52 executing program 4: r0 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x80000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x840}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x104, r1, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7ff}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e21}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip_vti0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x627}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xb}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x11}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x73}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x81}, 0x48001) ioctl$RTC_EPOCH_READ(r0, 0xc0287c02, &(0x7f0000000040)) 09:02:52 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0xe803]}, 0x10) [ 696.637732] FAULT_INJECTION: forcing a failure. [ 696.637732] name failslab, interval 1, probability 0, space 0, times 0 [ 696.673823] CPU: 0 PID: 31558 Comm: syz-executor5 Not tainted 4.20.0-rc4+ #138 [ 696.681227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 696.690596] Call Trace: [ 696.693214] dump_stack+0x244/0x39d [ 696.696883] ? dump_stack_print_info.cold.1+0x20/0x20 [ 696.702096] ? __kernel_text_address+0xd/0x40 [ 696.706606] ? unwind_get_return_address+0x61/0xa0 [ 696.711552] should_fail.cold.4+0xa/0x17 [ 696.711576] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 696.711599] ? save_stack+0xa9/0xd0 [ 696.711619] ? kasan_kmalloc+0xc7/0xe0 [ 696.711635] ? kasan_slab_alloc+0x12/0x20 [ 696.711651] ? kmem_cache_alloc+0x12e/0x730 [ 696.711673] ? mmu_topup_memory_caches+0xfb/0x470 [ 696.741629] ? kvm_mmu_load+0x21/0x1290 [ 696.745619] ? kvm_arch_vcpu_ioctl_run+0x2889/0x7320 [ 696.750739] ? zap_class+0x640/0x640 [ 696.754465] ? __x64_sys_ioctl+0x73/0xb0 [ 696.758546] ? do_syscall_64+0x1b9/0x820 [ 696.762618] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 696.768008] ? find_held_lock+0x36/0x1c0 [ 696.772090] ? __lock_is_held+0xb5/0x140 [ 696.776190] ? perf_trace_sched_process_exec+0x860/0x860 [ 696.781667] __should_failslab+0x124/0x180 [ 696.785916] should_failslab+0x9/0x14 [ 696.789722] kmem_cache_alloc+0x2be/0x730 [ 696.793871] ? lock_acquire+0x1ed/0x520 [ 696.797851] ? kvm_arch_vcpu_ioctl_run+0x30f/0x7320 [ 696.802875] ? mmu_topup_memory_caches+0xfb/0x470 [ 696.807726] mmu_topup_memory_caches+0xfb/0x470 [ 696.812404] ? kvm_inject_realmode_interrupt+0x260/0x260 [ 696.817870] kvm_mmu_load+0x21/0x1290 [ 696.821687] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 696.827230] ? vmx_clear_hlt.isra.39+0xa5/0xd0 [ 696.831848] kvm_arch_vcpu_ioctl_run+0x2889/0x7320 [ 696.836786] ? kvm_vcpu_ioctl+0x1e5/0x1150 [ 696.841048] ? kvm_arch_vcpu_runnable+0x710/0x710 [ 696.845893] ? zap_class+0x640/0x640 [ 696.849615] ? __lock_acquire+0x62f/0x4c20 [ 696.853858] ? lock_downgrade+0x900/0x900 [ 696.858013] ? check_preemption_disabled+0x48/0x280 [ 696.863053] ? find_held_lock+0x36/0x1c0 [ 696.867131] ? get_task_pid+0x1ea/0x3b0 [ 696.871114] ? lock_downgrade+0x900/0x900 [ 696.875280] ? check_preemption_disabled+0x48/0x280 [ 696.880309] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 696.885283] ? kasan_check_read+0x11/0x20 [ 696.889451] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 696.894730] ? rcu_softirq_qs+0x20/0x20 [ 696.898727] ? get_task_pid+0x211/0x3b0 [ 696.902709] ? find_get_pid+0x270/0x270 [ 696.906682] ? zap_class+0x640/0x640 [ 696.910401] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 696.915966] kvm_vcpu_ioctl+0x5c8/0x1150 [ 696.920026] ? kvm_vcpu_ioctl+0x5c8/0x1150 [ 696.924286] ? kvm_uevent_notify_change.part.32+0x450/0x450 [ 696.930007] ? find_held_lock+0x36/0x1c0 [ 696.934082] ? __fget+0x4aa/0x740 [ 696.937557] ? check_preemption_disabled+0x48/0x280 [ 696.942586] ? kasan_check_read+0x11/0x20 [ 696.947240] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 696.952535] ? rcu_softirq_qs+0x20/0x20 [ 696.956528] ? __fget+0x4d1/0x740 [ 696.960009] ? ksys_dup3+0x680/0x680 [ 696.963739] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 696.968678] ? kvm_uevent_notify_change.part.32+0x450/0x450 [ 696.974394] do_vfs_ioctl+0x1de/0x1790 [ 696.978293] ? __lock_is_held+0xb5/0x140 [ 696.982366] ? ioctl_preallocate+0x300/0x300 [ 696.986779] ? __fget_light+0x2e9/0x430 [ 696.990757] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 696.996299] ? smack_file_ioctl+0x210/0x3c0 [ 697.000618] ? fget_raw+0x20/0x20 [ 697.004075] ? smack_file_lock+0x2e0/0x2e0 [ 697.008334] ? __sb_end_write+0xd9/0x110 [ 697.012410] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 697.017950] ? fput+0x130/0x1a0 [ 697.021269] ? do_syscall_64+0x9a/0x820 [ 697.025257] ? do_syscall_64+0x9a/0x820 [ 697.029265] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 697.034812] ? security_file_ioctl+0x94/0xc0 [ 697.039233] ksys_ioctl+0xa9/0xd0 [ 697.042715] __x64_sys_ioctl+0x73/0xb0 [ 697.046611] do_syscall_64+0x1b9/0x820 [ 697.050505] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 697.055924] ? syscall_return_slowpath+0x5e0/0x5e0 [ 697.060854] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 697.065709] ? trace_hardirqs_on_caller+0x310/0x310 [ 697.070736] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 697.075761] ? prepare_exit_to_usermode+0x291/0x3b0 [ 697.080984] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 697.085843] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 697.091034] RIP: 0033:0x457569 [ 697.094231] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 697.113161] RSP: 002b:00007f8018763c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 697.120870] RAX: ffffffffffffffda RBX: 00007f8018763c90 RCX: 0000000000457569 [ 697.128152] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 697.135423] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 697.142696] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f80187646d4 [ 697.149967] R13: 00000000004c034e R14: 00000000004d0d60 R15: 0000000000000007 09:02:55 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20000000001b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x10000000, 0x0, 0x8, 0x0, 0x7}) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0xffc99a3b00000000, 0x0) 09:02:55 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0xe00000000000000]}, 0x10) 09:02:55 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000100), 0x4) r1 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x80000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x904e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_READ(r1, 0xc0287c02, &(0x7f0000000040)) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) 09:02:55 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fba496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:02:55 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1114bce6]}, 0x10) 09:02:55 executing program 5 (fault-call:8 fault-nth:16): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000000)={'teql0\x00', {0x2, 0x0, @dev}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:02:55 executing program 3: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20000000001b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x10000000, 0x0, 0x8, 0x0, 0x7}) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0xffffffff00000000, 0x0) 09:02:55 executing program 4: r0 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x80000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_READ(r0, 0xc0287c02, &(0x7f0000000040)) 09:02:55 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5f83496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:02:55 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff0f0000]}, 0x10) [ 699.169873] FAULT_INJECTION: forcing a failure. [ 699.169873] name failslab, interval 1, probability 0, space 0, times 0 [ 699.222044] CPU: 1 PID: 31577 Comm: syz-executor5 Not tainted 4.20.0-rc4+ #138 [ 699.229439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 699.238799] Call Trace: [ 699.241407] dump_stack+0x244/0x39d [ 699.245056] ? dump_stack_print_info.cold.1+0x20/0x20 [ 699.250280] ? __kernel_text_address+0xd/0x40 [ 699.254800] ? unwind_get_return_address+0x61/0xa0 [ 699.259751] should_fail.cold.4+0xa/0x17 [ 699.263863] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 699.268986] ? save_stack+0xa9/0xd0 [ 699.272627] ? kasan_kmalloc+0xc7/0xe0 [ 699.276521] ? kasan_slab_alloc+0x12/0x20 [ 699.280676] ? kmem_cache_alloc+0x12e/0x730 [ 699.285010] ? mmu_topup_memory_caches+0xfb/0x470 [ 699.289860] ? kvm_mmu_load+0x21/0x1290 [ 699.293845] ? kvm_arch_vcpu_ioctl_run+0x2889/0x7320 [ 699.298970] ? zap_class+0x640/0x640 [ 699.302688] ? __x64_sys_ioctl+0x73/0xb0 [ 699.306790] ? do_syscall_64+0x1b9/0x820 [ 699.310853] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 699.316233] ? find_held_lock+0x36/0x1c0 [ 699.320317] ? __lock_is_held+0xb5/0x140 [ 699.324409] ? perf_trace_sched_process_exec+0x860/0x860 [ 699.329882] __should_failslab+0x124/0x180 [ 699.334129] should_failslab+0x9/0x14 [ 699.337938] kmem_cache_alloc+0x2be/0x730 [ 699.342092] ? lock_acquire+0x1ed/0x520 [ 699.346076] ? kvm_arch_vcpu_ioctl_run+0x30f/0x7320 [ 699.351099] ? mmu_topup_memory_caches+0xfb/0x470 [ 699.355968] mmu_topup_memory_caches+0xfb/0x470 [ 699.360642] ? kvm_inject_realmode_interrupt+0x260/0x260 [ 699.366104] kvm_mmu_load+0x21/0x1290 [ 699.369909] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 699.375455] ? vmx_clear_hlt.isra.39+0xa5/0xd0 [ 699.380052] kvm_arch_vcpu_ioctl_run+0x2889/0x7320 [ 699.384994] ? kvm_vcpu_ioctl+0x1e5/0x1150 [ 699.389264] ? kvm_arch_vcpu_runnable+0x710/0x710 [ 699.394119] ? zap_class+0x640/0x640 [ 699.397844] ? __lock_acquire+0x62f/0x4c20 [ 699.402084] ? lock_downgrade+0x900/0x900 [ 699.406241] ? check_preemption_disabled+0x48/0x280 [ 699.411301] ? find_held_lock+0x36/0x1c0 [ 699.415382] ? get_task_pid+0x1ea/0x3b0 [ 699.419363] ? lock_downgrade+0x900/0x900 [ 699.423520] ? check_preemption_disabled+0x48/0x280 [ 699.428548] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 699.433482] ? kasan_check_read+0x11/0x20 [ 699.437642] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 699.442955] ? rcu_softirq_qs+0x20/0x20 [ 699.446967] ? get_task_pid+0x211/0x3b0 [ 699.450952] ? find_get_pid+0x270/0x270 [ 699.454930] ? zap_class+0x640/0x640 [ 699.458652] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 699.464280] kvm_vcpu_ioctl+0x5c8/0x1150 [ 699.468350] ? kvm_vcpu_ioctl+0x5c8/0x1150 [ 699.472602] ? kvm_uevent_notify_change.part.32+0x450/0x450 [ 699.478342] ? find_held_lock+0x36/0x1c0 [ 699.482423] ? __fget+0x4aa/0x740 [ 699.485890] ? check_preemption_disabled+0x48/0x280 [ 699.490927] ? kasan_check_read+0x11/0x20 [ 699.495081] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 699.500363] ? rcu_softirq_qs+0x20/0x20 [ 699.504376] ? __fget+0x4d1/0x740 [ 699.507845] ? ksys_dup3+0x680/0x680 [ 699.511580] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 699.516525] ? kvm_uevent_notify_change.part.32+0x450/0x450 [ 699.522265] do_vfs_ioctl+0x1de/0x1790 [ 699.526158] ? __lock_is_held+0xb5/0x140 [ 699.530231] ? ioctl_preallocate+0x300/0x300 [ 699.534651] ? __fget_light+0x2e9/0x430 [ 699.538636] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 699.544191] ? smack_file_ioctl+0x210/0x3c0 [ 699.548512] ? fget_raw+0x20/0x20 [ 699.551969] ? smack_file_lock+0x2e0/0x2e0 [ 699.556213] ? __sb_end_write+0xd9/0x110 [ 699.560294] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 699.565836] ? fput+0x130/0x1a0 [ 699.569120] ? do_syscall_64+0x9a/0x820 [ 699.573100] ? do_syscall_64+0x9a/0x820 [ 699.577085] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 699.582631] ? security_file_ioctl+0x94/0xc0 [ 699.587051] ksys_ioctl+0xa9/0xd0 [ 699.590513] __x64_sys_ioctl+0x73/0xb0 [ 699.594438] do_syscall_64+0x1b9/0x820 [ 699.598344] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 699.603744] ? syscall_return_slowpath+0x5e0/0x5e0 [ 699.608678] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 699.613525] ? trace_hardirqs_on_caller+0x310/0x310 [ 699.618545] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 699.623569] ? prepare_exit_to_usermode+0x291/0x3b0 [ 699.628617] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 699.633478] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 699.638673] RIP: 0033:0x457569 [ 699.641872] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 699.660776] RSP: 002b:00007f8018763c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 09:02:56 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20000000001b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x10000000, 0x0, 0x8, 0x0, 0x7}) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x7300, 0x0) 09:02:56 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x200000, 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f0000001100)={0x81, 0x5, 0x1000, &(0x7f0000000100)="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"}) r1 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x80000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_READ(r1, 0xc0287c02, &(0x7f0000000040)) [ 699.668486] RAX: ffffffffffffffda RBX: 00007f8018763c90 RCX: 0000000000457569 [ 699.675755] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 699.683046] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 699.690316] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f80187646d4 [ 699.697589] R13: 00000000004c034e R14: 00000000004d0d60 R15: 0000000000000007 09:02:56 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0xa, 0x40080) perf_event_open(&(0x7f0000000040)={0x80000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x3}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_READ(r0, 0xc0287c02, &(0x7f0000000040)) 09:02:56 executing program 5 (fault-call:8 fault-nth:17): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000000)={'teql0\x00', {0x2, 0x0, @dev}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:02:56 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5f4b496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:02:56 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe6bc1411]}, 0x10) 09:02:56 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20000000001b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x10000000, 0x0, 0x8, 0x0, 0x7}) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x710000, 0x0) 09:02:56 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fca496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) [ 699.970702] FAULT_INJECTION: forcing a failure. [ 699.970702] name failslab, interval 1, probability 0, space 0, times 0 [ 700.012878] CPU: 1 PID: 31625 Comm: syz-executor5 Not tainted 4.20.0-rc4+ #138 [ 700.020274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 700.029634] Call Trace: [ 700.032270] dump_stack+0x244/0x39d [ 700.035943] ? dump_stack_print_info.cold.1+0x20/0x20 [ 700.041156] ? __kernel_text_address+0xd/0x40 [ 700.045670] ? unwind_get_return_address+0x61/0xa0 [ 700.050620] should_fail.cold.4+0xa/0x17 [ 700.054703] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 700.059822] ? save_stack+0xa9/0xd0 [ 700.063459] ? kasan_kmalloc+0xc7/0xe0 [ 700.067355] ? kasan_slab_alloc+0x12/0x20 [ 700.071510] ? kmem_cache_alloc+0x12e/0x730 [ 700.075843] ? mmu_topup_memory_caches+0xfb/0x470 [ 700.075875] ? kvm_mmu_load+0x21/0x1290 [ 700.075894] ? kvm_arch_vcpu_ioctl_run+0x2889/0x7320 [ 700.084701] ? zap_class+0x640/0x640 [ 700.084717] ? __x64_sys_ioctl+0x73/0xb0 [ 700.084739] ? do_syscall_64+0x1b9/0x820 [ 700.101647] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 700.107038] ? find_held_lock+0x36/0x1c0 [ 700.111140] ? __lock_is_held+0xb5/0x140 [ 700.115295] ? perf_trace_sched_process_exec+0x860/0x860 [ 700.120799] __should_failslab+0x124/0x180 [ 700.125029] should_failslab+0x9/0x14 [ 700.128815] kmem_cache_alloc+0x2be/0x730 [ 700.132946] ? retint_kernel+0x2d/0x2d [ 700.136821] ? mmu_topup_memory_caches+0xfb/0x470 [ 700.141651] mmu_topup_memory_caches+0xfb/0x470 [ 700.146310] kvm_mmu_load+0x21/0x1290 [ 700.150101] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 700.155627] ? vmx_clear_hlt.isra.39+0xa5/0xd0 [ 700.160200] kvm_arch_vcpu_ioctl_run+0x2889/0x7320 [ 700.165116] ? kvm_vcpu_ioctl+0x1e5/0x1150 [ 700.169345] ? kvm_arch_vcpu_runnable+0x710/0x710 [ 700.174171] ? zap_class+0x640/0x640 [ 700.177870] ? __lock_acquire+0x62f/0x4c20 [ 700.182090] ? lock_downgrade+0x900/0x900 [ 700.186227] ? check_preemption_disabled+0x48/0x280 [ 700.191284] ? find_held_lock+0x36/0x1c0 [ 700.195347] ? get_task_pid+0x1ea/0x3b0 [ 700.199308] ? lock_downgrade+0x900/0x900 [ 700.203441] ? check_preemption_disabled+0x48/0x280 [ 700.208448] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 700.213366] ? kasan_check_read+0x11/0x20 [ 700.217502] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 700.222773] ? rcu_softirq_qs+0x20/0x20 [ 700.226738] ? get_task_pid+0x211/0x3b0 [ 700.230705] ? find_get_pid+0x270/0x270 [ 700.234674] ? zap_class+0x640/0x640 [ 700.238382] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 700.243910] kvm_vcpu_ioctl+0x5c8/0x1150 [ 700.247956] ? kvm_vcpu_ioctl+0x5c8/0x1150 [ 700.252178] ? kvm_uevent_notify_change.part.32+0x450/0x450 [ 700.257890] ? find_held_lock+0x36/0x1c0 [ 700.261944] ? __fget+0x4aa/0x740 [ 700.265383] ? check_preemption_disabled+0x48/0x280 [ 700.270390] ? kasan_check_read+0x11/0x20 [ 700.274524] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 700.279790] ? rcu_softirq_qs+0x20/0x20 [ 700.283752] ? __fget+0x4d1/0x740 [ 700.287194] ? ksys_dup3+0x680/0x680 [ 700.290898] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 700.295819] ? kvm_uevent_notify_change.part.32+0x450/0x450 [ 700.301518] do_vfs_ioctl+0x1de/0x1790 [ 700.305388] ? __lock_is_held+0xb5/0x140 [ 700.309436] ? ioctl_preallocate+0x300/0x300 [ 700.313848] ? __fget_light+0x2e9/0x430 [ 700.317808] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 700.323509] ? smack_file_ioctl+0x210/0x3c0 [ 700.327851] ? fget_raw+0x20/0x20 [ 700.331314] ? smack_file_lock+0x2e0/0x2e0 [ 700.335549] ? __sb_end_write+0xd9/0x110 [ 700.339609] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 700.345129] ? fput+0x130/0x1a0 [ 700.348409] ? do_syscall_64+0x9a/0x820 [ 700.352393] ? do_syscall_64+0x9a/0x820 [ 700.356371] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 700.361894] ? security_file_ioctl+0x94/0xc0 [ 700.366291] ksys_ioctl+0xa9/0xd0 [ 700.369729] __x64_sys_ioctl+0x73/0xb0 [ 700.373602] do_syscall_64+0x1b9/0x820 [ 700.377516] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 700.382899] ? syscall_return_slowpath+0x5e0/0x5e0 [ 700.387811] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 700.392643] ? trace_hardirqs_on_caller+0x310/0x310 [ 700.397646] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 700.402651] ? prepare_exit_to_usermode+0x291/0x3b0 [ 700.407673] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 700.412503] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 700.417685] RIP: 0033:0x457569 [ 700.420866] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 700.439753] RSP: 002b:00007f8018763c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 700.447449] RAX: ffffffffffffffda RBX: 00007f8018763c90 RCX: 0000000000457569 [ 700.454711] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 700.461983] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 700.469248] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f80187646d4 [ 700.476524] R13: 00000000004c034e R14: 00000000004d0d60 R15: 0000000000000007 09:02:58 executing program 3: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20000000001b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x10000000, 0x0, 0x8, 0x0, 0x7}) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0xffffffff00000000, 0x0) 09:02:58 executing program 4: r0 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x0, 0x0) write$FUSE_STATFS(r0, &(0x7f00000002c0)={0x60, 0x0, 0x8, {{0xe17, 0x100000001, 0x9, 0x2, 0x10000, 0x401, 0xff, 0xe41}}}, 0x60) perf_event_open(&(0x7f0000000040)={0x80000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_READ(r0, 0xc0287c02, &(0x7f0000000040)) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="e9f9e38a34d5a057527e76bbe75df9150f4a155da0b9d33dcb3e069fad39ab137798e7e82bf480b0586051d85ca84a1ea438f8d111f2fdad90dbc5cbb90da6e3644abe83aaddc08530d9a0d0924b36b0dd59e24394898d6bb43f9d5ede388fbed4848f45444d0fbc3b692c86b40e2e81a40dc876fb38314035e80a71839a26f81c84ccfd65750ce64158e9d7b70c92c0698aa92a6e555730f59a26db81bce3f6f8ebe9fd8ad426d052", 0xa9}, {&(0x7f00000001c0)="53a4e1b5dd4e2f9c80d503a8ade47996833a0104072d97c073a2c90002f390ced8c6b2f8898694887c2699cccd03f9024f545d63868a78c3ae073a18b132733fed961774b579dba29fa219a888fe6ea959698bd28b1e81a66db8ebb243bb1b21fe39b953583a26ff802d47dd4e5755e883e6eae14fe9ac82744cc76b440ed0a1f33a27ecebd523a573abad80c261eecd1ff1ddd5ec6456dedacda64b46fb2d30b591727143355b8ca279c4662bf7bde1a5160febfb63cf173a722335c6ffc03290fae1e367254730d153b0940192ecedb5cd420d", 0xd4}], 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000340)={{0x2, 0x4e24, @local}, {0x0, @remote}, 0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x14}}, 'veth0_to_bond\x00'}) 09:02:58 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fea496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:02:58 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20000000001b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x10000000, 0x0, 0x8, 0x0, 0x7}) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x100000000000000, 0x0) 09:02:58 executing program 5 (fault-call:8 fault-nth:18): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000000)={'teql0\x00', {0x2, 0x0, @dev}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:02:58 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1114bce6]}, 0x10) 09:02:58 executing program 4: r0 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x94001008}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x58, r1, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipddp0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x300000000}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) perf_event_open(&(0x7f0000000040)={0x80000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = semget$private(0x0, 0x3, 0x200) semctl$IPC_INFO(r2, 0x0, 0x3, &(0x7f0000000240)=""/193) ioctl$RTC_EPOCH_READ(r0, 0xc0287c02, &(0x7f0000000040)) 09:02:58 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20000000001b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x10000000, 0x0, 0x8, 0x0, 0x7}) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0xfeffffff00000000, 0x0) 09:02:58 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fb4496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:02:58 executing program 3: r0 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x80000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_READ(r0, 0x5452, &(0x7f0000000040)) 09:02:58 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeffffff00000000]}, 0x10) 09:02:58 executing program 4: ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f0000000000)={0x5, 0x39, 0xa, 0x1a, 0xa, 0x1, 0x0, 0x79, 0x1}) perf_event_open(&(0x7f0000000040)={0x80000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000040)) [ 702.441948] FAULT_INJECTION: forcing a failure. [ 702.441948] name failslab, interval 1, probability 0, space 0, times 0 [ 702.488887] CPU: 1 PID: 31655 Comm: syz-executor5 Not tainted 4.20.0-rc4+ #138 [ 702.496279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 702.505649] Call Trace: [ 702.508268] dump_stack+0x244/0x39d [ 702.511919] ? dump_stack_print_info.cold.1+0x20/0x20 [ 702.517116] ? __kernel_text_address+0xd/0x40 [ 702.521637] ? unwind_get_return_address+0x61/0xa0 [ 702.526598] should_fail.cold.4+0xa/0x17 [ 702.530671] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 702.535791] ? save_stack+0xa9/0xd0 [ 702.539431] ? kasan_kmalloc+0xc7/0xe0 [ 702.543324] ? kasan_slab_alloc+0x12/0x20 [ 702.547485] ? kmem_cache_alloc+0x12e/0x730 [ 702.551812] ? mmu_topup_memory_caches+0xfb/0x470 [ 702.556659] ? kvm_mmu_load+0x21/0x1290 [ 702.560633] ? kvm_arch_vcpu_ioctl_run+0x2889/0x7320 [ 702.565743] ? zap_class+0x640/0x640 [ 702.569466] ? __x64_sys_ioctl+0x73/0xb0 [ 702.573533] ? do_syscall_64+0x1b9/0x820 [ 702.577597] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 702.582973] ? find_held_lock+0x36/0x1c0 [ 702.587048] ? __lock_is_held+0xb5/0x140 [ 702.591136] ? perf_trace_sched_process_exec+0x860/0x860 [ 702.596604] __should_failslab+0x124/0x180 [ 702.600893] should_failslab+0x9/0x14 [ 702.604696] kmem_cache_alloc+0x2be/0x730 [ 702.608847] ? lock_acquire+0x1ed/0x520 [ 702.612824] ? kvm_arch_vcpu_ioctl_run+0x30f/0x7320 [ 702.617845] ? mmu_topup_memory_caches+0xfb/0x470 [ 702.622696] mmu_topup_memory_caches+0xfb/0x470 [ 702.627367] ? kvm_inject_realmode_interrupt+0x260/0x260 [ 702.632847] kvm_mmu_load+0x21/0x1290 [ 702.636668] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 702.642215] ? vmx_clear_hlt.isra.39+0xa5/0xd0 [ 702.646806] kvm_arch_vcpu_ioctl_run+0x2889/0x7320 [ 702.651758] ? kvm_vcpu_ioctl+0x1e5/0x1150 [ 702.656027] ? kvm_arch_vcpu_runnable+0x710/0x710 [ 702.660874] ? zap_class+0x640/0x640 [ 702.664596] ? __lock_acquire+0x62f/0x4c20 [ 702.668834] ? lock_downgrade+0x900/0x900 [ 702.672987] ? check_preemption_disabled+0x48/0x280 [ 702.678025] ? find_held_lock+0x36/0x1c0 [ 702.682104] ? get_task_pid+0x1ea/0x3b0 [ 702.686086] ? lock_downgrade+0x900/0x900 [ 702.690287] ? check_preemption_disabled+0x48/0x280 [ 702.695318] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 702.700262] ? kasan_check_read+0x11/0x20 [ 702.704412] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 702.709692] ? rcu_softirq_qs+0x20/0x20 [ 702.713687] ? get_task_pid+0x211/0x3b0 [ 702.717667] ? find_get_pid+0x270/0x270 [ 702.721646] ? zap_class+0x640/0x640 [ 702.725370] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 702.730922] kvm_vcpu_ioctl+0x5c8/0x1150 [ 702.734985] ? kvm_vcpu_ioctl+0x5c8/0x1150 [ 702.739237] ? kvm_uevent_notify_change.part.32+0x450/0x450 [ 702.744974] ? find_held_lock+0x36/0x1c0 [ 702.749051] ? __fget+0x4aa/0x740 [ 702.752518] ? check_preemption_disabled+0x48/0x280 [ 702.757551] ? kasan_check_read+0x11/0x20 [ 702.761703] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 702.766986] ? rcu_softirq_qs+0x20/0x20 [ 702.770977] ? __fget+0x4d1/0x740 [ 702.774446] ? ksys_dup3+0x680/0x680 [ 702.778176] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 702.783121] ? kvm_uevent_notify_change.part.32+0x450/0x450 [ 702.788843] do_vfs_ioctl+0x1de/0x1790 [ 702.792736] ? __lock_is_held+0xb5/0x140 [ 702.796813] ? ioctl_preallocate+0x300/0x300 [ 702.801224] ? __fget_light+0x2e9/0x430 [ 702.805212] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 702.810755] ? smack_file_ioctl+0x210/0x3c0 [ 702.815090] ? fget_raw+0x20/0x20 [ 702.818550] ? smack_file_lock+0x2e0/0x2e0 [ 702.822817] ? __sb_end_write+0xd9/0x110 [ 702.826891] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 702.832430] ? fput+0x130/0x1a0 [ 702.835718] ? do_syscall_64+0x9a/0x820 [ 702.839698] ? do_syscall_64+0x9a/0x820 [ 702.843682] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 702.849225] ? security_file_ioctl+0x94/0xc0 [ 702.853649] ksys_ioctl+0xa9/0xd0 [ 702.857125] __x64_sys_ioctl+0x73/0xb0 [ 702.861019] do_syscall_64+0x1b9/0x820 [ 702.864910] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 702.870288] ? syscall_return_slowpath+0x5e0/0x5e0 [ 702.875219] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 702.880077] ? trace_hardirqs_on_caller+0x310/0x310 [ 702.885096] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 702.890121] ? prepare_exit_to_usermode+0x291/0x3b0 [ 702.895153] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 702.900010] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 702.905203] RIP: 0033:0x457569 [ 702.908403] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 702.927304] RSP: 002b:00007f8018763c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 702.935015] RAX: ffffffffffffffda RBX: 00007f8018763c90 RCX: 0000000000457569 [ 702.942286] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 702.949733] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 702.957023] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f80187646d4 [ 702.964295] R13: 00000000004c034e R14: 00000000004d0d60 R15: 0000000000000007 09:02:59 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20000000001b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x10000000, 0x0, 0x8, 0x0, 0x7}) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x710000) 09:02:59 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5f8e496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:02:59 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, 0xffffffffffffffff, 0x0) getpgid(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001fc0), &(0x7f0000002000)=0xc) getgid() getpgrp(0x0) getresgid(&(0x7f00000034c0), &(0x7f0000003500), 0x0) lstat(&(0x7f0000003640)='./file0\x00', &(0x7f0000003680)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000003700)) gettid() stat(&(0x7f0000003740)='./file0\x00', &(0x7f0000003780)) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000004100)) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r1, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x15, 0x11}}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x6}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4001}, 0x8040) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000440), &(0x7f0000004180)=0xc) ioctl$TIOCGSID(r0, 0x5429, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000004280)) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x80240) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r0, 0x0, 0x800) lstat(&(0x7f0000004380)='./file0\x00', 0x0) ioctl(r0, 0x0, &(0x7f00000001c0)) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 09:02:59 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x480000, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000100)={0x957, 0x1003fc, 0x1f}) r1 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x80000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_READ(r1, 0xc0287c02, &(0x7f0000000040)) 09:02:59 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20000000001b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x10000000, 0x0, 0x8, 0x0, 0x7}) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x7fffffffefff) 09:02:59 executing program 5 (fault-call:8 fault-nth:19): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000000)={'teql0\x00', {0x2, 0x0, @dev}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:02:59 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00000000000000]}, 0x10) 09:02:59 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fad496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:02:59 executing program 4: r0 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x80000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_READ(r0, 0xc0287c02, &(0x7f0000000000)) 09:02:59 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20000000001b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x10000000, 0x0, 0x8, 0x0, 0x7}) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x7100) 09:02:59 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5f0f496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:02:59 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, 0xffffffffffffffff, 0x0) getpgid(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001fc0), &(0x7f0000002000)=0xc) getgid() getpgrp(0x0) getresgid(&(0x7f00000034c0), &(0x7f0000003500), 0x0) lstat(&(0x7f0000003640)='./file0\x00', &(0x7f0000003680)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000003700)) gettid() stat(&(0x7f0000003740)='./file0\x00', &(0x7f0000003780)) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000004100)) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r1, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x15, 0x11}}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x6}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4001}, 0x8040) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000440), &(0x7f0000004180)=0xc) ioctl$TIOCGSID(r0, 0x5429, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000004280)) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x80240) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r0, 0x0, 0x800) lstat(&(0x7f0000004380)='./file0\x00', 0x0) ioctl(r0, 0x0, &(0x7f00000001c0)) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 09:02:59 executing program 4: r0 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x0, 0x0) r1 = getegid() fchown(r0, 0x0, r1) perf_event_open(&(0x7f0000000040)={0x80000005, 0x70, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000000, 0x0, 0x0, 0x0, 0x0, 0x5831, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_READ(r0, 0xc0287c02, &(0x7f0000000040)) 09:02:59 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000]}, 0x10) [ 703.404794] FAULT_INJECTION: forcing a failure. [ 703.404794] name failslab, interval 1, probability 0, space 0, times 0 [ 703.462589] CPU: 0 PID: 31723 Comm: syz-executor5 Not tainted 4.20.0-rc4+ #138 [ 703.469978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 703.479378] Call Trace: [ 703.482011] dump_stack+0x244/0x39d [ 703.485661] ? dump_stack_print_info.cold.1+0x20/0x20 [ 703.490874] ? __kernel_text_address+0xd/0x40 [ 703.495382] ? unwind_get_return_address+0x61/0xa0 [ 703.500334] should_fail.cold.4+0xa/0x17 [ 703.504442] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 703.509558] ? save_stack+0xa9/0xd0 [ 703.513222] ? kasan_kmalloc+0xc7/0xe0 [ 703.517132] ? kasan_slab_alloc+0x12/0x20 [ 703.521294] ? kmem_cache_alloc+0x12e/0x730 [ 703.525619] ? mmu_topup_memory_caches+0xfb/0x470 [ 703.530463] ? kvm_mmu_load+0x21/0x1290 [ 703.534438] ? kvm_arch_vcpu_ioctl_run+0x2889/0x7320 [ 703.539546] ? zap_class+0x640/0x640 [ 703.543275] ? __x64_sys_ioctl+0x73/0xb0 [ 703.547345] ? do_syscall_64+0x1b9/0x820 [ 703.551418] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 703.556797] ? find_held_lock+0x36/0x1c0 [ 703.560873] ? __lock_is_held+0xb5/0x140 [ 703.564957] ? perf_trace_sched_process_exec+0x860/0x860 [ 703.570438] __should_failslab+0x124/0x180 [ 703.574687] should_failslab+0x9/0x14 [ 703.578497] kmem_cache_alloc+0x2be/0x730 [ 703.582656] ? lock_acquire+0x1ed/0x520 [ 703.586639] ? mmu_topup_memory_caches+0xfb/0x470 [ 703.591495] mmu_topup_memory_caches+0xfb/0x470 [ 703.596168] ? kvm_inject_realmode_interrupt+0x260/0x260 [ 703.601648] kvm_mmu_load+0x21/0x1290 [ 703.605463] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 703.611011] ? vmx_clear_hlt.isra.39+0xa5/0xd0 [ 703.615608] kvm_arch_vcpu_ioctl_run+0x2889/0x7320 [ 703.620562] ? kvm_vcpu_ioctl+0x1e5/0x1150 [ 703.624821] ? kvm_arch_vcpu_runnable+0x710/0x710 [ 703.629670] ? zap_class+0x640/0x640 [ 703.633391] ? __lock_acquire+0x62f/0x4c20 [ 703.637634] ? lock_downgrade+0x900/0x900 [ 703.641787] ? check_preemption_disabled+0x48/0x280 [ 703.646873] ? find_held_lock+0x36/0x1c0 [ 703.650950] ? get_task_pid+0x1ea/0x3b0 [ 703.654931] ? lock_downgrade+0x900/0x900 [ 703.659081] ? check_preemption_disabled+0x48/0x280 [ 703.664110] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 703.669043] ? kasan_check_read+0x11/0x20 [ 703.673209] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 703.678493] ? rcu_softirq_qs+0x20/0x20 [ 703.682509] ? get_task_pid+0x211/0x3b0 [ 703.686486] ? find_get_pid+0x270/0x270 [ 703.690468] ? zap_class+0x640/0x640 [ 703.694201] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 703.699757] kvm_vcpu_ioctl+0x5c8/0x1150 [ 703.703823] ? kvm_vcpu_ioctl+0x5c8/0x1150 [ 703.708063] ? kvm_uevent_notify_change.part.32+0x450/0x450 [ 703.713782] ? find_held_lock+0x36/0x1c0 [ 703.717858] ? __fget+0x4aa/0x740 [ 703.721326] ? check_preemption_disabled+0x48/0x280 [ 703.726354] ? kasan_check_read+0x11/0x20 [ 703.730534] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 703.735818] ? rcu_softirq_qs+0x20/0x20 [ 703.739815] ? __fget+0x4d1/0x740 [ 703.743292] ? ksys_dup3+0x680/0x680 [ 703.747028] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 703.751974] ? kvm_uevent_notify_change.part.32+0x450/0x450 [ 703.757696] do_vfs_ioctl+0x1de/0x1790 [ 703.761590] ? __lock_is_held+0xb5/0x140 [ 703.765660] ? ioctl_preallocate+0x300/0x300 [ 703.770073] ? __fget_light+0x2e9/0x430 [ 703.774054] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 703.779614] ? smack_file_ioctl+0x210/0x3c0 [ 703.783935] ? fget_raw+0x20/0x20 [ 703.787407] ? smack_file_lock+0x2e0/0x2e0 [ 703.791675] ? __sb_end_write+0xd9/0x110 [ 703.795790] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 703.801346] ? fput+0x130/0x1a0 [ 703.804636] ? do_syscall_64+0x9a/0x820 [ 703.808614] ? do_syscall_64+0x9a/0x820 [ 703.812601] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 703.818160] ? security_file_ioctl+0x94/0xc0 [ 703.822586] ksys_ioctl+0xa9/0xd0 [ 703.826081] __x64_sys_ioctl+0x73/0xb0 [ 703.829975] do_syscall_64+0x1b9/0x820 [ 703.833884] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 703.839299] ? syscall_return_slowpath+0x5e0/0x5e0 [ 703.844233] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 703.849096] ? trace_hardirqs_on_caller+0x310/0x310 [ 703.854119] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 703.859146] ? prepare_exit_to_usermode+0x291/0x3b0 [ 703.864206] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 703.869097] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 703.874303] RIP: 0033:0x457569 [ 703.877503] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 703.896402] RSP: 002b:00007f8018763c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 703.904113] RAX: ffffffffffffffda RBX: 00007f8018763c90 RCX: 0000000000457569 09:03:00 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5f4c496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:03:00 executing program 4: r0 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x80000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_READ(r0, 0xc0287c02, &(0x7f0000000040)) ioctl$KVM_DEASSIGN_PCI_DEVICE(r0, 0x4040ae72, &(0x7f0000000000)={0x5, 0x2, 0x8, 0x5, 0xfffffffffffffffd}) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffff9c, 0x4080aebf, &(0x7f0000000100)={0x1, 0x0, 0x2080, {0x0, 0x7000, 0x3}, [], "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", "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"}) [ 703.911382] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 703.918654] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 703.925926] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f80187646d4 [ 703.933211] R13: 00000000004c034e R14: 00000000004d0d60 R15: 0000000000000007 09:03:00 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20000000001b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x10000000, 0x0, 0x8, 0x0, 0x7}) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x60ff) 09:03:00 executing program 5 (fault-call:8 fault-nth:20): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000000)={'teql0\x00', {0x2, 0x0, @dev}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:03:00 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000]}, 0x10) 09:03:00 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5f87496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:03:00 executing program 4: r0 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x80000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_READ(r0, 0xc0287c02, &(0x7f0000000040)) poll(&(0x7f0000000000)=[{r0, 0x4000}, {r1, 0x1}], 0x2, 0x6d99) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-control\x00', 0x311400, 0x0) 09:03:00 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20000000001b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x10000000, 0x0, 0x8, 0x0, 0x7}) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x7300) 09:03:00 executing program 3: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20000000001b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x10000000, 0x0, 0x8, 0x0, 0x7}) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x710000) 09:03:00 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5f98496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:03:00 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20000000001b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x10000000, 0x0, 0x8, 0x0, 0x7}) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x400000) 09:03:00 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff0f000000000000]}, 0x10) 09:03:00 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5f73496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) [ 704.262279] FAULT_INJECTION: forcing a failure. [ 704.262279] name failslab, interval 1, probability 0, space 0, times 0 [ 704.275852] CPU: 0 PID: 31775 Comm: syz-executor5 Not tainted 4.20.0-rc4+ #138 [ 704.283229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 704.292596] Call Trace: [ 704.295200] dump_stack+0x244/0x39d [ 704.298855] ? dump_stack_print_info.cold.1+0x20/0x20 [ 704.304066] ? __kernel_text_address+0xd/0x40 09:03:00 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fd2496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) [ 704.308577] ? unwind_get_return_address+0x61/0xa0 [ 704.313524] should_fail.cold.4+0xa/0x17 [ 704.317598] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 704.322735] ? save_stack+0xa9/0xd0 [ 704.326379] ? kasan_kmalloc+0xc7/0xe0 [ 704.330299] ? kasan_slab_alloc+0x12/0x20 [ 704.334462] ? kmem_cache_alloc+0x12e/0x730 [ 704.338813] ? mmu_topup_memory_caches+0xfb/0x470 [ 704.343664] ? kvm_mmu_load+0x21/0x1290 [ 704.347647] ? kvm_arch_vcpu_ioctl_run+0x2889/0x7320 [ 704.352761] ? zap_class+0x640/0x640 [ 704.356485] ? __x64_sys_ioctl+0x73/0xb0 [ 704.360554] ? do_syscall_64+0x1b9/0x820 [ 704.364627] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 704.370009] ? find_held_lock+0x36/0x1c0 [ 704.374085] ? __lock_is_held+0xb5/0x140 [ 704.378175] ? ZSTD_compressBlock_lazy+0x1068/0x3160 [ 704.383324] ? perf_trace_sched_process_exec+0x860/0x860 [ 704.388796] __should_failslab+0x124/0x180 [ 704.393042] should_failslab+0x9/0x14 [ 704.396852] kmem_cache_alloc+0x2be/0x730 [ 704.401011] ? mmu_topup_memory_caches+0xfb/0x470 [ 704.405868] mmu_topup_memory_caches+0xfb/0x470 [ 704.410548] ? kvm_inject_realmode_interrupt+0x260/0x260 [ 704.416014] kvm_mmu_load+0x21/0x1290 [ 704.419824] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 704.425371] ? vmx_clear_hlt.isra.39+0xa5/0xd0 [ 704.429964] kvm_arch_vcpu_ioctl_run+0x2889/0x7320 [ 704.434901] ? kvm_vcpu_ioctl+0x1e5/0x1150 [ 704.439164] ? kvm_arch_vcpu_runnable+0x710/0x710 [ 704.444016] ? zap_class+0x640/0x640 [ 704.447732] ? __lock_acquire+0x62f/0x4c20 [ 704.451970] ? lock_downgrade+0x900/0x900 [ 704.456126] ? check_preemption_disabled+0x48/0x280 [ 704.461165] ? find_held_lock+0x36/0x1c0 [ 704.465243] ? get_task_pid+0x1ea/0x3b0 [ 704.469261] ? lock_downgrade+0x900/0x900 [ 704.473420] ? check_preemption_disabled+0x48/0x280 [ 704.478488] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 704.483438] ? kasan_check_read+0x11/0x20 [ 704.487618] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 704.492897] ? rcu_softirq_qs+0x20/0x20 [ 704.496892] ? get_task_pid+0x211/0x3b0 [ 704.500883] ? find_get_pid+0x270/0x270 [ 704.504857] ? zap_class+0x640/0x640 [ 704.508577] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 704.514136] kvm_vcpu_ioctl+0x5c8/0x1150 [ 704.518206] ? kvm_vcpu_ioctl+0x5c8/0x1150 [ 704.522452] ? kvm_uevent_notify_change.part.32+0x450/0x450 [ 704.528173] ? find_held_lock+0x36/0x1c0 [ 704.532257] ? __fget+0x4aa/0x740 [ 704.535744] ? check_preemption_disabled+0x48/0x280 [ 704.540770] ? kasan_check_read+0x11/0x20 [ 704.544926] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 704.550206] ? rcu_softirq_qs+0x20/0x20 [ 704.554241] ? __fget+0x4d1/0x740 [ 704.557725] ? ksys_dup3+0x680/0x680 [ 704.561463] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 704.566425] ? kvm_uevent_notify_change.part.32+0x450/0x450 [ 704.572142] do_vfs_ioctl+0x1de/0x1790 [ 704.576038] ? __lock_is_held+0xb5/0x140 [ 704.580111] ? ioctl_preallocate+0x300/0x300 [ 704.584524] ? __fget_light+0x2e9/0x430 [ 704.588510] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 704.594056] ? smack_file_ioctl+0x210/0x3c0 [ 704.598377] ? fget_raw+0x20/0x20 [ 704.601841] ? smack_file_lock+0x2e0/0x2e0 [ 704.606114] ? __sb_end_write+0xd9/0x110 [ 704.610196] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 704.615738] ? fput+0x130/0x1a0 [ 704.619025] ? do_syscall_64+0x9a/0x820 [ 704.623020] ? do_syscall_64+0x9a/0x820 [ 704.627034] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 704.632583] ? security_file_ioctl+0x94/0xc0 [ 704.637015] ksys_ioctl+0xa9/0xd0 [ 704.640481] __x64_sys_ioctl+0x73/0xb0 [ 704.644382] do_syscall_64+0x1b9/0x820 [ 704.648305] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 704.653675] ? syscall_return_slowpath+0x5e0/0x5e0 [ 704.658609] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 704.663474] ? trace_hardirqs_on_caller+0x310/0x310 [ 704.668516] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 704.673570] ? prepare_exit_to_usermode+0x291/0x3b0 [ 704.678601] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 704.683473] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 704.688662] RIP: 0033:0x457569 [ 704.691865] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 09:03:01 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5f58496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) [ 704.710852] RSP: 002b:00007f8018763c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 704.718562] RAX: ffffffffffffffda RBX: 00007f8018763c90 RCX: 0000000000457569 [ 704.725836] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 704.733106] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 704.740376] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f80187646d4 [ 704.747648] R13: 00000000004c034e R14: 00000000004d0d60 R15: 0000000000000007 09:03:01 executing program 5 (fault-call:8 fault-nth:21): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000000)={'teql0\x00', {0x2, 0x0, @dev}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:03:01 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20000000001b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x10000000, 0x0, 0x8, 0x0, 0x7}) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0xffffffffff600000) 09:03:01 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fe5496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) [ 704.936199] FAULT_INJECTION: forcing a failure. [ 704.936199] name failslab, interval 1, probability 0, space 0, times 0 [ 704.947496] CPU: 0 PID: 31807 Comm: syz-executor5 Not tainted 4.20.0-rc4+ #138 [ 704.954863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 704.964707] Call Trace: [ 704.967319] dump_stack+0x244/0x39d [ 704.970968] ? dump_stack_print_info.cold.1+0x20/0x20 [ 704.976172] ? __kernel_text_address+0xd/0x40 [ 704.980692] ? unwind_get_return_address+0x61/0xa0 09:03:01 executing program 4: r0 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x80000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_READ(r0, 0xc0287c02, &(0x7f00000001c0)) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000000)={0x0, 0xf69, 0x0, 0xce, 0x8000}, &(0x7f0000000100)=0x18) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000140)={r1, 0x5d6}, 0x8) 09:03:01 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34000000]}, 0x10) [ 704.980719] should_fail.cold.4+0xa/0x17 [ 704.980742] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 704.989741] ? save_stack+0xa9/0xd0 [ 704.989760] ? kasan_kmalloc+0xc7/0xe0 [ 704.989775] ? kasan_slab_alloc+0x12/0x20 [ 704.989794] ? kmem_cache_alloc+0x12e/0x730 [ 705.010792] ? mmu_topup_memory_caches+0xfb/0x470 [ 705.015636] ? kvm_mmu_load+0x21/0x1290 [ 705.019611] ? kvm_arch_vcpu_ioctl_run+0x2889/0x7320 [ 705.024703] ? zap_class+0x640/0x640 [ 705.028425] ? __x64_sys_ioctl+0x73/0xb0 [ 705.032507] ? do_syscall_64+0x1b9/0x820 [ 705.036574] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 705.041953] ? find_held_lock+0x36/0x1c0 [ 705.046047] ? __lock_is_held+0xb5/0x140 [ 705.050156] ? compress_file_range.constprop.69+0x328/0x1a50 [ 705.055994] ? perf_trace_sched_process_exec+0x860/0x860 [ 705.061472] __should_failslab+0x124/0x180 [ 705.065736] should_failslab+0x9/0x14 [ 705.069545] kmem_cache_alloc+0x2be/0x730 [ 705.073704] ? lock_acquire+0x1ed/0x520 [ 705.077864] ? kvm_arch_vcpu_ioctl_run+0x30f/0x7320 [ 705.082886] ? mmu_topup_memory_caches+0xfb/0x470 [ 705.087743] mmu_topup_memory_caches+0xfb/0x470 [ 705.092418] ? kvm_inject_realmode_interrupt+0x260/0x260 [ 705.097914] kvm_mmu_load+0x21/0x1290 [ 705.101727] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 705.107295] ? vmx_clear_hlt.isra.39+0xa5/0xd0 [ 705.111903] kvm_arch_vcpu_ioctl_run+0x2889/0x7320 [ 705.116851] ? kvm_vcpu_ioctl+0x1e5/0x1150 [ 705.121139] ? kvm_arch_vcpu_runnable+0x710/0x710 [ 705.125983] ? zap_class+0x640/0x640 [ 705.129700] ? __lock_acquire+0x62f/0x4c20 [ 705.133938] ? lock_downgrade+0x900/0x900 [ 705.138089] ? check_preemption_disabled+0x48/0x280 [ 705.143157] ? find_held_lock+0x36/0x1c0 [ 705.147242] ? get_task_pid+0x1ea/0x3b0 [ 705.151238] ? lock_downgrade+0x900/0x900 [ 705.155404] ? check_preemption_disabled+0x48/0x280 [ 705.160432] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 705.165365] ? kasan_check_read+0x11/0x20 [ 705.169522] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 705.174807] ? rcu_softirq_qs+0x20/0x20 [ 705.178822] ? get_task_pid+0x211/0x3b0 [ 705.182831] ? find_get_pid+0x270/0x270 [ 705.186812] ? zap_class+0x640/0x640 [ 705.190540] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 705.196096] kvm_vcpu_ioctl+0x5c8/0x1150 [ 705.200166] ? kvm_vcpu_ioctl+0x5c8/0x1150 [ 705.204416] ? kvm_uevent_notify_change.part.32+0x450/0x450 [ 705.210140] ? find_held_lock+0x36/0x1c0 [ 705.214219] ? __fget+0x4aa/0x740 [ 705.217696] ? check_preemption_disabled+0x48/0x280 [ 705.222742] ? kasan_check_read+0x11/0x20 [ 705.226909] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 705.232191] ? rcu_softirq_qs+0x20/0x20 [ 705.236192] ? __fget+0x4d1/0x740 [ 705.239660] ? ksys_dup3+0x680/0x680 [ 705.243394] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 705.248340] ? kvm_uevent_notify_change.part.32+0x450/0x450 [ 705.254062] do_vfs_ioctl+0x1de/0x1790 [ 705.257962] ? __lock_is_held+0xb5/0x140 [ 705.262034] ? ioctl_preallocate+0x300/0x300 [ 705.266462] ? __fget_light+0x2e9/0x430 [ 705.270447] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 705.275992] ? smack_file_ioctl+0x210/0x3c0 [ 705.280317] ? fget_raw+0x20/0x20 [ 705.283777] ? smack_file_lock+0x2e0/0x2e0 [ 705.288020] ? __sb_end_write+0xd9/0x110 [ 705.292094] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 705.297638] ? fput+0x130/0x1a0 [ 705.300928] ? do_syscall_64+0x9a/0x820 [ 705.304910] ? do_syscall_64+0x9a/0x820 [ 705.308895] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 705.314439] ? security_file_ioctl+0x94/0xc0 [ 705.318859] ksys_ioctl+0xa9/0xd0 [ 705.322331] __x64_sys_ioctl+0x73/0xb0 [ 705.326231] do_syscall_64+0x1b9/0x820 [ 705.330136] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 705.335509] ? syscall_return_slowpath+0x5e0/0x5e0 [ 705.340448] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 705.345309] ? trace_hardirqs_on_caller+0x310/0x310 [ 705.350336] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 705.355362] ? prepare_exit_to_usermode+0x291/0x3b0 [ 705.360395] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 705.365267] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 705.370467] RIP: 0033:0x457569 [ 705.373671] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 705.392575] RSP: 002b:00007f8018763c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 705.400293] RAX: ffffffffffffffda RBX: 00007f8018763c90 RCX: 0000000000457569 [ 705.407563] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 705.414869] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 705.422155] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f80187646d4 [ 705.429422] R13: 00000000004c034e R14: 00000000004d0d60 R15: 0000000000000007 09:03:03 executing program 3: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20000000001b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x10000000, 0x0, 0x8, 0x0, 0x7}) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x710000) 09:03:03 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20000000001b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x10000000, 0x0, 0x8, 0x0, 0x7}) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x930000) 09:03:03 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5f7b496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:03:03 executing program 4: r0 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x80000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_READ(r0, 0xc0287c02, &(0x7f0000000040)) r2 = fcntl$getown(r1, 0x9) ptrace$peek(0x8dea166b72667923, r2, &(0x7f0000000000)) 09:03:03 executing program 5 (fault-call:8 fault-nth:22): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000000)={'teql0\x00', {0x2, 0x0, @dev}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:03:03 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeffffff]}, 0x10) 09:03:03 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5f70496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:03:03 executing program 4: socketpair(0x11, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) accept4$bt_l2cap(r0, &(0x7f00000000c0), &(0x7f0000000200)=0xe, 0x800) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000100)=""/246) perf_event_open(&(0x7f0000000040)={0x80000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000040)) [ 707.272443] FAULT_INJECTION: forcing a failure. [ 707.272443] name failslab, interval 1, probability 0, space 0, times 0 [ 707.304096] CPU: 0 PID: 31826 Comm: syz-executor5 Not tainted 4.20.0-rc4+ #138 [ 707.311488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 707.320852] Call Trace: [ 707.323466] dump_stack+0x244/0x39d [ 707.327120] ? dump_stack_print_info.cold.1+0x20/0x20 [ 707.332329] ? __kernel_text_address+0xd/0x40 [ 707.336836] ? unwind_get_return_address+0x61/0xa0 [ 707.341792] should_fail.cold.4+0xa/0x17 [ 707.345873] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 707.351001] ? save_stack+0xa9/0xd0 [ 707.354647] ? kasan_kmalloc+0xc7/0xe0 [ 707.358543] ? kasan_slab_alloc+0x12/0x20 [ 707.362706] ? kmem_cache_alloc+0x12e/0x730 [ 707.367038] ? mmu_topup_memory_caches+0xfb/0x470 [ 707.371888] ? kvm_mmu_load+0x21/0x1290 [ 707.375867] ? kvm_arch_vcpu_ioctl_run+0x2889/0x7320 [ 707.380977] ? zap_class+0x640/0x640 [ 707.380995] ? __x64_sys_ioctl+0x73/0xb0 [ 707.381013] ? do_syscall_64+0x1b9/0x820 [ 707.381033] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 707.388803] ? find_held_lock+0x36/0x1c0 [ 707.402271] ? __lock_is_held+0xb5/0x140 [ 707.406376] ? perf_trace_sched_process_exec+0x860/0x860 [ 707.411857] __should_failslab+0x124/0x180 [ 707.416120] should_failslab+0x9/0x14 [ 707.419938] kmem_cache_alloc+0x2be/0x730 [ 707.424104] ? lock_acquire+0x1ed/0x520 [ 707.428084] ? kvm_arch_vcpu_ioctl_run+0x30f/0x7320 [ 707.433117] ? mmu_topup_memory_caches+0xfb/0x470 [ 707.437976] mmu_topup_memory_caches+0xfb/0x470 [ 707.437996] ? kvm_inject_realmode_interrupt+0x260/0x260 [ 707.438019] kvm_mmu_load+0x21/0x1290 [ 707.438041] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 707.448153] ? vmx_clear_hlt.isra.39+0xa5/0xd0 [ 707.448176] kvm_arch_vcpu_ioctl_run+0x2889/0x7320 [ 707.448195] ? kvm_vcpu_ioctl+0x1e5/0x1150 09:03:03 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20000000001b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x10000000, 0x0, 0x8, 0x0, 0x7}) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x60ffffffffff) 09:03:03 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4002]}, 0x10) 09:03:03 executing program 4: r0 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x0, 0x0) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000040)={0x80000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x2, @loopback, 0xffffffff}, {0xa, 0x4e23, 0xfff, @local, 0x1ff}, r1, 0x9}}, 0x48) ioctl$RTC_EPOCH_READ(r0, 0xc0287c02, &(0x7f0000000040)) [ 707.448225] ? kvm_arch_vcpu_runnable+0x710/0x710 [ 707.476104] ? zap_class+0x640/0x640 [ 707.479842] ? __lock_acquire+0x62f/0x4c20 [ 707.484112] ? lock_downgrade+0x900/0x900 [ 707.488292] ? check_preemption_disabled+0x48/0x280 [ 707.493330] ? find_held_lock+0x36/0x1c0 [ 707.497414] ? get_task_pid+0x1ea/0x3b0 [ 707.501405] ? lock_downgrade+0x900/0x900 [ 707.505568] ? check_preemption_disabled+0x48/0x280 [ 707.510598] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 707.515538] ? kasan_check_read+0x11/0x20 [ 707.519695] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 707.524981] ? rcu_softirq_qs+0x20/0x20 [ 707.528979] ? get_task_pid+0x211/0x3b0 [ 707.532961] ? find_get_pid+0x270/0x270 [ 707.536939] ? zap_class+0x640/0x640 [ 707.540666] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 707.546222] kvm_vcpu_ioctl+0x5c8/0x1150 [ 707.550302] ? kvm_vcpu_ioctl+0x5c8/0x1150 [ 707.554559] ? kvm_uevent_notify_change.part.32+0x450/0x450 [ 707.560308] ? find_held_lock+0x36/0x1c0 [ 707.564391] ? __fget+0x4aa/0x740 [ 707.567856] ? check_preemption_disabled+0x48/0x280 [ 707.572892] ? kasan_check_read+0x11/0x20 [ 707.577047] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 707.582358] ? rcu_softirq_qs+0x20/0x20 [ 707.586370] ? __fget+0x4d1/0x740 [ 707.589845] ? ksys_dup3+0x680/0x680 [ 707.593582] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 707.598529] ? kvm_uevent_notify_change.part.32+0x450/0x450 [ 707.604248] do_vfs_ioctl+0x1de/0x1790 [ 707.608163] ? __lock_is_held+0xb5/0x140 [ 707.612240] ? ioctl_preallocate+0x300/0x300 [ 707.616676] ? __fget_light+0x2e9/0x430 [ 707.620666] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 707.626209] ? smack_file_ioctl+0x210/0x3c0 [ 707.630532] ? fget_raw+0x20/0x20 [ 707.634001] ? smack_file_lock+0x2e0/0x2e0 [ 707.638242] ? __sb_end_write+0xd9/0x110 [ 707.642350] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 707.647896] ? fput+0x130/0x1a0 [ 707.651183] ? do_syscall_64+0x9a/0x820 [ 707.655161] ? do_syscall_64+0x9a/0x820 [ 707.659147] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 707.664699] ? security_file_ioctl+0x94/0xc0 [ 707.669151] ksys_ioctl+0xa9/0xd0 [ 707.672619] __x64_sys_ioctl+0x73/0xb0 [ 707.676517] do_syscall_64+0x1b9/0x820 [ 707.680410] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 707.685781] ? syscall_return_slowpath+0x5e0/0x5e0 [ 707.690717] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 707.695568] ? trace_hardirqs_on_caller+0x310/0x310 [ 707.700592] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 707.705615] ? prepare_exit_to_usermode+0x291/0x3b0 [ 707.710650] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 707.715509] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 707.720703] RIP: 0033:0x457569 [ 707.723903] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 707.742807] RSP: 002b:00007f8018763c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 707.750524] RAX: ffffffffffffffda RBX: 00007f8018763c90 RCX: 0000000000457569 [ 707.757794] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 707.765066] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 707.772335] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f80187646d4 [ 707.779615] R13: 00000000004c034e R14: 00000000004d0d60 R15: 0000000000000007 09:03:04 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fbe496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:03:06 executing program 3: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20000000001b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x10000000, 0x0, 0x8, 0x0, 0x7}) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x710000) 09:03:06 executing program 4: r0 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x0, 0x0) write$P9_RMKDIR(r0, &(0x7f0000000180)={0x14, 0x49, 0x2, {0x1, 0x1, 0x8}}, 0x14) perf_event_open(&(0x7f0000000040)={0x80000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_READ(r0, 0xc0287c02, &(0x7f0000000040)) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r0, 0x3) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000140)={0x8000, 0x0, 0x1, 0x7}, 0x8) write$input_event(r0, &(0x7f0000000100)={{r1, r2/1000+10000}, 0x17, 0x20}, 0x18) 09:03:06 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20000000001b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x10000000, 0x0, 0x8, 0x0, 0x7}) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x710000000000) 09:03:06 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}, 0x10) 09:03:06 executing program 5 (fault-call:8 fault-nth:23): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000000)={'teql0\x00', {0x2, 0x0, @dev}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:03:06 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5f41496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:03:06 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20000000001b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x10000000, 0x0, 0x8, 0x0, 0x7}) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0xffc99a3b) 09:03:06 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fa2496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:03:06 executing program 4: r0 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x80000002, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_READ(r0, 0xc0287c02, &(0x7f0000000180)) [ 710.351291] FAULT_INJECTION: forcing a failure. [ 710.351291] name failslab, interval 1, probability 0, space 0, times 0 [ 710.389039] CPU: 1 PID: 31872 Comm: syz-executor5 Not tainted 4.20.0-rc4+ #138 09:03:06 executing program 4: r0 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x8, 0x100) perf_event_open(&(0x7f0000000040)={0x80000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_READ(r0, 0xc0287c02, &(0x7f0000000040)) [ 710.396426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 710.405785] Call Trace: [ 710.408412] dump_stack+0x244/0x39d [ 710.412064] ? dump_stack_print_info.cold.1+0x20/0x20 [ 710.417297] ? __kernel_text_address+0xd/0x40 [ 710.421840] ? unwind_get_return_address+0x61/0xa0 [ 710.426802] should_fail.cold.4+0xa/0x17 [ 710.430878] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 710.436020] ? save_stack+0xa9/0xd0 [ 710.439671] ? kasan_kmalloc+0xc7/0xe0 [ 710.443568] ? kasan_slab_alloc+0x12/0x20 09:03:06 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fe1496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) [ 710.447727] ? kmem_cache_alloc+0x12e/0x730 [ 710.452080] ? mmu_topup_memory_caches+0xfb/0x470 [ 710.456932] ? kvm_mmu_load+0x21/0x1290 [ 710.460910] ? kvm_arch_vcpu_ioctl_run+0x2889/0x7320 [ 710.466022] ? zap_class+0x640/0x640 [ 710.469746] ? __x64_sys_ioctl+0x73/0xb0 [ 710.473827] ? do_syscall_64+0x1b9/0x820 [ 710.477903] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 710.483295] ? find_held_lock+0x36/0x1c0 [ 710.487378] ? __lock_is_held+0xb5/0x140 [ 710.491473] ? perf_trace_sched_process_exec+0x860/0x860 [ 710.496963] __should_failslab+0x124/0x180 09:03:06 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20000000001b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x10000000, 0x0, 0x8, 0x0, 0x7}) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0xfffffffe) [ 710.501212] should_failslab+0x9/0x14 [ 710.505042] kmem_cache_alloc+0x2be/0x730 [ 710.509200] ? mmu_topup_memory_caches+0xfb/0x470 [ 710.514052] mmu_topup_memory_caches+0xfb/0x470 [ 710.518730] ? kvm_inject_realmode_interrupt+0x260/0x260 [ 710.524201] kvm_mmu_load+0x21/0x1290 [ 710.528014] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 710.533572] ? vmx_clear_hlt.isra.39+0xa5/0xd0 [ 710.538172] kvm_arch_vcpu_ioctl_run+0x2889/0x7320 [ 710.543135] ? kvm_arch_vcpu_runnable+0x710/0x710 [ 710.547987] ? zap_class+0x640/0x640 [ 710.551719] ? __lock_acquire+0x62f/0x4c20 [ 710.555962] ? lock_downgrade+0x900/0x900 [ 710.560125] ? check_preemption_disabled+0x48/0x280 [ 710.565163] ? find_held_lock+0x36/0x1c0 [ 710.569267] ? get_task_pid+0x1ea/0x3b0 [ 710.573265] ? lock_downgrade+0x900/0x900 [ 710.577439] ? check_preemption_disabled+0x48/0x280 [ 710.582471] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 710.587415] ? kasan_check_read+0x11/0x20 [ 710.591573] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 710.596859] ? rcu_softirq_qs+0x20/0x20 [ 710.600857] ? get_task_pid+0x211/0x3b0 [ 710.604853] ? find_get_pid+0x270/0x270 [ 710.608836] ? zap_class+0x640/0x640 [ 710.612572] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 710.618161] kvm_vcpu_ioctl+0x5c8/0x1150 [ 710.622233] ? kvm_vcpu_ioctl+0x5c8/0x1150 [ 710.626511] ? kvm_uevent_notify_change.part.32+0x450/0x450 [ 710.632238] ? find_held_lock+0x36/0x1c0 [ 710.636320] ? __fget+0x4aa/0x740 [ 710.639769] ? check_preemption_disabled+0x48/0x280 [ 710.644780] ? kasan_check_read+0x11/0x20 [ 710.648925] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 710.654186] ? rcu_softirq_qs+0x20/0x20 [ 710.658164] ? __fget+0x4d1/0x740 [ 710.661638] ? ksys_dup3+0x680/0x680 [ 710.665368] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 710.670308] ? kvm_uevent_notify_change.part.32+0x450/0x450 [ 710.676030] do_vfs_ioctl+0x1de/0x1790 [ 710.679923] ? __lock_is_held+0xb5/0x140 [ 710.684000] ? ioctl_preallocate+0x300/0x300 [ 710.688414] ? __fget_light+0x2e9/0x430 [ 710.692391] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 710.692409] ? smack_file_ioctl+0x210/0x3c0 [ 710.692421] ? fget_raw+0x20/0x20 [ 710.692437] ? smack_file_lock+0x2e0/0x2e0 [ 710.692456] ? __sb_end_write+0xd9/0x110 [ 710.692483] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 710.719599] ? fput+0x130/0x1a0 [ 710.722889] ? do_syscall_64+0x9a/0x820 [ 710.726875] ? do_syscall_64+0x9a/0x820 [ 710.730869] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 710.736413] ? security_file_ioctl+0x94/0xc0 [ 710.740809] ksys_ioctl+0xa9/0xd0 [ 710.744262] __x64_sys_ioctl+0x73/0xb0 [ 710.748152] do_syscall_64+0x1b9/0x820 [ 710.752031] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 710.757417] ? syscall_return_slowpath+0x5e0/0x5e0 [ 710.762338] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 710.767182] ? trace_hardirqs_on_caller+0x310/0x310 [ 710.772200] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 710.777220] ? prepare_exit_to_usermode+0x291/0x3b0 [ 710.782251] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 710.787096] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 710.792275] RIP: 0033:0x457569 [ 710.795457] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 710.814346] RSP: 002b:00007f8018763c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 710.822037] RAX: ffffffffffffffda RBX: 00007f8018763c90 RCX: 0000000000457569 [ 710.829330] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 710.836598] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 710.843856] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f80187646d4 [ 710.851120] R13: 00000000004c034e R14: 00000000004d0d60 R15: 0000000000000007 09:03:09 executing program 3: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20000000001b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x10000000, 0x0, 0x8, 0x0, 0x7}) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x710000) 09:03:09 executing program 4: syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="45964a5c4f0f00fe000030492a768b88b40eda954797623745e0"], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$OBJ_GET_PROG(0x7, &(0x7f00000002c0)={&(0x7f0000000140)='./file0\x00'}, 0x10) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000440)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r1, 0x18000000000002a0, 0x34, 0x29, &(0x7f0000000280)="b90703e6680d698cb89e40f02cead5dc57ee41dea43e63a377fb8a977c3f1d1788e8ad30d84648a27f11c72be0000e01e1977d48", &(0x7f00000000c0)=""/41, 0x100}, 0x28) socketpair(0x7, 0x0, 0x9, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000006c0)={'rose0\x00', 0x2000}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x2) r4 = openat$cgroup_ro(r3, &(0x7f0000000480)='pids.events\x00', 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000500)) socketpair(0x3, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000400)={'eql\x00', 0x1000}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001000)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x48) socketpair(0x1, 0x2000000001, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB="b702000000001f00bfa30000000000000703000000feffff7a0af0fff8ffefff79a4f0ff00000000b7060000ffffffff2d64050000000000650404000100000004040000f2000000b7050000230000006a0a00fe8662625647c6dd78dcea13aa7e790a85366a7160c74732ef771cf402762a0f6577ea4481abce1e405ee1e0fd"], &(0x7f0000000340)='GPL\x00'}, 0x48) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x36b, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000680)}, 0x0, 0x0, 0x6}, 0x0, 0x0, r5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f1, &(0x7f0000000000)='ip6gre0\x00') openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='/grodp.stat\x00', 0x2761, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x304) ioctl$TUNSETLINK(r5, 0x400454cd, 0x20d) openat$cgroup_int(r4, &(0x7f00000005c0)='cpuacct.usage\x00', 0x2, 0x0) recvmsg$kcm(r2, &(0x7f0000004a00)={&(0x7f0000003940)=@hci={0x1f, 0x0}, 0x80, &(0x7f00000039c0), 0x0, &(0x7f0000003a00)=""/4096, 0x1000, 0x6}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000004a40)={0xf, 0xd, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x47, 0x0, 0x0, 0x0, 0x101}, [@map, @map={0x18, 0x7, 0x1, 0x0, r2}, @generic={0x5, 0x7, 0x20}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}]}, &(0x7f00000004c0)='syzkaller\x00', 0x5969, 0xe7, &(0x7f0000000780)=""/231, 0x0, 0x1, [], r7}, 0x48) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000000300)) ioctl$BLKRAGET(r6, 0x1263, &(0x7f0000000700)) r8 = socket(0x1e, 0x4, 0x200) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000040)=@req3, 0x94) 09:03:09 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5f32496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:03:09 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20000000001b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x10000000, 0x0, 0x8, 0x0, 0x7}) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x400000000000) 09:03:09 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000000000000]}, 0x10) 09:03:09 executing program 5 (fault-call:8 fault-nth:24): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000000)={'teql0\x00', {0x2, 0x0, @dev}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:03:09 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20000000001b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x10000000, 0x0, 0x8, 0x0, 0x7}) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x4000) 09:03:09 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5f96496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) [ 713.414965] FAULT_INJECTION: forcing a failure. [ 713.414965] name failslab, interval 1, probability 0, space 0, times 0 [ 713.464179] CPU: 1 PID: 31922 Comm: syz-executor5 Not tainted 4.20.0-rc4+ #138 [ 713.471562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 713.471570] Call Trace: [ 713.471600] dump_stack+0x244/0x39d [ 713.471627] ? dump_stack_print_info.cold.1+0x20/0x20 [ 713.471651] ? __kernel_text_address+0xd/0x40 [ 713.471675] ? unwind_get_return_address+0x61/0xa0 [ 713.471705] should_fail.cold.4+0xa/0x17 [ 713.505900] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 713.511028] ? save_stack+0xa9/0xd0 [ 713.514676] ? kasan_kmalloc+0xc7/0xe0 [ 713.518575] ? kasan_slab_alloc+0x12/0x20 [ 713.522735] ? kmem_cache_alloc+0x12e/0x730 [ 713.527082] ? mmu_topup_memory_caches+0xfb/0x470 [ 713.531938] ? kvm_mmu_load+0x21/0x1290 [ 713.535918] ? kvm_arch_vcpu_ioctl_run+0x2889/0x7320 [ 713.535938] ? zap_class+0x640/0x640 [ 713.535954] ? __x64_sys_ioctl+0x73/0xb0 [ 713.535971] ? do_syscall_64+0x1b9/0x820 [ 713.535992] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 713.558271] ? find_held_lock+0x36/0x1c0 [ 713.562347] ? __lock_is_held+0xb5/0x140 [ 713.566432] ? perf_trace_sched_process_exec+0x860/0x860 [ 713.571895] __should_failslab+0x124/0x180 [ 713.571915] should_failslab+0x9/0x14 [ 713.571931] kmem_cache_alloc+0x2be/0x730 [ 713.571948] ? mark_held_locks+0xc7/0x130 [ 713.571981] ? mmu_topup_memory_caches+0xfb/0x470 [ 713.572013] mmu_topup_memory_caches+0xfb/0x470 [ 713.572047] ? kvm_inject_realmode_interrupt+0x260/0x260 [ 713.593305] kvm_mmu_load+0x21/0x1290 [ 713.593328] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 713.593349] ? vmx_clear_hlt.isra.39+0xa5/0xd0 [ 713.593369] kvm_arch_vcpu_ioctl_run+0x2889/0x7320 [ 713.603483] ? kvm_arch_vcpu_runnable+0x710/0x710 [ 713.603499] ? zap_class+0x640/0x640 [ 713.603516] ? __lock_acquire+0x62f/0x4c20 [ 713.603536] ? lock_downgrade+0x900/0x900 [ 713.622340] ? check_preemption_disabled+0x48/0x280 [ 713.622371] ? find_held_lock+0x36/0x1c0 [ 713.622398] ? get_task_pid+0x1ea/0x3b0 [ 713.622415] ? lock_downgrade+0x900/0x900 [ 713.622431] ? check_preemption_disabled+0x48/0x280 [ 713.622450] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 713.644403] ? kasan_check_read+0x11/0x20 [ 713.666470] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 713.666486] ? rcu_softirq_qs+0x20/0x20 [ 713.666515] ? get_task_pid+0x211/0x3b0 [ 713.666531] ? find_get_pid+0x270/0x270 [ 713.666550] ? zap_class+0x640/0x640 [ 713.691570] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 713.697144] kvm_vcpu_ioctl+0x5c8/0x1150 [ 713.701213] ? kvm_vcpu_ioctl+0x5c8/0x1150 [ 713.701236] ? kvm_uevent_notify_change.part.32+0x450/0x450 [ 713.701267] ? find_held_lock+0x36/0x1c0 09:03:10 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x10) [ 713.701293] ? __fget+0x4aa/0x740 [ 713.701313] ? check_preemption_disabled+0x48/0x280 [ 713.711269] ? kasan_check_read+0x11/0x20 [ 713.711301] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 713.711317] ? rcu_softirq_qs+0x20/0x20 [ 713.711348] ? __fget+0x4d1/0x740 [ 713.723850] ? ksys_dup3+0x680/0x680 [ 713.723880] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 713.723903] ? kvm_uevent_notify_change.part.32+0x450/0x450 [ 713.740716] do_vfs_ioctl+0x1de/0x1790 [ 713.740734] ? __lock_is_held+0xb5/0x140 [ 713.740753] ? ioctl_preallocate+0x300/0x300 [ 713.740775] ? __fget_light+0x2e9/0x430 [ 713.740791] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 713.740809] ? smack_file_ioctl+0x210/0x3c0 [ 713.740820] ? fget_raw+0x20/0x20 [ 713.740833] ? smack_file_lock+0x2e0/0x2e0 [ 713.740851] ? __sb_end_write+0xd9/0x110 [ 713.740873] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 713.798573] ? fput+0x130/0x1a0 [ 713.801881] ? do_syscall_64+0x9a/0x820 [ 713.805883] ? do_syscall_64+0x9a/0x820 [ 713.809901] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 713.815442] ? security_file_ioctl+0x94/0xc0 [ 713.819860] ksys_ioctl+0xa9/0xd0 [ 713.823323] __x64_sys_ioctl+0x73/0xb0 [ 713.827218] do_syscall_64+0x1b9/0x820 [ 713.831108] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 713.836478] ? syscall_return_slowpath+0x5e0/0x5e0 [ 713.841459] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 713.846344] ? trace_hardirqs_on_caller+0x310/0x310 [ 713.851372] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 713.856396] ? prepare_exit_to_usermode+0x291/0x3b0 [ 713.861430] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 713.866294] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 713.871500] RIP: 0033:0x457569 [ 713.874703] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 713.893625] RSP: 002b:00007f8018763c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 713.901334] RAX: ffffffffffffffda RBX: 00007f8018763c90 RCX: 0000000000457569 [ 713.908604] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 713.915879] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 713.923155] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f80187646d4 [ 713.930427] R13: 00000000004c034e R14: 00000000004d0d60 R15: 0000000000000007 09:03:10 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20000000001b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x10000000, 0x0, 0x8, 0x0, 0x7}) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x705000) 09:03:10 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5f05496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:03:10 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5f2d496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:03:12 executing program 5 (fault-call:8 fault-nth:25): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000000)={'teql0\x00', {0x2, 0x0, @dev}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:03:12 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000]}, 0x10) 09:03:12 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20000000001b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x10000000, 0x0, 0x8, 0x0, 0x7}) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x930000000000) 09:03:12 executing program 3: syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="45964a5c4f0f00fe000030492a768b88b40eda954797623745e0"], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$OBJ_GET_PROG(0x7, &(0x7f00000002c0)={&(0x7f0000000140)='./file0\x00'}, 0x10) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000440)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r1, 0x18000000000002a0, 0x34, 0x29, &(0x7f0000000280)="b90703e6680d698cb89e40f02cead5dc57ee41dea43e63a377fb8a977c3f1d1788e8ad30d84648a27f11c72be0000e01e1977d48", &(0x7f00000000c0)=""/41, 0x100}, 0x28) socketpair(0x7, 0x0, 0x9, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000006c0)={'rose0\x00', 0x2000}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x2) r4 = openat$cgroup_ro(r3, &(0x7f0000000480)='pids.events\x00', 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000500)) socketpair(0x3, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000400)={'eql\x00', 0x1000}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001000)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x48) socketpair(0x1, 0x2000000001, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB="b702000000001f00bfa30000000000000703000000feffff7a0af0fff8ffefff79a4f0ff00000000b7060000ffffffff2d64050000000000650404000100000004040000f2000000b7050000230000006a0a00fe8662625647c6dd78dcea13aa7e790a85366a7160c74732ef771cf402762a0f6577ea4481abce1e405ee1e0fd"], &(0x7f0000000340)='GPL\x00'}, 0x48) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x36b, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000680)}, 0x0, 0x0, 0x6}, 0x0, 0x0, r5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f1, &(0x7f0000000000)='ip6gre0\x00') openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='/grodp.stat\x00', 0x2761, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x304) ioctl$TUNSETLINK(r5, 0x400454cd, 0x20d) openat$cgroup_int(r4, &(0x7f00000005c0)='cpuacct.usage\x00', 0x2, 0x0) recvmsg$kcm(r2, &(0x7f0000004a00)={&(0x7f0000003940)=@hci={0x1f, 0x0}, 0x80, &(0x7f00000039c0), 0x0, &(0x7f0000003a00)=""/4096, 0x1000, 0x6}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000004a40)={0xf, 0xd, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x47, 0x0, 0x0, 0x0, 0x101}, [@map, @map={0x18, 0x7, 0x1, 0x0, r2}, @generic={0x5, 0x7, 0x20}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}]}, &(0x7f00000004c0)='syzkaller\x00', 0x5969, 0xe7, &(0x7f0000000780)=""/231, 0x0, 0x1, [], r7}, 0x48) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000000300)) ioctl$BLKRAGET(r6, 0x1263, &(0x7f0000000700)) r8 = socket(0x1e, 0x4, 0x200) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000040)=@req3, 0x94) 09:03:12 executing program 4: r0 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0xfff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x80000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_READ(r0, 0xc0287c02, &(0x7f0000000040)) open_by_handle_at(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="9800000008000000c7573c52d5b0be3d2785faa78188fc9435cfe03c4cbe73a0b3752b8fcf14bc7542707a663ec817aea667d7e02e0514c4c909b515e1fe8ac3affa2285c43baac45063c577bf29984423303b131120fa5b277f9fa454d0ab5a687abe30f1e993440cd0f8f0c10e55792dba8b70fc0feed2b66958a493b96ec3cf4ebca804de35ceb12f085a9ee6500edefa1dd700000000"], 0x40000) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f00000001c0)={0x1, 0x70, 0x1000, 0x7f54, 0x7, 0x101, 0x0, 0x3ff, 0x0, 0x2, 0x4, 0xffff, 0x6, 0x9, 0xc13, 0x0, 0x7fff, 0xfffffffffffff584, 0xd37, 0x5, 0x8001, 0x21, 0x800, 0x1, 0x3ff, 0x7fffffff, 0x0, 0x10001, 0x3, 0x1, 0x7a411e3c, 0x100000001, 0x6, 0x1, 0x9, 0x1, 0xe0, 0x100, 0x0, 0x9, 0x0, @perf_config_ext={0x2, 0x33}, 0x1, 0x7, 0x3, 0x7, 0x2, 0x1, 0x200}) 09:03:12 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fa3496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:03:12 executing program 4: r0 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x0, 0x0) r1 = getpgrp(0x0) ptrace$setregs(0xf, r1, 0x200, &(0x7f0000000100)="5258420d0bc36a84f5cd727a94493b24e506f77aea7bcd709bd1ff4bb96e7406b4e4c4e0bbd48c2d692ff29775a328f7a331161cb69ec39c6094fe11aacfd6a44b193414f5d6df0495e8cf3ec9bccf25698f92e734dca0228e01d95274c0cf13c3a0") perf_event_open(&(0x7f0000000040)={0x80000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_READ(r0, 0xc0287c02, &(0x7f0000000040)) 09:03:12 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20000000001b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x10000000, 0x0, 0x8, 0x0, 0x7}) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0xfeffffff00000000) 09:03:12 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5f39496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:03:12 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50000]}, 0x10) [ 716.464603] FAULT_INJECTION: forcing a failure. [ 716.464603] name failslab, interval 1, probability 0, space 0, times 0 [ 716.549603] CPU: 0 PID: 31978 Comm: syz-executor5 Not tainted 4.20.0-rc4+ #138 [ 716.557025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 716.566400] Call Trace: [ 716.569015] dump_stack+0x244/0x39d [ 716.572670] ? dump_stack_print_info.cold.1+0x20/0x20 [ 716.577878] ? __kernel_text_address+0xd/0x40 [ 716.582386] ? unwind_get_return_address+0x61/0xa0 [ 716.587340] should_fail.cold.4+0xa/0x17 [ 716.591418] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 716.596542] ? save_stack+0xa9/0xd0 [ 716.600189] ? kasan_kmalloc+0xc7/0xe0 [ 716.604091] ? kasan_slab_alloc+0x12/0x20 [ 716.608277] ? kmem_cache_alloc+0x12e/0x730 [ 716.612611] ? mmu_topup_memory_caches+0xfb/0x470 [ 716.612627] ? kvm_mmu_load+0x21/0x1290 [ 716.612642] ? kvm_arch_vcpu_ioctl_run+0x2889/0x7320 [ 716.612661] ? zap_class+0x640/0x640 [ 716.612683] ? __x64_sys_ioctl+0x73/0xb0 [ 716.634348] ? do_syscall_64+0x1b9/0x820 [ 716.638414] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 716.638442] ? find_held_lock+0x36/0x1c0 [ 716.647852] ? __lock_is_held+0xb5/0x140 [ 716.651942] ? perf_trace_sched_process_exec+0x860/0x860 [ 716.657427] __should_failslab+0x124/0x180 [ 716.661679] should_failslab+0x9/0x14 [ 716.665488] kmem_cache_alloc+0x2be/0x730 [ 716.669651] ? mmu_topup_memory_caches+0xfb/0x470 [ 716.674511] mmu_topup_memory_caches+0xfb/0x470 [ 716.679192] ? kvm_inject_realmode_interrupt+0x260/0x260 [ 716.684663] kvm_mmu_load+0x21/0x1290 [ 716.688476] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 716.688498] ? vmx_clear_hlt.isra.39+0xa5/0xd0 [ 716.688517] kvm_arch_vcpu_ioctl_run+0x2889/0x7320 [ 716.703563] ? kvm_vcpu_ioctl+0x1e5/0x1150 [ 716.707824] ? kvm_arch_vcpu_runnable+0x710/0x710 [ 716.712682] ? zap_class+0x640/0x640 [ 716.716411] ? __lock_acquire+0x62f/0x4c20 [ 716.716429] ? lock_downgrade+0x900/0x900 [ 716.716448] ? check_preemption_disabled+0x48/0x280 [ 716.716475] ? find_held_lock+0x36/0x1c0 [ 716.724843] ? get_task_pid+0x1ea/0x3b0 [ 716.724863] ? lock_downgrade+0x900/0x900 [ 716.724884] ? check_preemption_disabled+0x48/0x280 09:03:12 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20000000001b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x10000000, 0x0, 0x8, 0x0, 0x7}) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x1000000) 09:03:13 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5f5f496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) [ 716.733937] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 716.733956] ? kasan_check_read+0x11/0x20 [ 716.733972] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 716.733997] ? rcu_softirq_qs+0x20/0x20 [ 716.734025] ? get_task_pid+0x211/0x3b0 [ 716.742117] ? find_get_pid+0x270/0x270 [ 716.742132] ? zap_class+0x640/0x640 [ 716.742153] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 716.742179] kvm_vcpu_ioctl+0x5c8/0x1150 [ 716.742200] ? kvm_vcpu_ioctl+0x5c8/0x1150 [ 716.752132] ? kvm_uevent_notify_change.part.32+0x450/0x450 [ 716.752156] ? find_held_lock+0x36/0x1c0 [ 716.752181] ? __fget+0x4aa/0x740 [ 716.761592] ? check_preemption_disabled+0x48/0x280 [ 716.761618] ? kasan_check_read+0x11/0x20 [ 716.761635] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 716.761651] ? rcu_softirq_qs+0x20/0x20 [ 716.761678] ? __fget+0x4d1/0x740 [ 716.761700] ? ksys_dup3+0x680/0x680 [ 716.829835] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 716.829862] ? kvm_uevent_notify_change.part.32+0x450/0x450 [ 716.840495] do_vfs_ioctl+0x1de/0x1790 [ 716.844396] ? __lock_is_held+0xb5/0x140 [ 716.848476] ? ioctl_preallocate+0x300/0x300 [ 716.852898] ? __fget_light+0x2e9/0x430 [ 716.856892] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 716.862443] ? smack_file_ioctl+0x210/0x3c0 [ 716.866779] ? fget_raw+0x20/0x20 [ 716.870246] ? smack_file_lock+0x2e0/0x2e0 [ 716.874518] ? __sb_end_write+0xd9/0x110 [ 716.878600] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 716.884162] ? fput+0x130/0x1a0 [ 716.887455] ? do_syscall_64+0x9a/0x820 [ 716.891441] ? do_syscall_64+0x9a/0x820 [ 716.895435] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 716.900986] ? security_file_ioctl+0x94/0xc0 [ 716.905417] ksys_ioctl+0xa9/0xd0 [ 716.908885] __x64_sys_ioctl+0x73/0xb0 [ 716.912790] do_syscall_64+0x1b9/0x820 [ 716.916700] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 716.922081] ? syscall_return_slowpath+0x5e0/0x5e0 [ 716.927024] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 716.931883] ? trace_hardirqs_on_caller+0x310/0x310 [ 716.936915] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 716.941945] ? prepare_exit_to_usermode+0x291/0x3b0 [ 716.947438] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 716.952328] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 716.957530] RIP: 0033:0x457569 [ 716.960733] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 716.979640] RSP: 002b:00007f8018763c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 716.987362] RAX: ffffffffffffffda RBX: 00007f8018763c90 RCX: 0000000000457569 [ 716.994639] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 717.001913] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 717.009191] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f80187646d4 [ 717.016474] R13: 00000000004c034e R14: 00000000004d0d60 R15: 0000000000000007 09:03:13 executing program 5 (fault-call:8 fault-nth:26): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000000)={'teql0\x00', {0x2, 0x0, @dev}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:03:13 executing program 4: r0 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x0, 0x0) ioctl$TIOCLINUX7(r0, 0x541c, &(0x7f00000002c0)={0x7, 0x3b}) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x7}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000240)={r1, 0xe8, &(0x7f0000000140)=[@in6={0xa, 0x4e21, 0x8, @mcast2, 0x9}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}, @in6={0xa, 0x4e21, 0x9, @local, 0x4}, @in6={0xa, 0x4e22, 0x5, @remote, 0x8}, @in={0x2, 0x4e23, @multicast2}, @in={0x2, 0x4e24, @remote}, @in={0x2, 0x4e24, @multicast2}, @in6={0xa, 0x4e21, 0x9}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e21, 0x8, @mcast1, 0x7}]}, &(0x7f0000000280)=0x10) perf_event_open(&(0x7f0000000040)={0x80000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_READ(r0, 0xc0287c02, &(0x7f0000000040)) write$UHID_INPUT2(r0, &(0x7f0000000300)={0xc, 0x73, "ca78939a6e6c6c354c3446121af574396fbe371e6d97375e08d25753907a474ac7ff74bb2c969b5b75200dbc7c96c2c4f306392ef52f8b2e991ea8a231e34cc554a2181104f97449b4ccb66ef8efb9f305adf6804221637ecdd94554dc27fd593430bc529ee7f929589fa2c307a469c7c9e8dd"}, 0x79) 09:03:13 executing program 3: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x38) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0xb56, 0x0, 0xe27}]}) r1 = socket$inet6(0xa, 0x803, 0x6) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r2 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r2, 0x2284, &(0x7f0000002880)={0x0, 0x0, 0x0, 0x80000000, @scatter={0x0, 0x6, &(0x7f0000001700)}, &(0x7f0000000000), &(0x7f0000000600)=""/4096, 0x0, 0x4, 0x0, &(0x7f00000005c0)}) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x82, 0x0) ioctl$KVM_GET_REGS(r3, 0x8090ae81, &(0x7f0000000040)) 09:03:13 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5f14496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:03:13 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffffffff000]}, 0x10) 09:03:13 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20000000001b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x10000000, 0x0, 0x8, 0x0, 0x7}) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x3b9ac9ff) 09:03:13 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20000000001b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x10000000, 0x0, 0x8, 0x0, 0x7}) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0xffc99a3b00000000) 09:03:13 executing program 4: r0 = accept$packet(0xffffffffffffff9c, 0x0, &(0x7f0000000000)) personality(0x0) fgetxattr(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="000067faf6d5f5e2bc2b00ff8ecdffff"], &(0x7f0000000140)=""/210, 0xd2) fcntl$setstatus(r0, 0x4, 0x4000) syz_open_dev$media(&(0x7f00000002c0)='/dev/media#\x00', 0xffffffffffffffff, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000040)={0x80000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) 09:03:13 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fd1496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:03:13 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0]}, 0x10) 09:03:13 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x40001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@broadcast, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={[], [], @remote}, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x80000000000000}}, 0xe8) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000100)={0x7b, 0x0, [0x9, 0x0, 0x0, 0xffff]}) sendmmsg(r1, &(0x7f00000000c0), 0x0, 0x0) rt_sigaction(0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)="65f0fe410040dde2f3ad79058fe830875daf2dc4a16e59942d91300000263e66660f38257900c481f557d2f3446fc4a259ac45fe", {}, 0x0, &(0x7f00000005c0)="c4e141db616b42de39c46135685b6ff30f52b0ab1ef7e426660f38156baf2e67420f1854b5d2f3dbecc462b2f57f07f30f11423e8fa858cc2a76"}, 0x8, &(0x7f0000000640)) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f00000001c0)=0x52) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)=0x0) tkill(r2, 0x18) [ 717.266024] FAULT_INJECTION: forcing a failure. [ 717.266024] name failslab, interval 1, probability 0, space 0, times 0 [ 717.329444] CPU: 0 PID: 32034 Comm: syz-executor5 Not tainted 4.20.0-rc4+ #138 [ 717.336851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 717.346215] Call Trace: [ 717.348823] dump_stack+0x244/0x39d [ 717.352469] ? dump_stack_print_info.cold.1+0x20/0x20 [ 717.357669] ? __kernel_text_address+0xd/0x40 [ 717.362174] ? unwind_get_return_address+0x61/0xa0 [ 717.367150] should_fail.cold.4+0xa/0x17 [ 717.371224] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 717.376358] ? save_stack+0xa9/0xd0 [ 717.379998] ? kasan_kmalloc+0xc7/0xe0 [ 717.383908] ? kasan_slab_alloc+0x12/0x20 [ 717.388057] ? kmem_cache_alloc+0x12e/0x730 [ 717.392403] ? mmu_topup_memory_caches+0xfb/0x470 [ 717.397253] ? kvm_mmu_load+0x21/0x1290 [ 717.401246] ? kvm_arch_vcpu_ioctl_run+0x2889/0x7320 [ 717.406389] ? zap_class+0x640/0x640 [ 717.410111] ? __x64_sys_ioctl+0x73/0xb0 [ 717.414179] ? do_syscall_64+0x1b9/0x820 [ 717.418248] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 717.423658] ? find_held_lock+0x36/0x1c0 [ 717.427748] ? __lock_is_held+0xb5/0x140 [ 717.431838] ? perf_trace_sched_process_exec+0x860/0x860 [ 717.437318] __should_failslab+0x124/0x180 [ 717.441563] should_failslab+0x9/0x14 [ 717.445370] kmem_cache_alloc+0x2be/0x730 [ 717.449526] ? lock_acquire+0x1ed/0x520 [ 717.453507] ? kvm_arch_vcpu_ioctl_run+0x30f/0x7320 [ 717.458529] ? mmu_topup_memory_caches+0xfb/0x470 [ 717.463384] mmu_topup_memory_caches+0xfb/0x470 [ 717.468106] ? kvm_inject_realmode_interrupt+0x260/0x260 [ 717.473573] kvm_mmu_load+0x21/0x1290 [ 717.477390] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 717.482951] ? vmx_clear_hlt.isra.39+0xa5/0xd0 [ 717.487543] kvm_arch_vcpu_ioctl_run+0x2889/0x7320 [ 717.492483] ? kvm_vcpu_ioctl+0x1e5/0x1150 [ 717.496744] ? kvm_arch_vcpu_runnable+0x710/0x710 [ 717.501595] ? zap_class+0x640/0x640 [ 717.505331] ? __lock_acquire+0x62f/0x4c20 [ 717.509573] ? lock_downgrade+0x900/0x900 [ 717.513732] ? check_preemption_disabled+0x48/0x280 [ 717.518770] ? find_held_lock+0x36/0x1c0 [ 717.522850] ? get_task_pid+0x1ea/0x3b0 [ 717.526832] ? lock_downgrade+0x900/0x900 [ 717.530984] ? check_preemption_disabled+0x48/0x280 [ 717.536011] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 717.540949] ? kasan_check_read+0x11/0x20 [ 717.545106] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 717.550391] ? rcu_softirq_qs+0x20/0x20 [ 717.554394] ? get_task_pid+0x211/0x3b0 [ 717.558376] ? find_get_pid+0x270/0x270 [ 717.562354] ? zap_class+0x640/0x640 [ 717.566078] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 717.571640] kvm_vcpu_ioctl+0x5c8/0x1150 [ 717.575708] ? kvm_vcpu_ioctl+0x5c8/0x1150 [ 717.579956] ? kvm_uevent_notify_change.part.32+0x450/0x450 [ 717.585680] ? find_held_lock+0x36/0x1c0 [ 717.589760] ? __fget+0x4aa/0x740 [ 717.593225] ? check_preemption_disabled+0x48/0x280 [ 717.598281] ? kasan_check_read+0x11/0x20 [ 717.602435] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 717.607719] ? rcu_softirq_qs+0x20/0x20 [ 717.611718] ? __fget+0x4d1/0x740 [ 717.615191] ? ksys_dup3+0x680/0x680 [ 717.618927] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 717.623875] ? kvm_uevent_notify_change.part.32+0x450/0x450 [ 717.629593] do_vfs_ioctl+0x1de/0x1790 [ 717.633492] ? __lock_is_held+0xb5/0x140 [ 717.637563] ? ioctl_preallocate+0x300/0x300 [ 717.641979] ? __fget_light+0x2e9/0x430 [ 717.645965] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 717.651511] ? smack_file_ioctl+0x210/0x3c0 [ 717.655835] ? fget_raw+0x20/0x20 [ 717.659299] ? smack_file_lock+0x2e0/0x2e0 [ 717.663547] ? __sb_end_write+0xd9/0x110 [ 717.667622] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 717.673166] ? fput+0x130/0x1a0 [ 717.676456] ? do_syscall_64+0x9a/0x820 [ 717.680442] ? do_syscall_64+0x9a/0x820 [ 717.684430] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 717.689973] ? security_file_ioctl+0x94/0xc0 [ 717.694398] ksys_ioctl+0xa9/0xd0 [ 717.697865] __x64_sys_ioctl+0x73/0xb0 [ 717.701760] do_syscall_64+0x1b9/0x820 [ 717.705658] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 717.711029] ? syscall_return_slowpath+0x5e0/0x5e0 [ 717.715961] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 717.720814] ? trace_hardirqs_on_caller+0x310/0x310 [ 717.725836] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 717.730862] ? prepare_exit_to_usermode+0x291/0x3b0 [ 717.735892] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 717.740750] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 717.745942] RIP: 0033:0x457569 [ 717.749141] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 717.768048] RSP: 002b:00007f8018763c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 09:03:14 executing program 4: r0 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x80000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000feb000/0x12000)=nil, 0x12000}, 0xfffffffffffffffe}) ioctl$RTC_EPOCH_READ(r0, 0xc0287c02, &(0x7f0000000040)) [ 717.775758] RAX: ffffffffffffffda RBX: 00007f8018763c90 RCX: 0000000000457569 [ 717.783046] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 717.790314] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 717.797582] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f80187646d4 [ 717.804852] R13: 00000000004c034e R14: 00000000004d0d60 R15: 0000000000000007 09:03:14 executing program 5 (fault-call:8 fault-nth:27): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000000)={'teql0\x00', {0x2, 0x0, @dev}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:03:14 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5f46496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:03:14 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20000000001b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x10000000, 0x0, 0x8, 0x0, 0x7}) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x70700000000000) 09:03:14 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7a8851000000000]}, 0x10) 09:03:14 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x40001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@broadcast, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={[], [], @remote}, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x80000000000000}}, 0xe8) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000100)={0x7b, 0x0, [0x9, 0x0, 0x0, 0xffff]}) sendmmsg(r1, &(0x7f00000000c0), 0x0, 0x0) rt_sigaction(0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)="65f0fe410040dde2f3ad79058fe830875daf2dc4a16e59942d91300000263e66660f38257900c481f557d2f3446fc4a259ac45fe", {}, 0x0, &(0x7f00000005c0)="c4e141db616b42de39c46135685b6ff30f52b0ab1ef7e426660f38156baf2e67420f1854b5d2f3dbecc462b2f57f07f30f11423e8fa858cc2a76"}, 0x8, &(0x7f0000000640)) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f00000001c0)=0x52) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)=0x0) tkill(r2, 0x18) 09:03:14 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f00000003c0)='/dev/vcsa#\x00', 0x5, 0x440) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000400)) r1 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x80000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_READ(r1, 0xc0287c02, &(0x7f0000000040)) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x10, r1, 0x0) accept4$unix(r1, &(0x7f0000000100)=@abs, &(0x7f0000000000)=0x6e, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000340)={{0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, [], 0xe}, 0x1}, {0xa, 0x4e22, 0x0, @empty, 0x9f8b}, 0x1, [0x7d, 0x8, 0x0, 0x1, 0x9, 0x2, 0x2, 0x81]}, 0x5c) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000180)={0x0, 0xbf, "a14f19c5ae9802ed3a2bbb2b9241046f860f6d0c62b9ea87d6a0a7c6f7c9a23a52fbee2530cf7ddd112df5119ab9394e14ce02ac15ff8e4af2d9977910c85af08bf5b4649c3d20d7174a61b3673ba3cc107bc3e3f2da25212a0d43a1fc8bf5b2189e8185ed192315a0a077ee61600b51016b5d9035a62f5836be62146ac5a93005c1f6f3f553f329cea4ac0fc9cb733e2d0ad6bac7ea573af679c54cd2cc453d16d4b30f4b2c29553952e20dcb9d65c7f47a9000817e9c707b15fe9ca8997f"}, &(0x7f0000000280)=0xc7) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440), &(0x7f0000000480)=0x4) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f00000002c0)={r2, 0x7fff, 0x30, 0x9, 0x493d}, &(0x7f0000000300)=0x18) 09:03:14 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fe7496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:03:14 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20000000001b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x10000000, 0x0, 0x8, 0x0, 0x7}) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0xfeffffff) 09:03:14 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x200, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100018}, 0xc, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[]}, 0x1, 0x0, 0x0, 0x87d}, 0x30000000) [ 718.134396] FAULT_INJECTION: forcing a failure. [ 718.134396] name failslab, interval 1, probability 0, space 0, times 0 [ 718.200512] CPU: 1 PID: 32071 Comm: syz-executor5 Not tainted 4.20.0-rc4+ #138 [ 718.207946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 718.217341] Call Trace: [ 718.219952] dump_stack+0x244/0x39d [ 718.223624] ? dump_stack_print_info.cold.1+0x20/0x20 [ 718.228831] ? __kernel_text_address+0xd/0x40 [ 718.233403] ? unwind_get_return_address+0x61/0xa0 [ 718.238366] should_fail.cold.4+0xa/0x17 [ 718.242462] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 718.247581] ? save_stack+0xa9/0xd0 [ 718.251222] ? kasan_kmalloc+0xc7/0xe0 [ 718.255129] ? kasan_slab_alloc+0x12/0x20 [ 718.259311] ? kmem_cache_alloc+0x12e/0x730 [ 718.263640] ? mmu_topup_memory_caches+0xfb/0x470 [ 718.268488] ? kvm_mmu_load+0x21/0x1290 [ 718.272468] ? kvm_arch_vcpu_ioctl_run+0x2889/0x7320 [ 718.277583] ? zap_class+0x640/0x640 [ 718.281347] ? __x64_sys_ioctl+0x73/0xb0 [ 718.285428] ? do_syscall_64+0x1b9/0x820 [ 718.289499] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 718.294893] ? find_held_lock+0x36/0x1c0 [ 718.298982] ? __lock_is_held+0xb5/0x140 [ 718.303063] ? perf_trace_sched_process_exec+0x860/0x860 [ 718.308565] __should_failslab+0x124/0x180 [ 718.312814] should_failslab+0x9/0x14 [ 718.316620] kmem_cache_alloc+0x2be/0x730 [ 718.320792] ? mmu_topup_memory_caches+0xfb/0x470 [ 718.325653] mmu_topup_memory_caches+0xfb/0x470 [ 718.330333] ? kvm_inject_realmode_interrupt+0x260/0x260 [ 718.335803] kvm_mmu_load+0x21/0x1290 [ 718.339627] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 718.345177] ? vmx_clear_hlt.isra.39+0xa5/0xd0 [ 718.349791] kvm_arch_vcpu_ioctl_run+0x2889/0x7320 [ 718.354731] ? kvm_vcpu_ioctl+0x1e5/0x1150 [ 718.359001] ? kvm_arch_vcpu_runnable+0x710/0x710 [ 718.363850] ? zap_class+0x640/0x640 [ 718.367579] ? __lock_acquire+0x62f/0x4c20 [ 718.371818] ? lock_downgrade+0x900/0x900 [ 718.375988] ? check_preemption_disabled+0x48/0x280 [ 718.381013] ? find_held_lock+0x36/0x1c0 [ 718.385090] ? get_task_pid+0x1ea/0x3b0 [ 718.389113] ? lock_downgrade+0x900/0x900 [ 718.393279] ? check_preemption_disabled+0x48/0x280 [ 718.398310] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 718.403278] ? kasan_check_read+0x11/0x20 [ 718.407436] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 718.412718] ? rcu_softirq_qs+0x20/0x20 [ 718.416729] ? get_task_pid+0x211/0x3b0 [ 718.420748] ? find_get_pid+0x270/0x270 [ 718.424735] ? zap_class+0x640/0x640 [ 718.428468] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 718.434084] kvm_vcpu_ioctl+0x5c8/0x1150 [ 718.438179] ? kvm_vcpu_ioctl+0x5c8/0x1150 [ 718.442442] ? kvm_uevent_notify_change.part.32+0x450/0x450 [ 718.448179] ? find_held_lock+0x36/0x1c0 [ 718.452272] ? __fget+0x4aa/0x740 [ 718.455739] ? check_preemption_disabled+0x48/0x280 [ 718.460780] ? kasan_check_read+0x11/0x20 [ 718.464934] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 718.470248] ? rcu_softirq_qs+0x20/0x20 [ 718.474250] ? __fget+0x4d1/0x740 [ 718.477736] ? ksys_dup3+0x680/0x680 [ 718.481478] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 718.486439] ? kvm_uevent_notify_change.part.32+0x450/0x450 [ 718.492173] do_vfs_ioctl+0x1de/0x1790 [ 718.496095] ? __lock_is_held+0xb5/0x140 [ 718.500171] ? ioctl_preallocate+0x300/0x300 [ 718.504590] ? __fget_light+0x2e9/0x430 [ 718.508574] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 718.514117] ? smack_file_ioctl+0x210/0x3c0 [ 718.518440] ? fget_raw+0x20/0x20 [ 718.521915] ? smack_file_lock+0x2e0/0x2e0 [ 718.526172] ? __sb_end_write+0xd9/0x110 [ 718.530248] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 718.535817] ? fput+0x130/0x1a0 [ 718.539102] ? do_syscall_64+0x9a/0x820 [ 718.543120] ? do_syscall_64+0x9a/0x820 [ 718.547102] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 718.552646] ? security_file_ioctl+0x94/0xc0 [ 718.557062] ksys_ioctl+0xa9/0xd0 [ 718.560527] __x64_sys_ioctl+0x73/0xb0 [ 718.564440] do_syscall_64+0x1b9/0x820 [ 718.568329] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 718.573704] ? syscall_return_slowpath+0x5e0/0x5e0 [ 718.578653] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 718.583508] ? trace_hardirqs_on_caller+0x310/0x310 [ 718.588533] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 718.593574] ? prepare_exit_to_usermode+0x291/0x3b0 [ 718.598617] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 718.603477] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 718.608686] RIP: 0033:0x457569 [ 718.611882] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 718.630785] RSP: 002b:00007f8018763c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 718.638496] RAX: ffffffffffffffda RBX: 00007f8018763c90 RCX: 0000000000457569 09:03:14 executing program 4: r0 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x80000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') ioctl$RTC_EPOCH_READ(r0, 0xc0287c02, &(0x7f0000000040)) 09:03:14 executing program 3: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000240)='/dev/rtc0\x00', 0x2000, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00007d9fc8)={&(0x7f000087fff4), 0xc, &(0x7f0000a40000)={&(0x7f0000b9e000)=@migrate={0xac, 0x21, 0x411, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast1}, 0x0, 0xffffff9e}, [@migrate={0x5c, 0x11, [{@in6=@loopback, @in=@multicast2}, {@in6=@mcast1, @in6=@mcast1}]}]}, 0xac}}, 0x0) close(r1) 09:03:14 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe000000]}, 0x10) [ 718.645784] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 718.653052] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 718.660352] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f80187646d4 [ 718.667619] R13: 00000000004c034e R14: 00000000004d0d60 R15: 0000000000000007 09:03:15 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000000)={'teql0\x00', {0x2, 0x0, @dev}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:03:15 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5f43496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:03:15 executing program 4: r0 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x0, 0x0) ioctl$VIDIOC_G_SLICED_VBI_CAP(r0, 0xc0745645, &(0x7f0000000100)={0x95d0, [0xac3, 0x1, 0x6, 0x1f, 0x1000, 0xdf000000, 0x1, 0x5, 0xfffffffffffffffc, 0x4, 0x6, 0x4, 0xdc, 0x80, 0x1, 0x7ff, 0x6b, 0x200, 0x6, 0x2, 0x8, 0x7, 0x81, 0x3, 0x80, 0x6, 0x4, 0x764d739e, 0x9, 0x2, 0x6, 0x100, 0x80000001, 0x0, 0x3f, 0x7fffffff, 0x9, 0x7, 0x8001, 0x64, 0x3, 0x9, 0xfffffffffffffffd, 0x6, 0x80000001, 0x7, 0x5, 0x3], 0x7}) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x40500, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000200)={0x0, 0x6f4}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000280)={r2, @in6={{0xa, 0x4e21, 0xfffffffffffffff8, @local, 0xf0}}, 0x0, 0x40, 0xa10, 0x1, 0x4}, 0x98) perf_event_open(&(0x7f0000000040)={0x80000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_READ(r0, 0xc0287c02, &(0x7f0000000040)) 09:03:15 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000042c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [0x40000021, 0x1]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:03:15 executing program 4: r0 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x80000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_READ(r0, 0xc0287c02, &(0x7f0000000040)) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x429, 0x2, 0x2, 0x8001, 0x400, 0x1000, 0x80}, 0xc) 09:03:15 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5feeee6e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:03:15 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe]}, 0x10) 09:03:17 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20000000001b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x10000000, 0x0, 0x8, 0x0, 0x7}) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x707000) 09:03:17 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000000)={'teql0\x00', {0x2, 0x0, @dev}}) ioctl$KVM_RUN(r2, 0x41a0ae8d, 0x0) 09:03:17 executing program 3: 09:03:17 executing program 4: r0 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x80000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_READ(r0, 0xc0287c02, &(0x7f0000000040)) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000000)={'{p6_vti0\x00', 0x9}) 09:03:17 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee49ee6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:03:17 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x240]}, 0x10) 09:03:17 executing program 3: 09:03:17 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496eee66856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:03:17 executing program 4: r0 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x0, 0x100) perf_event_open(&(0x7f0000000040)={0x80000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x138, r1, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x48, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@rand_addr=0xfffffffffffffffa}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@empty}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x11}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x49}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bond\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x62673732}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x800}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x9}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'yam0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={[], [], @local}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}]}, 0x138}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000300)={0xfffffffffffffe00, 0xfff, 0x3, 0x80}) ioctl$RTC_EPOCH_READ(r0, 0xc0287c02, &(0x7f0000000040)) 09:03:17 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c00000000000000]}, 0x10) 09:03:17 executing program 3: 09:03:17 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20000000001b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x10000000, 0x0, 0x8, 0x0, 0x7}) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x507000) 09:03:17 executing program 3: 09:03:17 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000000)={'teql0\x00', {0x2, 0x0, @dev}}) ioctl$KVM_RUN(r2, 0x2, 0x0) 09:03:17 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e68ee856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:03:17 executing program 4: r0 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x80000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x80000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_READ(r0, 0xc0287c02, &(0x7f0000000200)) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0xe1, 0x201) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000140)={0x15, 0xc, &(0x7f0000000100)="f75c26c1938a777270a774db"}) 09:03:17 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20000000001b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x10000000, 0x0, 0x8, 0x0, 0x7}) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x70500000000000) 09:03:17 executing program 3: 09:03:17 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}, 0x10) 09:03:18 executing program 4: r0 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x0, 0x0) ioctl$RTC_EPOCH_READ(r0, 0xc0287c02, &(0x7f0000000100)) 09:03:18 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866ee6b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:03:18 executing program 3: 09:03:18 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20000000001b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x10000000, 0x0, 0x8, 0x0, 0x7}) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0xffffffff00000000) 09:03:18 executing program 3: 09:03:18 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000580)='/dev/media#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x80000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000100)={{{@in=@multicast1, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@mcast1}}, &(0x7f0000000200)=0xe8) sendmsg$nl_route_sched(r0, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40020}, 0xc, &(0x7f0000000500)={&(0x7f0000000240)=@delqdisc={0x294, 0x25, 0x5, 0x70bd2b, 0x25dfdbff, {0x0, r2, {0x1, 0xd}, {0x6, 0x5}, {0x5, 0xfff6}}, [@TCA_RATE={0x8, 0x5, {0x1, 0x1f}}, @TCA_RATE={0x8, 0x5, {0x5, 0xfffffffffffff22d}}, @TCA_RATE={0x8, 0x5, {0x3, 0x9}}, @qdisc_kind_options=@q_pie={{0x8, 0x1, 'pie\x00'}, {0x14, 0x2, [@TCA_PIE_LIMIT={0x8, 0x2, 0xff}, @TCA_PIE_TARGET={0x8, 0x1, 0x5}]}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}, @qdisc_kind_options=@q_choke={{0xc, 0x1, 'choke\x00'}, {0x228, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x7, 0xfffffffffffffffd, 0x98b, 0xe, 0x5, 0x18}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x7687}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x294}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) socket$pppoe(0x18, 0x1, 0x0) syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x8, 0x10000) readahead(r1, 0x400, 0xff) ioctl$RTC_EPOCH_READ(r0, 0xc0287c02, &(0x7f0000000040)) 09:03:18 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000000)={'teql0\x00', {0x2, 0x0, @dev}}) ioctl$KVM_RUN(r2, 0x8004ae98, 0x0) 09:03:18 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000]}, 0x10) 09:03:18 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20000000001b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x10000000, 0x0, 0x8, 0x0, 0x7}) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x9300) 09:03:18 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e686685ee76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:03:18 executing program 3: 09:03:18 executing program 4: r0 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x80000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x380000, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_READ(r0, 0xc0287c02, &(0x7f0000000040)) 09:03:18 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20000000001b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x10000000, 0x0, 0x8, 0x0, 0x7}) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x730000) 09:03:18 executing program 3: 09:03:18 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856beeb5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:03:18 executing program 4: r0 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x80000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000180)) init_module(&(0x7f0000000000)='em1\x00', 0x4, &(0x7f0000000100)='/dev/media#\x00') ioctl$RTC_EPOCH_READ(r0, 0xc0287c02, &(0x7f0000000040)) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000140)) 09:03:18 executing program 3: 09:03:18 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34]}, 0x10) 09:03:18 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000000)={'teql0\x00', {0x2, 0x0, @dev}}) ioctl$KVM_RUN(r2, 0x4004ae8b, 0x0) 09:03:18 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20000000001b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x10000000, 0x0, 0x8, 0x0, 0x7}) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x730000000000) 09:03:18 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76eeee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:03:18 executing program 4: openat$vimc1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video1\x00', 0x2, 0x0) r0 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x0, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x8c00, 0x0) getpid() perf_event_open(&(0x7f0000000040)={0x80000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_READ(r0, 0xc0287c02, &(0x7f0000000040)) 09:03:18 executing program 3: 09:03:18 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe]}, 0x10) 09:03:18 executing program 4: r0 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x0, 0x0) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000000)='trusted.overlay.upper\x00', &(0x7f0000000100)={0x0, 0xfb, 0xa6, 0x0, 0x793b, "2d7f05b744dca46a0c1750e8a9b5b00f", "4df75de1cf9d8d52fc745cb23c6713e546d6103150811ffa572c9525e58c6a7485d1fc443eeee9e9f05ff937961ab8af79cb577b4eb42034e09900dbcd685e38e61ecb61d85197fb847cac46dfde4966bfcdea41952a474e8c56633c69280ee0cfdab4cdeb35828e849b944916cd463903adb7772730896f2f3b50293b7505aeff9f3aac06cc6c5cc68b2113fcd85e8a9f"}, 0xa6, 0x0) perf_event_open(&(0x7f0000000040)={0x80000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_READ(r0, 0xc0287c02, &(0x7f0000000040)) 09:03:18 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5d900000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:03:18 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20000000001b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x10000000, 0x0, 0x8, 0x0, 0x7}) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0xffefffffff7f0000) 09:03:18 executing program 3: 09:03:18 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000000)={'teql0\x00', {0x2, 0x0, @dev}}) ioctl$KVM_RUN(r2, 0xc0045878, 0x0) 09:03:18 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5b300000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:03:18 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffffff7f0000]}, 0x10) 09:03:18 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000a00)='lo.\x00', 0x2, 0x0, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/255, 0x443}], 0x10000000000000c1) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x2) r3 = dup3(r2, r1, 0x0) ioctl$GIO_FONT(r3, 0x4b60, &(0x7f0000000080)=""/51) write(r1, &(0x7f0000c34fff), 0xffffff0b) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@multicast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6}}, 0x0) setresuid(0x0, r4, 0x0) 09:03:18 executing program 4: r0 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x80000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCXONC(r0, 0x540a, 0x9) ioctl$RTC_EPOCH_READ(r0, 0xc0287c02, &(0x7f0000000100)) 09:03:19 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20000000001b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x10000000, 0x0, 0x8, 0x0, 0x7}) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x100000000000000) 09:03:19 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b52d00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:03:19 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20000000001b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x10000000, 0x0, 0x8, 0x0, 0x7}) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x8000000000000000) 09:03:19 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000000)={'teql0\x00', {0x2, 0x0, @dev}}) ioctl$KVM_RUN(r2, 0x81a0ae8c, 0x0) 09:03:19 executing program 4: r0 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x0, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000040)={0x80000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0x0, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_READ(r0, 0xc0287c02, &(0x7f0000000040)) 09:03:19 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000]}, 0x10) 09:03:19 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b56700000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:03:19 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000a00)='lo.\x00', 0x2, 0x0, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/255, 0x443}], 0x10000000000000c1) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x2) r3 = dup3(r2, r1, 0x0) ioctl$GIO_FONT(r3, 0x4b60, &(0x7f0000000080)=""/51) write(r1, &(0x7f0000c34fff), 0xffffff0b) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@multicast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6}}, 0x0) setresuid(0x0, r4, 0x0) 09:03:19 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20000000001b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x10000000, 0x0, 0x8, 0x0, 0x7}) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0xff600000) 09:03:19 executing program 4: r0 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x80000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x2) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$RTC_EPOCH_READ(r0, 0xc0287c02, &(0x7f0000000040)) 09:03:19 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000000)={'teql0\x00', {0x2, 0x0, @dev}}) ioctl$KVM_RUN(r2, 0x5421, 0x0) 09:03:19 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00]}, 0x10) 09:03:19 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5e700000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:03:19 executing program 4: r0 = shmget(0x1, 0x4000, 0x8, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000480)=""/11) r1 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x0, 0x488100) perf_event_open(&(0x7f0000000040)={0x80000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x1, 0xffffffff, 0x0, 0x3, 0x0, 0x0, 0x0, 0xbe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000100)={0x9, 0xe4b, 0x4, {0x0, @pix_mp={0x510d, 0x1, 0x30364d54, 0x9, 0x282e17af6e49f8f, [{0xc18, 0x26408a12}, {0x8, 0x9}, {0x6, 0xe3}, {0x2, 0x2}, {0xafe7, 0x3}, {0xfffffffffffffffa, 0x8688}, {0x9, 0xffffffff}, {0xfffffffffffffffe, 0xc49}], 0x20, 0x1000, 0x2, 0x3, 0x1}}}) timer_create(0x4, &(0x7f0000000000)={0x0, 0x11, 0x7, @thr={&(0x7f0000000200)="80680c01b539854c4f7740f9e3932c482ef91f34a33cab2cd6756c4fa7ec827114f6092ed554d2dca8130d52966efc46ae57e15211ccaafc932b2a0a0c0a7552033064bf7acf8ef417eda619b43cb3b193e8fa58fa30b114d04441d83f4e6c4c4d9acbff45efdc98901342538746375c4bd2c628333f31f18a", &(0x7f0000000280)="eee44a3a0b849678bc8d311ff76be2487942d96f0f7aa28a4759e3dc6d4aa9dd61f36364e3fe590adf6829221fcedd70daa33a974c4efc95ab5aa70f2ccc9432b27f8ba3791a6127c0e03a0f40df4d0063104bce9bf6c7df46a37b820bcc8434542cf4f1bf4a47a696fa398920116c822b87468ca609267d0488f8b5340742141211213d316fca50e4e87426246b864be9ac426104a27c08d914c325cd5549ed8b18249a1f8311b7d6c5fd2773c4e2843c4ac9b77b01235f7cc7981999e5f8dbf138eac9ab3fe04e151d80f81c6f789c7251e681c21d45d21fdbc4330c0194f343f94d3a7a1a0c8eef"}}, &(0x7f0000000380)=0x0) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) timer_settime(r2, 0x1, &(0x7f0000000400)={{r3, r4+30000000}, {0x0, 0x989680}}, &(0x7f0000000440)) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000004c0)=@assoc_value={0x0, 0xffffffff}, &(0x7f0000000500)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000540)={r5, 0x8}, &(0x7f0000000580)=0x8) 09:03:19 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000000)={'teql0\x00', {0x2, 0x0, @dev}}) ioctl$KVM_RUN(r2, 0x5450, 0x0) 09:03:19 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x26) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000000)={0xffffffffffffff9c}) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000040)={0x0, 0x10000}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000140)={r2, 0x19, "f2bf7db3b4494cb37d6ef607105274de4164a719b40cfbe47b"}, &(0x7f0000000180)=0x21) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x10000000, 0x0, 0x8, 0x0, 0x7}) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 09:03:19 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00]}, 0x10) 09:03:19 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b54a00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:03:19 executing program 4: openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x200, 0x0) r0 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x80000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_READ(r0, 0xc0287c02, &(0x7f0000000040)) 09:03:19 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000a00)='lo.\x00', 0x2, 0x0, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/255, 0x443}], 0x10000000000000c1) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x2) r3 = dup3(r2, r1, 0x0) ioctl$GIO_FONT(r3, 0x4b60, &(0x7f0000000080)=""/51) write(r1, &(0x7f0000c34fff), 0xffffff0b) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@multicast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6}}, 0x0) setresuid(0x0, r4, 0x0) 09:03:19 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x7ffc, 0xcc) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000000040)={{0x0, 0x200}, 0x1, 0x2, 0x0, {0x7f, 0xffffffffffffff7f}, 0x7ff, 0x1}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20000000041b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x10000000, 0x0, 0x8, 0x0, 0x7}) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x3, 0x14) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 09:03:19 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5d600000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:03:19 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000]}, 0x10) 09:03:19 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000000)={'teql0\x00', {0x2, 0x0, @dev}}) ioctl$KVM_RUN(r2, 0x8090ae81, 0x0) 09:03:19 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b55200000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:03:19 executing program 4: r0 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x80000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_READ(r0, 0xc0287c02, &(0x7f0000000040)) ioctl$TIOCLINUX7(r0, 0x541c, &(0x7f0000000000)) [ 723.613328] audit: type=1800 audit(1543741399.944:40): pid=32408 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor2" name="file0" dev="sda1" ino=17192 res=0 09:03:20 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) getresuid(&(0x7f0000002400), &(0x7f0000002440), &(0x7f0000002480)=0x0) getresgid(&(0x7f00000024c0)=0x0, &(0x7f0000002500), &(0x7f0000002540)) sendmsg$unix(r1, &(0x7f00000025c0)={&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000002380)=[{&(0x7f00000000c0)="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", 0x1000}, {&(0x7f00000010c0)="e1dca23b37b92f25c4d1d7fd5bd13f36f6aa973f5661dfdbb5dba77603c7", 0x1e}, {&(0x7f0000001100)="cda94a59a55101016e2016097c6a042f36f5853728bdd7103c3534fb167e625b9bd2a3332971860187beb917dff4e9b5c992d760d7b9db926698d0fc5dff0f3fc9aa35f3faf3c8c4c57bf007017652edb00954ed7da219ca2f103b76efa76f4e42fdc61b79aab8c0bd3d4c91ade1327895b5962f1b1f2b5073aa1fdc07c8da84097804a804379f39c246e67f685d88e63ac88a4ab3929ddf6d5e237cfcf7eaceb51c88981232ea9b98a6e36f8f1fdfb045a09f3ed50a715e6b77397eb88d8e229a3eba1f4d2c7da6d21127c41b547b6093cb525131c7352e65859c6e30aa32a5e8", 0xe1}, {&(0x7f0000001200)="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", 0x1000}, {&(0x7f0000002200)="e3cb2344d279cf769d5324b865f40d679541aa322c50972c06aeab33c5c8535325cc50f2c43637e0bf8d1029af139e733da0cc26936301b4a588478a4eab5d0e1bf07144522ed36321ddea77b4a3733e35f0609c0eb250c8eecb48f1bad501a58da9e96f66c79dc257c153ce55330ad4ea0a2a0d73922dd46fa34f3d92bb", 0x7e}, {&(0x7f0000002280)="f0948caabc74e6fdd9ff0cf27d72b5e38cd3d97ce4e4a94abd30421289cb02482655e83f2595254b5f3c7f0beeaed64afd0917177040661e6031f8f42927ce2610032d7f3e02952867257c6e3f31c4715a4f6335ca49c49afa48206439991cf1baa999bcdd1925fef61839b2bc9f43b9ea81d283fb98a928db8b856635a681c534083e03ef9a162a568c30feb1954458148c59c8bc644514ea9f8c7fc784f2cd4abfb69c6d0bdc92b7f1fad7bfefbf2d019e6da0872e2e359e2d9c92f8b9397a250cad4566b6d970fc02145983f944f0be8aa541d2e031e18e9a657defdf8a39784bc5", 0xe3}], 0x6, &(0x7f0000002580)=[@cred={0x20, 0x1, 0x2, r0, r2, r3}], 0x20, 0x8000}, 0x0) tkill(r0, 0x20000000001b) ptrace$cont(0x3f, r0, 0x0, 0xffffffffffffffff) openat$rfkill(0xffffffffffffff9c, 0x0, 0x200021901, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 09:03:20 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27a88510]}, 0x10) 09:03:20 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000a00)='lo.\x00', 0x2, 0x0, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/255, 0x443}], 0x10000000000000c1) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x2) r3 = dup3(r2, r1, 0x0) ioctl$GIO_FONT(r3, 0x4b60, &(0x7f0000000080)=""/51) write(r1, &(0x7f0000c34fff), 0xffffff0b) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@multicast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6}}, 0x0) setresuid(0x0, r4, 0x0) 09:03:20 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20000000001b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x10000000, 0x0, 0x8, 0x0, 0x7}) r1 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace(0xffffffffffffffff, r0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f00000001c0)={0x0, 0x1}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffff9c, 0x84, 0xd, &(0x7f0000000240)=@assoc_value={r2, 0x2}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000080)={0x0, 0x7, 0x1}, 0x8) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000180)={&(0x7f0000000140)=""/1, 0x1}) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000000)=r2, 0x4) 09:03:20 executing program 4: openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x400, 0x0) r0 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x7f, 0x4000) r1 = openat(r0, &(0x7f0000000000)='./file0\x00', 0x1, 0x4000001) setsockopt$nfc_llcp_NFC_LLCP_RW(r1, 0x118, 0x0, &(0x7f0000000100)=0xa148, 0x4) r2 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x80000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_READ(r2, 0xc0287c02, &(0x7f0000000040)) 09:03:20 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b59100000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:03:20 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000000)={'teql0\x00', {0x2, 0x0, @dev}}) ioctl$KVM_RUN(r2, 0xc0045878, 0x0) 09:03:20 executing program 4: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x40000, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0xc}) r1 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x0, 0x0) fchdir(r0) syz_open_dev$media(&(0x7f0000000440)='/dev/media#\x00', 0xfffffffffffffff9, 0x0) perf_event_open(&(0x7f0000000040)={0x80000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_tcp_buf(r1, 0x6, 0x3f, &(0x7f0000000580)=""/181, &(0x7f0000000640)=0xb5) r2 = getpgrp(0x0) perf_event_open(&(0x7f0000000380)={0x7, 0x70, 0x7, 0x2, 0xd1c, 0xfffffffffffffffd, 0x0, 0x80000000, 0x38002, 0x2, 0x7fff, 0x3, 0x309d, 0xc194, 0x8, 0x4, 0xbc, 0x100, 0x0, 0xcb, 0xc86, 0x0, 0x1, 0xfffffffffffffff7, 0x9, 0x9, 0x4, 0x5, 0x1, 0x1000, 0xece2, 0x7, 0x7, 0x9, 0x2e45, 0x1, 0x8, 0x81, 0x0, 0x2, 0x0, @perf_config_ext={0x9, 0x1}, 0x5, 0x3, 0x6, 0x6, 0x1, 0x8001, 0x9}, r2, 0xc, r0, 0x2) ioctl$RTC_EPOCH_READ(r1, 0xc0287c02, &(0x7f0000000040)) ioctl$PPPIOCGMRU(r1, 0x80047453, &(0x7f0000000400)) getrandom(&(0x7f0000000480)=""/180, 0xb4, 0x3) write$UHID_CREATE(r1, &(0x7f0000000200)={0x0, 'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000140)=""/180, 0xb4, 0x4, 0x7, 0x0, 0xffffffffffff896a, 0xad01}, 0x120) ioctl$KDADDIO(r1, 0x4b34, 0x88) fcntl$setownex(r1, 0xf, &(0x7f0000000540)={0x2, r2}) 09:03:20 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) syz_mount_image$ceph(&(0x7f0000000000)='ceph\x00', &(0x7f0000000040)='./file0\x00', 0x2, 0xa, &(0x7f0000000680)=[{&(0x7f0000000140)="81f216f62ff9abbdc4130dacce78ee66258d81527b1a307aacdf4ecdda74adf61efb2aadd10555d56cc677da897485a8b6df1ba4a63bfb2116c0847a44417906ed1b678361b6024fb70b4f27e9575dc939ed8301dd0f13025c1f11497d840546ff598b5674cce4ab7716b1e491f21a359e882967b8f3820f0dcddb65c697621d0c71ffaba2d0d74d25cc4f097a09c400b0dce5063340b649ed95f86d35184a95917f845d4d0a0027faf28dd9d26e3f316622d54a462a33e1be10e62b0c8f", 0xbe, 0x7}, {&(0x7f0000000080), 0x0, 0x3f}, {&(0x7f0000000200)="13c87dd5d6d412a9ce13228b195161b6067e09f5a5372e2e8bb98126f7443e9c8f10390c6f749d6a5d8b86046d5e1cb56ba3a0b0ea8731b71e35d10a2e130c761fd6b3aa1ae41c40fcd93c0215a2d5369d6bd565be46c4d66993b076291268d4bdcd5a5894469f8cafef924adf9dd9808cbf5a727f5f5d90", 0x78, 0x5}, {&(0x7f0000000280)="1fccfe6d22c1e94896be4053a6a666523fe38dc7ea83c85af19b6dca1883565e672492c5c6dd7d23be8c9b47e5218e7648e3150d5e78e994ba91f0b094fc0a9b64c4feaf042a3825c7dd84928c83297a770cd95934d52af7f1ca5c8ac076294ec4b2af13815f0e97c555c541b27cd149d447ff0779b6fc7d6373c9854317f07d01ecb2785b7bd91882e49d3555e4e77ad9db445076ec2619174435372ca053b17f93e3", 0xa3}, {&(0x7f0000000340)="cbf7920b993a7e48dce3dec5f0bd0ec2a6d4efb83a5f65824f42d9", 0x1b, 0xc4}, {&(0x7f0000000380)="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", 0xfd, 0xffff}, {&(0x7f0000000480)="ebe57d82c4f543a9d5f9607dea60df0efeeeeb7dedb6db5796f9c8a8b0c5550a438edf8f895e5cd29d8fa9a50046334ce0404a43acce5991332837ea37a1b6ffe4938bf192b11c60ea650de43a5892f70b683631dfcc8f856a0328aa7cac7b6ed99001d54b", 0x65, 0x55ed}, {&(0x7f0000000500)="2235133a32682643415c9a2b8fbc4b0c74885faee15d7fba0963b3601713d8d5db00d022ad686a3a364806ab636508304aa590a4d578be40fff1685bd2e6d079e51cfb926718b9b3fd810e55a8791644ff1a752981f02315936b44424ddfcefd4eb12de587746396edadd9d6fc1833c0f5607311312bebf34159e79a1eaa29a6c2221d201f9d22c83957b6b24f79b728b5b5a5708eba75c5ceac97", 0x9b, 0x81}, {&(0x7f00000005c0), 0x0, 0x6}, {&(0x7f0000000600)="39582fb155fb240803c123ee07f7eaab483c93547d17036598aa5455efdd37ca28eedc291112d0fe590653a3484a6d879d6c86e39020152498352c20175eee3ca5467380acd0df87d9eaab4a37ec5cad6ff6924ad21f3a8ea5b1f7c467297f9c852cc94a8448fa84560dc02ff05f76289741deb6", 0x74, 0x400}], 0x80800, &(0x7f0000000780)='em1^\x00') ptrace$setopts(0x4206, r0, 0x0, 0x2) tkill(r0, 0x20000000001b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x10000000, 0x0, 0x8, 0x0, 0x7}) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 09:03:20 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000]}, 0x10) 09:03:20 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5dc00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:03:20 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x2) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a7c2d023c126285718070") r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r1, 0xc0386106, &(0x7f0000000080)) 09:03:20 executing program 4: r0 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x80000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_READ(r0, 0xc0287c02, &(0x7f0000000000)) 09:03:20 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf401000000000000]}, 0x10) 09:03:20 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000000)={'teql0\x00', {0x2, 0x0, @dev}}) ioctl$KVM_RUN(r2, 0xc0189436, 0x0) 09:03:20 executing program 2: clone(0x3102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20000000001b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x10000000, 0x0, 0x8, 0x0, 0x7}) r1 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000000)=r0) ptrace$cont(0x1f, r0, 0x0, 0x0) 09:03:20 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5b100000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:03:20 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ac00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:03:20 executing program 4: r0 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x10000000, 0x40) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000002200)=0x0) r2 = geteuid() r3 = getegid() sendmmsg$unix(r0, &(0x7f0000002280)=[{&(0x7f0000000100)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000200)=[{&(0x7f0000000180)="ad3c2026ffcd2a1123f853993c85c4f3c5d01bf1bf0fdc2992019cc9d9b1374f4fbb1fd725a6489a4fa5b6aa8e87e25d3f24a9fb6509752ee1ca21602d704a1a65a20974cae38a1e0857a535ff753321c3771d85e55b4dbf692c9040fb0443851271e1e20fa92e3d403e266c25a40871d928a5f2", 0x74}], 0x1, 0x0, 0x0, 0x40}, {&(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000a00)=[{&(0x7f00000002c0)="637b682eaa98d5fbb863b68eb3bfe61e04bd7d5557520e9dbf783badcfac8ebc8362a1d3793eafbdecca07b1c87767f36b8493f73da71e52544ec9eb2c9f48a116b166869a6cc2dfe9f64aadef5dacd0c917292aef9916d942f758767e24d346281c3e52c136083db3d173d175227a68890e2dd5ab907685f8ad28819b18ea36dc2038bc9131b2b1472c7d4f5843654d0899eef0f99309f7d5e68f357f3fa288f52a60fdc2f695289c0fe2bb3216a67d225bdf535c3731be69e64aa31864625a2ed33731d9a1bd20d08e69410fd8d386237db7", 0xd3}, {&(0x7f00000003c0)="0990471ddc70b3b68cae38d2f9698fa08fad5c0776423f66db2a765b432a7ba610f6cd5a04f6f8117549e99603ad5e27965f7518e0b8cae80999343833227e6ae82fb27b8f6bdcceb4046344f4bb3c5e7602d01c327c020c2af618e31d84f09cdd9240c1a1e0367d135ebc723415e23d925ed3baee80fba1b4e2f95e5997d9ec40d51cdf8bac2221c095f3968e3ae29e57061ca4add999071b4e7a7ac481b9", 0x9f}, {&(0x7f0000000480)="564db5674841f3246bd10e747bcad331a25a7700ade38225369c4bd5750b43b0eb2651e69134d3f7e7877f26078d84dbdb83a2c84977515cd81f7becb14c30b2f6df9eba5417e5b5925b52eebc87e052b16f0b5ade060365bf99d525044c156b5df1b4690f3aeaf77e7717f4459892ce60630f9b7f8fe01eb0d59bd21bc7f0df687bdf9be888012ad02c06d1b25e04501b77556a00", 0x95}, {&(0x7f0000000540)="130bf6301da942fc017f8daa9b550712f1da6d3298b18caba7d00175c7298d1d30f385f0c080e48974b1ff4225314a6b353e504328f90eb6bae5b321cef596f90ca6725e00236230257fadab847274175d618d032faee7", 0x57}, {&(0x7f00000005c0)="6d3f6b0840c55371ece58cf13b167e57517c8628c49eb11b4d3dc06882af5f5efe7edeaf355ea8fec84b1b991d28806c45a49ff68599d79d23e64137eb2da735d440433e059c0f10b26ebf1d67c6d334fa20ec1dbd7a7916713c23ba89e38469b013ddcf806ec3c031fe7e320dd800d9f1a673c83ce086f7556656b6fd5d98da400cac7487f2916c6711884e9068b4f0988edb2118d54810d35ec9b1ef8def4b3711b18f062385af7f6208e31c6e36651b6ece62c86e2a4b3dd0d2dbc9128a6bc19d836fdb2a90a89b41d1a141d4c98340b42c", 0xd3}, {&(0x7f00000006c0)="f02a5d15904f2d4090ebf43ea9015cc0c77868cce939f0dc11bfdcac33443e80901053d1869782d849053777938e0ca94f91840b6e17de9a73c83e4a0d1f0da30a472d284403f40c33b1d35489b11edc82ce9f3dda9efac370013e34fcf20df1d1dd13aa89aef7f0e26eed404553d87ef73034fcd2810d070c32e1f66203d3f9339d4b950c1724836b810d9328076c38f43d982b01e74fdf3139d0f955d0f3eb3fd235acc95164b03377d99e8af5ee737cd2cccb719a66e883e9c0d2417f6c6e7a10926e9e", 0xc5}, {&(0x7f00000007c0)="ec57b8e2062d7ef0f5c4fd85aaf963e66d8d058c299744997fd89e3ceae935cddd41c0fa74d2c887070070411ce74626033fd4d0d76d665aa1a89de0d96470a237d91ec0440c72889b8bfd78dd812f96bc7087dcc7aa2b2dedcd491a2aee890b536629dd1a739b528b8641", 0x6b}, {&(0x7f0000000840)="948458d6b0d3cc9ba0fd84bdc31dbdfbc3856b743e06749a3d3d978f37eea9298d69be32f4f986d31c531bd211c837e955b5a824220c2992eb1a98443c14ceecde1c708f1971b3ba6a36e0853463abba7a45da7a714cffa3c9276b1f83d886482ea2dabcfe94bceca61d53417b58938496af3e2fb8afa88a2f9cea081e5146e679e41c781c78940f8ec510a0b80e035cc70d1e582a0410461b7b7f2c7f528c05d2fe9fe677a4ffc4a7f7076701213f33dde74f1ea1e25ba9060859b0d61c6ef8c235a7cee733c2b1", 0xc8}, {&(0x7f0000000940)="5d66c7f71945de01444c80455e60f8c709b9262f69cd2492d067f9e15ce2bb986ee9c629cd0f1ee1f481396ccdcdb1dd6c3052fe475cbf716fd5f840e2e1c69dc957134c44db1eef19743342a8c531a61ffe95beffcf8d09ab296a594c602d68f4a5c83dd66a1e54b2719dfae294e3cb839efb0127c5667485d0555168127b", 0x7f}, {&(0x7f00000009c0)="c2ac51c42722a807adffbf64bac76591a37b8955ed0e", 0x16}], 0xa, 0x0, 0x0, 0x800}, {&(0x7f0000000ac0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000ec0)=[{&(0x7f0000000b40)="ae118745dac928ecf37f56f68e4707b07c63b4a1b67b017afeb3a7ff3dd75c5309b961cc6d8d86f6449c8a901064d340004e8c08e43f4f19cbc18c6ab0893e7fad7a9fab6cfc9c359f9202088e130e212017f6b3", 0x54}, {&(0x7f0000000bc0)="db8f5ca06ed3a8f5ad806d7129b1242f204b28d8615e02c9c7c2168d00b1ccda095a7758325ad4b97b4ab26d26604dd77f96f393c08cb37cace680aad1b0664d897ba81a3b33", 0x46}, {&(0x7f0000000c40)='2', 0x1}, {&(0x7f0000000c80)="086ae9c60e0b74fb926bdf5dc3e94ba1a90367d944ffd8f92ea10766286b6d76cbd4fbb8656c834a6d6c278edc8f3847261081b0159ec9ea8a3318cd9d63eac9ecbb9e026b5d918b40d51cfed27bd449a0bde8778b824e9e3e0fc0624c1f3919a94ade63a686f1f16ae3139448a7975a622ee4fbfebcb73f4b43f02bd3898d468dd11445b6138193de5a47eb6d7a6d1c37a46e0b2ba847440a563f4eb24c4d30d10baa6f9ca347d4985363fb7d41368c528950ddb1f826879e3e523dd9cfc080e2eb7f4ef9e0a286e8b7c4", 0xcb}, {&(0x7f0000000d80)="0281b77735cfd85a2c34296c2121f1c627d31b2d4b0788ad035d055874a0f3eeb231ce57543e80b732c79d74029b4dc9dc54d7b9c0fd60981712fd69bc09e9652cfa7d57e9462cd6038e40706c23aa442fa902a2ca70926a2f42c75334d7cd224dc958876d6aa22c95505a8c4d1b1015fb0515d8edede0679c11474aa588a296a3cdaab258675a7fa9d6665fc4367206bd7d0fd164077620404e6ecb186b8bb6798579d6b2d2086fc4c85b8838c505e5a27aef45f9689afabdde04b2b776fc29dbf65909fc005c79bfd258067ceff31b7a2d80f16cd39cce23d19af865581331b95976a47b43b76480c22af9a7120c058711567a76435d08ee", 0xf9}, {&(0x7f0000000e80)}], 0x6, &(0x7f0000000f40)=[@rights={0x20, 0x1, 0x1, [r0, r0, r0, r0]}], 0x20, 0x814e8e0aac989777}, {&(0x7f0000000f80)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000002180)=[{&(0x7f0000001000)="707ece0b136b4616c81517b3e643d8211a939a1e2d6a8df3d083bfc1dbac9523b2", 0x21}, {&(0x7f0000001040)="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", 0x1000}, {&(0x7f0000002040)="7469f23594d8d46516f2b49bc2c4229a94940af8f5aa1896cf3edb", 0x1b}, {&(0x7f0000002080)="fcc03acd87000009b9cafa60e4eb0d5fe008c560e5eba845034c7f093fdd9b6b06079aea8d", 0x25}, {&(0x7f00000020c0)="03d6c0473ff14ed7426a208d0e5e45e5e309202b20545aa4971f24b7af31f85f7dca106ef15b3683a83121374b6e1701118fd61d268a20ef3c7441024b9273a092a26a61a57c376e4a176f8df0c06365535ba568e5ab6918221b5f117fb2f7c19033d8731fda69bfb0591c1bcfb3f26cc3987cef150cc7aa494693b97b51062bab11bb5737897c67d026fff60220a6f5d1c0f5a2e05ca1a471606078240691cc4b9296be5011e21025d25ece", 0xac}], 0x5, &(0x7f0000002240)=[@cred={0x20, 0x1, 0x2, r1, r2, r3}], 0x20, 0x40000}], 0x4, 0x20000000) perf_event_open(&(0x7f0000000040)={0x80000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_READ(r0, 0xc0287c02, &(0x7f0000000040)) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000000)={0x0, {0x100, 0x6, 0x5, 0x9}}) 09:03:20 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe00000000000000]}, 0x10) 09:03:20 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20000000001b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x10000000, 0x0, 0x8, 0x0, 0x7}) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x78, r2, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x64, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x1f}}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev={0xfe, 0x80, [], 0xa}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7fffffff}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x67}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x884}, 0x44000) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 09:03:20 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b52700000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:03:20 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000]}, 0x10) 09:03:21 executing program 3: r0 = socket$inet6(0xa, 0x3, 0xa) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0a5c2d023c126285718070") syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60b409000005110000000000000000000000ffffe0000002ff020000000000000000000000000001830090780009040060b680fa0040000000000020000000000000ffffffffffff00000000000000000000ffffac14ffbb"], 0x0) 09:03:21 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000000)={'teql0\x00', {0x2, 0x0, @dev}}) ioctl$KVM_RUN(r2, 0x4048ae9b, 0x0) 09:03:21 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x0, 0x1) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, r1, 0x14, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x40, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xffffffffffffff06}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x5}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}]}]}, 0x54}}, 0x4000010) r2 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x80000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_READ(r2, 0xc0287c02, &(0x7f0000000040)) 09:03:21 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b51800000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:03:21 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20000000001b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x10000000, 0x0, 0x8, 0x0, 0x7}) r1 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x3, 0x2) ioctl$KVM_SET_XSAVE(r1, 0x5000aea5, &(0x7f0000000140)={"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"}) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 09:03:21 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe6bc141100000000]}, 0x10) 09:03:21 executing program 4: r0 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x0, 0x20000000000002) perf_event_open(&(0x7f0000000040)={0x80000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_READ(r0, 0xc0287c02, &(0x7f0000000040)) 09:03:21 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7a88510]}, 0x10) 09:03:21 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b56e00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:03:21 executing program 3: io_setup(0x41000000000003, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 09:03:21 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20000000001b) ptrace$cont(0x18, r0, 0x0, 0x0) arch_prctl$ARCH_SET_CPUID(0x1012, 0x1) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x10000000, 0x0, 0x8, 0x0, 0x7}) r1 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) fstat(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(r1, &(0x7f0000000300)={&(0x7f0000000000), 0xc, &(0x7f00000002c0)={&(0x7f0000000140)=@delpolicy={0x168, 0x14, 0x400, 0x70bd25, 0x25dfdbfd, {{@in6=@remote, @in6=@remote, 0x4e22, 0x2, 0x4e21, 0x0, 0xa, 0xa0, 0x0, 0x67, 0x0, r2}, 0x6e6bb5, 0x2}, [@algo_auth_trunc={0x104, 0x14, {{'sha3-256-generic\x00'}, 0x5c0, 0x100, "5c356943b6f9bbca97ca91c35d38cc7ce0abeb32aecaaf6eb2d52fb0becca30676a6399dd150aaa30e933698a630aee0ba69082e48d61d4319e9956a15dc44549d5e449dcf9b4defd132dfa4bfb477356b432132af5a1b236696c8d2e05179477137a949967ff566b17e6c248a4d0c1dd34a3407b1f3a818efd831afa5f1f58baae3bb3d884fcca7876eb00363d8499ec4657deac917c899f91dc18cdf639d20487436a4e60248fbeaa4df02c714b8651b86cab4de910f85"}}, @coaddr={0x14, 0xe, @in=@broadcast}]}, 0x168}, 0x1, 0x0, 0x0, 0x50}, 0x10) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 09:03:21 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x20000000004d, 0x80200) perf_event_open(&(0x7f0000000040)={0x80000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_READ(r0, 0xc0287c02, &(0x7f0000000000)) 09:03:21 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000000)={'teql0\x00', {0x2, 0x0, @dev}}) ioctl$KVM_RUN(r2, 0xc020660b, 0x0) 09:03:21 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b52500000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:03:21 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000]}, 0x10) 09:03:21 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(r0, 0x0, 0xc0000001, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20000000001b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x10000000, 0x0, 0x8, 0x0, 0x7}) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 09:03:21 executing program 4: r0 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x80000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_READ(r0, 0xc0287c02, &(0x7f0000000040)) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000000)=0x0) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000140)) write$FUSE_LK(r0, &(0x7f0000000100)={0x28, 0x0, 0x4, {{0x100000001, 0x2, 0x3, r1}}}, 0x28) 09:03:21 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20000000001b) ptrace$cont(0x18, r0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x2, 0x800) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffff9c, 0xc0106426, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x0}]}) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000180)) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000140)={r2, 0x3}) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qat_adf_ctl\x00', 0x40000, 0x0) ioctl$VIDIOC_QUERYCAP(r3, 0x80685600, &(0x7f0000000200)) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x10000000, 0x0, 0x8, 0x0, 0x7}) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 09:03:21 executing program 3: io_setup(0x41000000000003, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 09:03:21 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}, 0x10) 09:03:21 executing program 4: r0 = syz_open_dev$rtc(&(0x7f0000000000)='/dev/rtc#\x00', 0x6, 0x200181) r1 = socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl$FICLONE(r0, 0x40049409, r1) r2 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x80000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000100)={0x0, 0x1e, "d629c4fd4c05683c62b758c298c3463ef169937affb8c5260fbd3731b321"}, &(0x7f0000000140)=0x26) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000180)={r3, @in={{0x2, 0x4e22, @rand_addr=0x10001}}}, &(0x7f0000000240)=0x84) ioctl$RTC_EPOCH_READ(r2, 0xc0287c02, &(0x7f0000000040)) 09:03:21 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000000)={'teql0\x00', {0x2, 0x0, @dev}}) ioctl$KVM_RUN(r2, 0x4090ae82, 0x0) 09:03:21 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b57400000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) [ 725.589761] QAT: Invalid ioctl [ 725.664994] QAT: Invalid ioctl 09:03:22 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20000000001b) ptrace$cont(0x18, r0, 0x0, 0x1) r1 = dup2(0xffffffffffffff9c, 0xffffffffffffff9c) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000080)={0x9, [0x0, 0x203, 0x8, 0x35e, 0x2, 0xd9, 0xedd, 0x9, 0x6]}, &(0x7f0000000140)=0x16) r2 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0xd7, 0x2000) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000040)={'lo\x00'}) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x10000000, 0x0, 0x8, 0x0, 0x7}) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 09:03:22 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b50e00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:03:22 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x408a18d8aa]}, 0x10) 09:03:22 executing program 4: r0 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x80000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = gettid() perf_event_open(&(0x7f0000000100)={0x4, 0x70, 0x2, 0xff, 0x3, 0x7, 0x0, 0x4, 0x20000, 0x3, 0x1000, 0x6, 0x2, 0x6, 0x4, 0x790, 0x1, 0x800000000000000, 0x0, 0xe2, 0x4, 0xd89d, 0x2, 0x1, 0x8, 0x8, 0x3000000, 0x3, 0x1, 0x9, 0x4, 0x1f, 0x2, 0x6, 0xffffffff7fffffff, 0x3, 0x80, 0x401, 0x0, 0x7, 0x1, @perf_config_ext={0x9, 0xb06e}, 0x20, 0x8, 0x2, 0x0, 0x80, 0x1, 0x7fffffff}, r1, 0x3, r0, 0x8) ioctl$RTC_EPOCH_READ(r0, 0xc0287c02, &(0x7f0000000040)) 09:03:22 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b57100000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:03:22 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20000000001b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x10000000, 0x0, 0x8, 0x0, 0x7}) tkill(r0, 0x2e) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 09:03:22 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000000)={'teql0\x00', {0x2, 0x0, @dev}}) ioctl$KVM_RUN(r2, 0x5452, 0x0) 09:03:22 executing program 3: io_setup(0x41000000000003, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 09:03:22 executing program 4: r0 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r0, 0x40045730, &(0x7f0000000000)=0x2) perf_event_open(&(0x7f0000000040)={0x80000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_READ(r0, 0xc0287c02, &(0x7f0000000040)) 09:03:22 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f4]}, 0x10) 09:03:22 executing program 2: r0 = getpgid(0xffffffffffffffff) tkill(r0, 0x1c) clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x10000000, 0x0, 0x8, 0x0, 0x7}) umount2(&(0x7f0000000300)='./file0\x00', 0x0) r2 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_notify(r2, &(0x7f0000000340)={0x0, 0x37, 0x6, @tid=r1}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) getsockname$unix(r2, &(0x7f0000000240)=@abs, &(0x7f00000002c0)=0x6e) ptrace$cont(0x1f, r1, 0x0, 0x0) rt_sigaction(0x24, &(0x7f0000000080)={&(0x7f0000000000)="c48109d42f12b80f000000f30f5fd066450f383164dcf9c421f92e022e64dfea3edfd1676764f20f1bcb660f677b00c4c2fd1c5f63", {}, 0x80000001, &(0x7f0000000040)="0f38cda100000000660fef7208c441f05420673e660f60d7f242a4c403254a094c6466430f73fe8ec4e10164ba00000080670fc6a77368d5550045c6c2f6"}, &(0x7f00000001c0)={&(0x7f0000000140)="47def5c4410d686d2af344aec4e285967b3565f3460f2d32c441ee11e836660f5e69d3c4e1e1545d3cc4217e5b942b692e0000f20f70f8fe", {}, 0x0, &(0x7f0000000180)="f36f0fa0c442b50060d666400f3a0f1c3dff18000000f344df2507000000f204054103b16b000000dfa3bd0000002665f16566420f7ef9"}, 0x8, &(0x7f0000000200)) ioctl$SG_SCSI_RESET(r2, 0x2284, 0x0) 09:03:22 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5e000000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:03:22 executing program 4: r0 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x1000}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000140)={r1, 0x8000}, &(0x7f0000000180)=0x8) perf_event_open(&(0x7f0000000040)={0x80000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) ioctl$RTC_EPOCH_READ(r0, 0xc0287c02, &(0x7f0000000040)) 09:03:22 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000000)={'teql0\x00', {0x2, 0x0, @dev}}) ioctl$KVM_RUN(r2, 0x5451, 0x0) 09:03:22 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b55800000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:03:22 executing program 4: r0 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x80000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_READ(r0, 0xc0287c02, &(0x7f0000000040)) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='trusted.overlay.origin\x00', &(0x7f0000000140)='y\x00', 0x2, 0x2) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000180)={0x1, @output={0x1000, 0x1, {0x80000001, 0x5}, 0x9, 0x5}}) 09:03:22 executing program 3: io_setup(0x41000000000003, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 09:03:22 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x10) 09:03:22 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b58700000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:03:22 executing program 4: r0 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x80000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_READ(r0, 0xc0287c02, &(0x7f0000000040)) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000000)={0xac89623, 0x9, 0x3f, 0x6, 0x8}) 09:03:22 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b57500000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:03:22 executing program 4: r0 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x0, 0x1ffff) perf_event_open(&(0x7f0000000040)={0x80000005, 0x70, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe1a, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000000)='security.selinux\x00', &(0x7f0000000100)='system_u:object_r:scanner_device_t:s0\x00', 0x26, 0x1) ioctl$RTC_EPOCH_READ(r0, 0xc0287c02, &(0x7f0000000040)) getsockopt$inet_int(r0, 0x0, 0x1f, &(0x7f0000000140), &(0x7f0000000180)=0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={r0, 0x10, &(0x7f00000002c0)={&(0x7f0000000280)=""/63, 0x3f, 0xffffffffffffffff}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000380)={r0, 0x10, &(0x7f0000000340)={&(0x7f00000001c0)=""/162, 0xa2, r1}}, 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000003c0)=[@in6={0xa, 0x4e20, 0x7, @local, 0x1}, @in={0x2, 0x4e21, @remote}, @in6={0xa, 0x4e24, 0x24, @mcast1, 0x4}, @in={0x2, 0x4e22, @multicast1}, @in={0x2, 0x4e21, @multicast1}, @in6={0xa, 0x4e24, 0x5, @mcast1, 0xe0de}], 0x84) ioctl$DRM_IOCTL_CONTROL(r0, 0x40086414, &(0x7f0000000480)={0x1, 0x80000000}) fcntl$setsig(r0, 0xa, 0x24) 09:03:25 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x9, 0x200000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f00000001c0)=0xc) sendmsg$nl_generic(r1, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000200)={0x294, 0x3c, 0x100, 0x70bd2a, 0x25dfdbfb, {0x1f}, [@generic="aef3ff173a0b41c28bfe6ce2a8d9d8016c63cb526ee2753b481a09ec4c8b4b6b7b9a4ef0e40be89c6444269fea", @nested={0x250, 0x2f, [@typed={0x8, 0x4a, @uid=r2}, @generic="9602c5be4d7154176e1c5b138e9f589bb49ecf1a0fece1e515aadf20eb7673bf", @generic="1c920680a8eaae3caa5abfe059f787021c256a18006d497c2f6e1259384c40d1ed0370c4c5fd2c15272af0b02e98f860767782668feefaee2b6485ef1e125204a56f660b414cd733fc8daef14e1be99c0550689e37b155b6982fdb73e4d9720fdec3aefea1b2a01368849ac7ef89c2a70248dfc721b8e3e7646669a90c1d133d7c6264a5d156f47e010de6b67472f4dda46d712634ccf154958989baeeb72d10", @generic="30ce9aa8d9438f92efd659e56ffdf33f4fcc04f703905463873cb3c110c07bdfc7bb644fc5efdc8f6abf159210b6bd4f79aeb75dce9db0d07a199e8b886b9fbe753dbd323059daa0aaac147f4ccc4ba68fda08ed871fe757a284c287a78d246a6ae1861a641a77c5bcaf079ee48bc4837fd5fd1ce44c04c94eef534554192f5a1e47c34ac794134ae39b40", @typed={0x8, 0x88, @ipv4=@multicast2}, @generic="ae4b54ff9499cb37c66dca1c3859e0112fdc14988cf05e3636a9f13e9c8a5960509745ed088241ffb78e8a612aaec2dacc146e13606576375a7c81048c0a89091dce25d19bb62ae7c04fed7dd21401635327f2e4e6b3c739ebb0fe5b2a51b5eb7a51fa0440bca5058525c1029df11e737796e30d8a34af6b18be0aba6586400990d2e8c18585123a6dfb47c61e13a5305d6ffb51e2a711eed276c9828959900698b37de44e373c7baca48032ae4cfa3862474c7f8783dac9b7ff48319d3b827a83ad81e3181fb98804155007910b34e2edef3d22f57e0975527eea5f8bb9618e5f82ff5cad6d51a5c8375ee80e28"]}]}, 0x294}, 0x1, 0x0, 0x0, 0x4000880}, 0x1) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20000000001b) ptrace$cont(0x18, r0, 0x0, 0x1) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x10000000, 0x0, 0x8, 0x0, 0x7}) capget(&(0x7f0000000000)={0x20071026, r0}, &(0x7f0000000040)={0xa3b, 0x7f, 0x62, 0x9, 0x1, 0x400}) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 09:03:25 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000000)={'teql0\x00', {0x2, 0x0, @dev}}) ioctl$KVM_RUN(r2, 0x8138ae83, 0x0) 09:03:25 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b53500000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:03:25 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}, 0x10) 09:03:25 executing program 4: r0 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x4, 0x7fffffff, 0xab}) perf_event_open(&(0x7f0000000040)={0x80000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_READ(r0, 0xc0287c02, &(0x7f0000000040)) 09:03:25 executing program 3: io_setup(0x41000000000003, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 09:03:25 executing program 4: r0 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x80000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_READ(r0, 0xc0287c02, &(0x7f0000000100)) 09:03:25 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b50400000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:03:25 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x202801, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000040)=0x1000, 0x4) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20000000001b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x10000000, 0x0, 0x8, 0x0, 0x7}) gettid() openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 09:03:25 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00000000000000]}, 0x10) 09:03:25 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000000)={'teql0\x00', {0x2, 0x0, @dev}}) ioctl$KVM_RUN(r2, 0x5460, 0x0) 09:03:25 executing program 3: io_setup(0x41000000000003, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 09:03:25 executing program 4: r0 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x0, 0x0) write$P9_RLOPEN(r0, &(0x7f0000000180)={0x18, 0xd, 0x2, {{0x0, 0x0, 0x8}, 0x1}}, 0x18) perf_event_open(&(0x7f0000000040)={0x80000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_READ(r0, 0xc0287c02, &(0x7f00000001c0)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x100f}}, 0x20) socketpair(0xb, 0x80000, 0x5, &(0x7f0000000200)) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000140)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x4, @dev={0xfe, 0x80, [], 0x17}, 0x1}, r1}}, 0x30) 09:03:25 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5bc00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:03:25 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x2000, 0x0) ioctl$RTC_VL_CLR(r1, 0x7014) tkill(r0, 0x20000000001b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x10000000, 0x0, 0x8, 0x0, 0x7}) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 09:03:25 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b55100000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:03:25 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40020000]}, 0x10) 09:03:25 executing program 4: r0 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x80000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_READ(r0, 0xc0287c02, &(0x7f0000000040)) ioctl$VIDIOC_SUBDEV_G_FMT(r0, 0xc0585604, &(0x7f0000000100)={0x1, 0x1c0, {0x0, 0xffffffff, 0x702f, 0x4, 0x7, 0xe, 0x1, 0x5}}) syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x6, 0x80000) 09:03:25 executing program 3: io_setup(0x41000000000003, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 09:03:25 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000000)={'teql0\x00', {0x2, 0x0, @dev}}) ioctl$KVM_RUN(r2, 0x4004ae99, 0x0) 09:03:26 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b50a00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:03:26 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20000000001b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x10000000, 0x0, 0x8, 0x0, 0x7}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) write$evdev(r1, &(0x7f0000000080)=[{{r2, r3/1000+10000}, 0x12, 0x7f, 0x8}], 0x18) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 09:03:26 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe00]}, 0x10) 09:03:26 executing program 4: r0 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x80000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000ac0)={0x0, @in6={{0xa, 0x4e22, 0x5, @ipv4={[], [], @rand_addr=0x4}, 0x5}}, [0x0, 0x2, 0x9, 0x8, 0x0, 0x4, 0x1, 0x1, 0xc31, 0x8, 0x0, 0x0, 0xfffffffffffffff8, 0x5, 0x3]}, &(0x7f0000000680)=0x100) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000bc0)={r2, @in={{0x2, 0x4e22, @broadcast}}, 0x6, 0xfff, 0x6, 0x800, 0x2}, &(0x7f00000006c0)=0x98) r3 = getpid() lstat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f00000008c0)={0x0, 0x5, 0xfff, 0x100, 0x6000000000000000, 0x2, 0x6}) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = accept$nfc_llcp(r0, &(0x7f0000000540), &(0x7f00000005c0)=0x60) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000900)={'bcsh0\x00', 0x0}) r9 = add_key(&(0x7f0000000840)='cifs.spnego\x00', &(0x7f0000000880)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$set_timeout(0xf, r9, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000940)={{{@in=@empty, @in6=@mcast1, 0x4e21, 0x45d, 0x4e24, 0x400, 0xa, 0x80, 0x20, 0x0, r8, r5}, {0x2, 0x2, 0x8, 0x80000001, 0x80, 0x381, 0x0, 0x9}, {0x0, 0x9, 0x80, 0x63f2}, 0xd8, 0x0, 0x0, 0x0, 0x2, 0x3}, {{@in=@local, 0x4d3, 0x6c}, 0xa, @in=@loopback, 0x3505, 0x1, 0x2, 0xa702, 0x8000, 0x2, 0x9}}, 0xe8) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000640)={0xffffffffffffffff, r1, 0x0, 0x10, &(0x7f0000000600)='bdev^self]wlan1\x00', 0xffffffffffffffff}, 0x24f) fstat(r1, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0}) setpriority(0x3, r10, 0xd30) r12 = getegid() sendmsg$unix(r0, &(0x7f0000000800)={&(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000000)="c4098f60fcf407878474a64eb724", 0xe}, {&(0x7f0000000180)="da1c87cf43e5f659e93e0b5c20b1681e300f288253d76fc33c02aec02d930d2994a89bbf3f8d6c328395f514e20e489043437e5aaccd1dd9969f4ab7bb39db26c9583574d9c8c0ccc0d323c10f685d576088641a17eb1599f365014f75143c96c05478f0b7755de6583775888555d06d45369c562c74fa9b4146d47f7e0c6f78fabcdaddecef792ec49eeeebd82396a5723c19c9588f0ed3a286ce94136b8f2bdc12f56bd8d1b9a8a065c1d3ffb3281710fc09812f47968558b06473470c705e81028d44", 0xc4}, {&(0x7f0000000280)="811996609881808bdd6122ac74df460dc4fd2ffc08dd3fee117015e9798333bafc9e08f75b860019f311f85a16427905ad15f4515462b375a314317890224f4ad727e98b06d8d391e5907fa4228b869d75f6ba5d2f8144419be435937c47134c65490d4a792c946d925cbf297291c0961fc379a9992c4f0db2126998e70c038e7c02d9fbd0377a9377eb8e0a77e2717b6fdf1581095c04db216842c154f41a5b37c2a91888d961e2cca6b4f1a3c54adb54c20542f7724e1bd9c8b8579bd1fe673dc7", 0xc2}], 0x3, &(0x7f0000000700)=[@cred={0x20, 0x1, 0x2, r3, r4, r6}, @rights={0x30, 0x1, 0x1, [r0, r1, r0, r1, r1, r0, r0, r1]}, @rights={0x28, 0x1, 0x1, [r1, r1, r1, r1, r0]}, @rights={0x20, 0x1, 0x1, [r0, r1, r1, r1]}, @rights={0x18, 0x1, 0x1, [r0]}, @rights={0x30, 0x1, 0x1, [r7, r1, r0, r1, r1, r0, r0, r1]}, @cred={0x20, 0x1, 0x2, r10, r11, r12}], 0x100, 0x8010}, 0x8000) ioctl$RTC_EPOCH_READ(r0, 0xc0287c02, &(0x7f0000000040)) 09:03:26 executing program 3: io_setup(0x41000000000003, &(0x7f0000000100)) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 09:03:26 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b59c00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:03:26 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x20000) bind$rds(r0, &(0x7f0000000140)={0x2, 0x4e24, @remote}, 0x10) r1 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x80000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_G_AUDOUT(r1, 0x80345631, &(0x7f0000000000)) ioctl$RTC_EPOCH_READ(r1, 0xc0287c02, &(0x7f0000000040)) 09:03:26 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x22) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x10000000, 0x0, 0x8, 0x0, 0x7}) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 09:03:26 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5db00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:03:26 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdef]}, 0x10) 09:03:26 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000000)={'teql0\x00', {0x2, 0x0, @dev}}) ioctl$KVM_RUN(r2, 0x4020940d, 0x0) 09:03:26 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b54f00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:03:26 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20000000001b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x10000000, 0x0, 0x8, 0x0, 0x7}) r1 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x18) 09:03:26 executing program 3: io_setup(0x41000000000003, &(0x7f0000000100)) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 09:03:26 executing program 4: recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000000680)={&(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000180)=""/149, 0x95}, {&(0x7f0000000240)=""/70, 0x46}, {&(0x7f00000002c0)=""/188, 0xbc}, {&(0x7f0000000380)=""/51, 0x33}, {&(0x7f00000003c0)=""/24, 0x18}, {&(0x7f0000000400)=""/251, 0xfb}, {&(0x7f0000000500)=""/70, 0x46}, {&(0x7f0000000580)=""/14, 0xe}], 0x8, &(0x7f0000000640)=""/5, 0x5, 0xffffffff}, 0x60) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) dup2(r0, r1) r2 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x80000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_READ(r2, 0xc0287c02, &(0x7f0000000040)) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000000)=0x0) ptrace$cont(0x3f, r3, 0x6, 0x1) 09:03:26 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000]}, 0x10) 09:03:26 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000000)={'teql0\x00', {0x2, 0x0, @dev}}) ioctl$KVM_RUN(r2, 0x4138ae84, 0x0) 09:03:26 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x2, 0x2) setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000100)={{0x4, 0x7ff}, 0x4}, 0x10) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000140)=0x6) r1 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x0, 0x0) dup3(r1, r1, 0x80000) perf_event_open(&(0x7f0000000040)={0x80000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_READ(r1, 0xc0287c02, &(0x7f0000000040)) 09:03:26 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b58f00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:03:26 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x1, 0xca257b8c18b60b69) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000140)='veth0\x00') wait4(0x0, 0x0, 0x80000006, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x200000000037) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x10000000, 0x0, 0x8, 0x0, 0x7}) r2 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x5, 0x0) getsockopt$inet_int(r2, 0x0, 0x1f, &(0x7f0000000040), &(0x7f0000000080)=0x4) 09:03:26 executing program 3: io_setup(0x41000000000003, &(0x7f0000000100)) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 09:03:26 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}, 0x10) 09:03:26 executing program 4: r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0xfffffffffffffffd, 0x4000) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x2) r1 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x8, 0x400801) perf_event_open(&(0x7f0000000040)={0x80000005, 0x70, 0x0, 0x0, 0x10000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8c04, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_READ(r1, 0xc0287c02, &(0x7f0000000040)) socket$nl_crypto(0x10, 0x3, 0x15) 09:03:26 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20000000001b) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) ioctl$RNDCLEARPOOL(r1, 0x5206, &(0x7f0000000180)=0x7) ptrace$poke(0x5, r0, &(0x7f0000000080), 0x2) ptrace$cont(0x18, r0, 0x0, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xd50, 0x200000) ioctl$KDSETKEYCODE(r2, 0x4b4d, &(0x7f0000000040)={0x5, 0x4}) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x10000000, 0x0, 0x8, 0x0, 0x7}) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 09:03:26 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b51000000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:03:26 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000000)={'teql0\x00', {0x2, 0x0, @dev}}) ioctl$KVM_RUN(r2, 0x40049409, 0x0) 09:03:26 executing program 4: syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x1, 0xe000) r0 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x80000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_READ(r0, 0xc0287c02, &(0x7f0000000040)) 09:03:26 executing program 3: io_setup(0x41000000000003, &(0x7f0000000100)=0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) 09:03:26 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x10) 09:03:26 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b53300000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:03:26 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000140)={{{@in=@remote, @in6}}, {{@in6=@loopback}, 0x0, @in=@multicast1}}, &(0x7f0000000000)=0xe8) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000040)={r0, 0x0, 0xfffffffffffffffd, 0xff, 0x5717}) tkill(r1, 0x20000000001b) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000000c0)={[], 0x10000000, 0x0, 0x8, 0x0, 0x7}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r1, 0x0, 0x0) 09:03:27 executing program 4: io_setup(0x41000000000003, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 09:03:27 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xeffdffff00000000]}, 0x10) 09:03:27 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(0x0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 09:03:27 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000000)={'teql0\x00', {0x2, 0x0, @dev}}) ioctl$KVM_RUN(r2, 0xc018ae85, 0x0) 09:03:27 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x8, 0x40, 0x100, 0xfffffffffffffffb, 0x0, 0x1000, 0x20000, 0x2, 0xffffffff, 0x1f, 0x401, 0x81, 0x1, 0x1f, 0x3, 0x5, 0x100000001, 0x2, 0x1f, 0x7, 0x2, 0xb7, 0x7ff, 0xfffffffffffffff9, 0x81, 0x8001, 0xfff, 0x821b, 0xf4, 0x2, 0x2, 0x5, 0x800, 0x3, 0x0, 0xb3, 0x0, 0x6, 0x0, @perf_config_ext={0x9, 0x7f}, 0x2800, 0xfffffffffffffffd, 0xa8f, 0x1, 0x4, 0x4, 0x200}, r0, 0xa, 0xffffffffffffffff, 0x2) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1000000f) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x10000000, 0x0, 0x8, 0x0, 0x7}) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x400080, 0x0) 09:03:27 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b56100000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:03:27 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ea00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:03:27 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(0x0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 09:03:27 executing program 4: getpid() perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x101000, 0x0) openat$cgroup(r0, &(0x7f0000000300)='syz1\x00', 0x200002, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000040)={'ip6tnl0\x00', {0x2, 0x4e24, @rand_addr=0x1}}) dup(0xffffffffffffffff) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x20) ioctl(r2, 0x6681, &(0x7f0000000000)) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x248005}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x70, r3, 0x300, 0x70bd2a, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'nr0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x5}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x4000084) open(0x0, 0x0, 0x0) semget$private(0x0, 0x1, 0x20) 09:03:27 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000000)={'teql0\x00', {0x2, 0x0, @dev}}) ioctl$KVM_RUN(r2, 0xae80, 0xa000000) 09:03:27 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0000000]}, 0x10) 09:03:27 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b57d00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:03:27 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(0x0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 09:03:27 executing program 4: io_setup(0x41000000000003, &(0x7f0000000100)) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 09:03:27 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000]}, 0x10) 09:03:27 executing program 3: io_setup(0x0, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 09:03:30 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000000)={'teql0\x00', {0x2, 0x0, @dev}}) ioctl$KVM_RUN(r2, 0xae80, 0xfffff) 09:03:30 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b58200000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:03:30 executing program 3: io_setup(0x0, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 09:03:30 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000240)='/dev/rtc0\x00', 0x2000, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00007d9fc8)={&(0x7f000087fff4), 0xc, &(0x7f0000a40000)={&(0x7f0000b9e000)=@migrate={0xac, 0x21, 0x411, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast1}, 0x0, 0xffffff9e}, [@migrate={0x5c, 0x11, [{@in6=@loopback, @in=@multicast2}, {@in6=@mcast1, @in6=@mcast1}]}]}, 0xac}}, 0x0) close(r1) 09:03:30 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(r0, 0x0, 0x80000000, 0x0) socketpair(0xa, 0x80007, 0x6, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffff9c, 0x84, 0x18, &(0x7f0000001200)={0x0, 0x9}, &(0x7f0000001240)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000001280)={r2, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x16}}}, 0x401}, 0x90) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20000000001b) socketpair$inet(0x2, 0x80003, 0x6, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000040)={0x3, 0x3, 0x4, 0xbaec, 0x3, 0x9, 0x7ff, 0x80, 0x0}, &(0x7f0000000080)=0x20) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f0000000140)={r4, 0x1000, "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"}, &(0x7f0000001180)=0x1008) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x10000000, 0x0, 0x8, 0x0, 0x7}) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 09:03:30 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff91]}, 0x10) 09:03:30 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5e500000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:03:30 executing program 4: r0 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x80000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') ioctl$RTC_EPOCH_READ(r0, 0xc0287c02, &(0x7f0000000040)) 09:03:30 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20000000001b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x10000000, 0x0, 0x8, 0x0, 0x7}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@dev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@loopback}}, &(0x7f0000000040)=0xe8) getresgid(&(0x7f0000000080), &(0x7f0000000240)=0x0, &(0x7f0000000280)) setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000002c0)={r0, r2, r3}, 0xc) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r4 = add_key$keyring(&(0x7f0000000300)='keyring\x00', &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$clear(0x7, r4) ptrace$cont(0x1f, r0, 0x0, 0x0) time(&(0x7f0000000000)) 09:03:30 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1085a827]}, 0x10) 09:03:30 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b56600000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:03:30 executing program 3: io_setup(0x0, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 09:03:30 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000000)={'teql0\x00', {0x2, 0x0, @dev}}) ioctl$KVM_RUN(r2, 0xae80, 0x9000000) 09:03:30 executing program 4: r0 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x80000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') ioctl$RTC_EPOCH_READ(r0, 0xc0287c02, &(0x7f0000000040)) 09:03:30 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b56500000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:03:30 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000000)=0x3, 0x4) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20000000001b) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x10000000, 0x0, 0x8, 0x0, 0x7}) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 09:03:30 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000000)={'teql0\x00', {0x2, 0x0, @dev}}) ioctl$KVM_RUN(r2, 0xae80, 0xfffff) 09:03:30 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4002000000000000]}, 0x10) 09:03:30 executing program 3: io_setup(0x41000000000003, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(0x0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 09:03:30 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5cc00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:03:30 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000000)={'teql0\x00', {0x2, 0x0, @dev}}) ioctl$KVM_RUN(r2, 0xae80, 0x200000000000000) 09:03:30 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b58900000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:03:30 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = accept$alg(0xffffffffffffff9c, 0x0, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000000)={'team_slave_0\x00', {0x2, 0x4e23}}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20000000001b) ptrace$setopts(0x4200, r0, 0x62d, 0x0) ptrace$cont(0x18, r0, 0x7fffffff, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x10000000, 0x0, 0x8, 0x0, 0x7}) r2 = dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000) fcntl$setown(r2, 0x8, r0) r3 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000000)) ioctl$SG_GET_TIMEOUT(r3, 0x2202, 0x0) ptrace$cont(0x1f, r0, 0x0, 0x0) 09:03:30 executing program 3: io_setup(0x41000000000003, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(0x0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 09:03:30 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x480401, 0x0) r2 = add_key$keyring(&(0x7f0000000500)='keyring\x00', &(0x7f0000000540)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f00000003c0)='id_resolver\x00', &(0x7f0000000400)={'syz', 0x0}, &(0x7f0000000440)="aa08ec6e8e6f0cd8249a5e0fab278d891fe82d429a385af42c2dc67a9ac1f2b91fcb155419e428ebc4d90c0544769649114db7ae6eefea6e296e358ea242ffad32e787a9b6d4bb40a2ae510e2f10718dc83a1e2d61d7f40f9366dc55c51b42376ceca6acc24109b29782264384b4c66d6be56de2ce2cf37395d7a4d1b488fb41eda94dcf45bb3d555ab2490240639eebb0d352c8aaa68c7a8cfec998435bd76cd350e55f634f", 0xa6, r2) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffff9c, 0xc0106426, &(0x7f0000000240)={0x3, &(0x7f0000000080)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f0000000380)={r3, &(0x7f0000000280)=""/219}) fcntl$getownex(r0, 0x10, &(0x7f0000000200)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) creat(0x0, 0x80) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r5, 0x40086602, 0x400007) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(0xffffffffffffffff, 0x3) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) socket$inet_udplite(0x2, 0x2, 0x88) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0xff4a) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x20032600) ioctl$EXT4_IOC_MIGRATE(r6, 0x6609) add_key(&(0x7f0000000000)='trusted\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) socketpair$inet6_sctp(0xa, 0x1, 0x84, &(0x7f0000000580)) keyctl$negate(0xd, 0x0, 0x10000000000008, 0x0) 09:03:30 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}, 0x10) 09:03:30 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ca00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:03:31 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20000000001b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x10000000, 0x0, 0x8, 0x0, 0x7}) r1 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r1, 0x4400ae8f, &(0x7f0000000140)={"bffdd3d826b05b0afee7d3c22f13c6e407824a2a9730a3da93239c8da23ae4e3be8dcd386f597e33e125d2571ee627d42bebbed592093e92b6b86844d91fdb3ca5c2a269059af8ee326ba2b03171c89ac99474b4176e29caec30355a5d9f5e00858d3f1a976be2dee7fae6b426cb335781c861424abfab4899091966cfc75e7adee8838b0eca9e6e0ca7608feb36805a6424b6547f62ce119ba580982cf07deaba4f94219235f0544ad5660292624d91aee280bcf688ba9683854ab400d1dd3126d407fd60d1ba295477bf263eeb62dbabef29c7407bedadcaf2d447b7b3205be3931a96a9dbc7dc84278d45c2193230d22dfe31f6fce550117da7bc13b85094d73102ade21d4863b20054115faf46bfe43e276d8a90a90712e17ff059121a1749d1cf1507e6454074e1fa12a45c9d73438a8ebc9e73e84b142543476482844c978a1184069c2cca6a2f9b45b5a832753bdf22783187773b300b8a8a9ef2cad2656056d9aee0fb79c3c796ba64cf80fff8c6b63198e0bb80366cb3ba881c36c603b7f91a1ec9c5369fda16c115bdec103e2ea8f886169fa0947f5ac8b2bfa23a99a7847b76305979b7c338aa376dad5e67cc3ece2f66ad84e2064b439e3dd403d0863758f12183c1705a957397a3e354a2dc65fcf206c089833f10518ce58c2f393d69b26a475b14a74842c3d5b8b5d6a2a2f381c3b5a0f87abe3bf6b01c9d7c0b41cdda0276da9e9e12c31c3aed7a45caa4c0aa50b584b038f025a61ae50831b949ec6748df4c197c8968f347be068974466686e0c36d738fca494d137f26aaac111277f994be799fbaaa45ed8733172a85909dd61f96cc2b7756d033c84cf1720fb849298c91752304cdba9d64d6d254b08aed0951bb8e9c605439f448b33e8cc5fe258a17139da609c4d2a0aff161b2c18d8b235d5c7bef081fefe0f1fa91d2e097ae937f04d20b372f8b397a596bcf0d5b9cea9ffa46a9ec1d9549956e32eba6e6d6391245947ec8bb710fd29556cc31c882189c691ccb89c0643bf61dc23d256774c79075cc31e3cffc880c40f054ef91e9143859f6b928e16fb353a3702537c485b7b30aebcee1c1ce59fdad4b5e8bfec463bc0c5d23e9c7c4ee181fa01ad2a1217b0aded827f81763917cc1b320e2112de3358c160c51d11fa66719e91c8edc1062a89ff19a1c100c6746b0f8d7aa420974dfe5cff74677bdfd3e1b0b482d3273bb1f8249cc7f89b5807a87312f9a7d42d9d293a357a2f427ccb87b20a424c592d34e922f709772f89691bbf6c81a819c98736227c2ea51285424fc88ecc34594284f28c6ab8a4dd49813663671f559c8350abb35dd96c1ce7e044cbfcb25e60a7ce519be0d40a68265c99466f8a2d77fb6f4937c003282438e4598980dc54be74cddd309f7e14bd62227065bf1e51dee8a67310a4b8bac81bb2a47d9"}) 09:03:31 executing program 3: io_setup(0x41000000000003, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(0x0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 09:03:31 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5e900000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:03:31 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf4010000]}, 0x10) 09:03:31 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000000)={'teql0\x00', {0x2, 0x0, @dev}}) ioctl$KVM_RUN(r2, 0xae80, 0xc0000) 09:03:31 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20000000001b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x10000000, 0x0, 0x8, 0x0, 0x7}) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 09:03:31 executing program 3: io_setup(0x41000000000003, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 09:03:31 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x20000000001b) r0 = syz_open_dev$mouse(&(0x7f0000000280)='/dev/input/mouse#\x00', 0x1f, 0x800) ioctl$DRM_IOCTL_AGP_ACQUIRE(r0, 0x6430) ptrace$cont(0x18, 0x0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x10000000, 0x0, 0x8, 0x0, 0x7}) r1 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000140)={{{@in=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000002}, 0xc, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="3c00020038000100240001006e6f746966795f70656572735f696e74657276616c000000000000000000000008000300030000000800040003000000"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x4000001) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, 0x0, 0x0, 0x0) ioctl$SG_GET_SG_TABLESIZE(r1, 0x227f, &(0x7f0000000080)) 09:03:31 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18020000]}, 0x10) 09:03:32 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000011c0)={{{@in6=@loopback, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @local}}, 0x0, @in=@broadcast}}, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000012c0)={{{@in, @in=@dev}}, {{@in6=@local}}}, 0x0) geteuid() memfd_create(0x0, 0x1) r0 = getpid() waitid(0x2, r0, &(0x7f0000000040), 0xe0000001, 0x0) ioctl$RTC_WIE_ON(0xffffffffffffffff, 0x700f) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100)) ptrace(0x10, r1) ptrace$cont(0x21, r1, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) semget$private(0x0, 0x1, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) 09:03:32 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20000000001b) ptrace$cont(0x18, r0, 0x0, 0x0) r1 = syz_open_dev$radio(&(0x7f0000002240)='/dev/radio#\x00', 0x0, 0x2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000002280), &(0x7f00000022c0)=0x4) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x10000000, 0x0, 0x8, 0x0, 0x7}) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 09:03:32 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b50800000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:03:32 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000000)={'teql0\x00', {0x2, 0x0, @dev}}) ioctl$KVM_RUN(r2, 0xae80, 0x17000000) 09:03:32 executing program 3: io_setup(0x41000000000003, &(0x7f0000000100)) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(0x0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 09:03:32 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}, 0x10) 09:03:32 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b59200000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:03:32 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5d300000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:03:32 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20000000001b) ptrace$cont(0x18, r0, 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x6, 0x4400) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000000)={[], 0x10000000, 0x0, 0x8, 0x0, 0x7}) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 09:03:32 executing program 3: io_setup(0x41000000000003, &(0x7f0000000100)) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(0x0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 09:03:32 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5b900000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:03:32 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000000)={'teql0\x00', {0x2, 0x0, @dev}}) ioctl$KVM_RUN(r2, 0xae80, 0xd00000000000000) 09:03:32 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000011c0)={{{@in6=@loopback, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @local}}, 0x0, @in=@broadcast}}, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000012c0)={{{@in, @in=@dev}}, {{@in6=@local}}}, 0x0) geteuid() memfd_create(0x0, 0x1) r0 = getpid() waitid(0x2, r0, &(0x7f0000000040), 0xe0000001, 0x0) ioctl$RTC_WIE_ON(0xffffffffffffffff, 0x700f) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100)) ptrace(0x10, r1) ptrace$cont(0x21, r1, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) semget$private(0x0, 0x1, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) 09:03:32 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}, 0x10) 09:03:32 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20000000001b) ptrace$cont(0x18, r0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000ffd000/0x1000)=nil) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x10000000, 0x0, 0x8, 0x0, 0x7}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 09:03:32 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000011c0)={{{@in6=@loopback, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @local}}, 0x0, @in=@broadcast}}, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000012c0)={{{@in, @in=@dev}}, {{@in6=@local}}}, 0x0) geteuid() memfd_create(0x0, 0x1) r0 = getpid() waitid(0x2, r0, &(0x7f0000000040), 0xe0000001, 0x0) ioctl$RTC_WIE_ON(0xffffffffffffffff, 0x700f) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100)) ptrace(0x10, r1) ptrace$cont(0x21, r1, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) semget$private(0x0, 0x1, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) 09:03:32 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5cb00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:03:32 executing program 3: io_setup(0x41000000000003, &(0x7f0000000100)) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(0x0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 09:03:32 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000000)={'teql0\x00', {0x2, 0x0, @dev}}) ioctl$KVM_RUN(r2, 0xae80, 0x1900) 09:03:32 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c]}, 0x10) 09:03:32 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000011c0)={{{@in6=@loopback, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @local}}, 0x0, @in=@broadcast}}, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000012c0)={{{@in, @in=@dev}}, {{@in6=@local}}}, 0x0) geteuid() memfd_create(0x0, 0x1) r0 = getpid() waitid(0x2, r0, &(0x7f0000000040), 0xe0000001, 0x0) ioctl$RTC_WIE_ON(0xffffffffffffffff, 0x700f) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100)) ptrace(0x10, r1) ptrace$cont(0x21, r1, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) semget$private(0x0, 0x1, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) 09:03:32 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20000000001b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x10000000, 0x0, 0x8, 0x0, 0x7}) r1 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$setregs(0xf, r0, 0x100000000000, &(0x7f0000000040)="ef65dd841fa6fec24900bd4a362d03394b1000c2ea43b84e015a") ptrace$cont(0x1f, r0, 0x0, 0x0) ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f0000000000)) 09:03:32 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5da00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:03:32 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3400000000000000]}, 0x10) 09:03:32 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20000000001b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x10000000, 0x6, 0xb, 0xb1e, 0x7, r0}) r1 = msgget(0x3, 0x1) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) getresuid(&(0x7f0000000140), &(0x7f0000000180)=0x0, &(0x7f00000001c0)) stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340)='/proc/self/net/pfkey\x00', 0x101202, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0xfff) msgctl$IPC_SET(r1, 0x1, &(0x7f00000002c0)={{0x2, r2, 0xffffffffffffffff, r3, r4, 0xc}, 0x2, 0x10001, 0x9, 0x0, 0x3ff, 0xffff, r0, r0}) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x5, 0x0) 09:03:32 executing program 3: io_setup(0x41000000000003, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 09:03:32 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b54b00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:03:32 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e23, 0x7, @remote, 0x810}}, 0x2, 0x1}, &(0x7f0000000280)=0x90) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000002c0)={r2, 0x10001}, 0x8) r3 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x20000000001b) ptrace$cont(0x18, r3, 0x0, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000380)) sendfile(r4, r4, &(0x7f0000000040)=0x48, 0x8) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x10000000, 0x0, 0x8, 0x0, 0x7}) ptrace$setregs(0xd, r3, 0x9, &(0x7f0000000140)="14f9ccf4622bb720b74d3e707751911c7b3f70339f684fba6f0ea8de8684bf6fdee72c268756491cc36a56517179c1e3f8d1d3bb04210d2d56bbf0000000000000000000000000000000") splice(0xffffffffffffffff, &(0x7f0000000300), r0, &(0x7f0000000340), 0x8, 0xc) ptrace$cont(0x1f, r3, 0x0, 0x0) 09:03:32 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000000)={'teql0\x00', {0x2, 0x0, @dev}}) ioctl$KVM_RUN(r2, 0xae80, 0x17) 09:03:32 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000011c0)={{{@in6=@loopback, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @local}}, 0x0, @in=@broadcast}}, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000012c0)={{{@in, @in=@dev}}, {{@in6=@local}}}, 0x0) geteuid() memfd_create(0x0, 0x1) r0 = getpid() waitid(0x2, r0, &(0x7f0000000040), 0xe0000001, 0x0) ioctl$RTC_WIE_ON(0xffffffffffffffff, 0x700f) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100)) ptrace(0x10, r1) ptrace$cont(0x21, r1, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) semget$private(0x0, 0x1, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) 09:03:32 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b59000000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:03:32 executing program 3: io_setup(0x41000000000003, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 09:03:32 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000]}, 0x10) 09:03:33 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={&(0x7f00000001c0), 0xc, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001000090c000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010069706970000000000c0002000000000000000000"], 0x3c}}, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r1, &(0x7f0000000000)={0x18, 0x2, {0x3, @rand_addr=0x7fff}}, 0x1e) r2 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f00000000c0)={0x0, 0x27, 0xfa00, {0x5, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x100b}}, 0xffffff25) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000100)={0x13, 0x10, 0xfa00, {&(0x7f0000000200), r3}}, 0x18) openat(r2, &(0x7f0000000140)='./file0\x00', 0x20000, 0x22) 09:03:33 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5c000000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:03:33 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000000)={'teql0\x00', {0x2, 0x0, @dev}}) ioctl$KVM_RUN(r2, 0xae80, 0xb000000) [ 736.742092] netlink: 8 bytes leftover after parsing attributes in process `syz-executor4'. [ 736.764375] netlink: 8 bytes leftover after parsing attributes in process `syz-executor4'. 09:03:33 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x91ffffff00000000]}, 0x10) 09:03:33 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b50c00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:03:33 executing program 3: io_setup(0x41000000000003, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 09:03:35 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20000000001b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x10000000, 0x0, 0x8, 0x0, 0x7}) r1 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) sigaltstack(&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000240)) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000140)={0x0, 0xef, "e0421599eb6b4d942c94a054f385bba17ae85c5eadd926f9466dfb49e1480fbfbd3a842599f19c11e1293baa01e16cfb812ad973d7217f3c7d05101fdc064148351871daefa0d2ce0f83fda65b35c09d7130f86c294d7d97a4e0e6d8135ef08611e26352352090270634338c784e92665bc01f71290d9c561586df29d4819d62ed1064e630804e4d1769365e0aaf16cc406fc289f99a13644b698adbe7e62d20f6a303df89e956649f7f11b659a65f9b76844e77509992f8413abb022773afcacdb1aea02d540ac323e658d4c98ca1fc9c872e187bc6a7b82f37977abc00fea5cdcbc245c448974eccd33cfe2b30ed"}, &(0x7f0000000000)=0xf7) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000040)={r2, 0x3}, &(0x7f0000000080)=0x8) ptrace$cont(0x1f, r0, 0x0, 0x0) 09:03:35 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x6) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = socket$inet_smc(0x2b, 0x1, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x300000e, 0x31, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0xfff, 0x40) ioctl$VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f0000000040)={0x7, 0x3f7f7f5b, 0x2, @discrete={0x2, 0x100000001}}) shutdown(r0, 0x0) ioctl$sock_SIOCOUTQ(r1, 0x8905, &(0x7f00000000c0)) 09:03:35 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1802000000000000]}, 0x10) 09:03:35 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b50f00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:03:35 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000000)={'teql0\x00', {0x2, 0x0, @dev}}) ioctl$KVM_RUN(r2, 0xae80, 0x10) 09:03:35 executing program 3: io_setup(0x41000000000003, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x0, &(0x7f0000000b00)) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 09:03:36 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5cf00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:03:36 executing program 4: fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f00000000c0)) r0 = open(&(0x7f0000000000)='./file0\x00', 0x400, 0x0) ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, &(0x7f0000000040)={0x9, 0x3, 0x1, 0xc0cb}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000100)='dummy0\x00', 0xffffffc3) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000180)) ioctl$NBD_SET_SOCK(r0, 0xab00, r0) ioctl$BLKFLSBUF(r1, 0x1261, &(0x7f0000000980)=0xc84) flistxattr(r2, &(0x7f0000000580)=""/89, 0x59) r3 = memfd_create(&(0x7f0000000c40)='TPROXY\x00', 0x0) fsetxattr$security_smack_entry(r3, &(0x7f0000000140)='security.SMACK64MMAP\x00', &(0x7f0000000280)='IPVS\x00', 0x5, 0x0) write$P9_RFLUSH(r3, &(0x7f0000000480)={0x7}, 0x7) ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r3) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r1) sendfile(r1, r3, &(0x7f0000000240), 0x20000102000007) creat(&(0x7f0000000840)='./bus\x00', 0x1a0) 09:03:36 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20000000001b) ptrace$cont(0x18, r0, 0x8000, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x10000000, 0x0, 0x8, 0x0, 0x7}) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 09:03:36 executing program 3: io_setup(0x41000000000003, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x0, &(0x7f0000000b00)) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 09:03:36 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x10) 09:03:36 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5d500000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:03:36 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000000)={'teql0\x00', {0x2, 0x0, @dev}}) ioctl$KVM_RUN(r2, 0xae80, 0x70) 09:03:36 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RSTAT(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="5f0000007d0200000058000080ffffff7f3402000000070000000000000000000004030000000600000018bb0000000000000e00766d6e65743076626f786e6574300500657468302d0500656d3040a20d00766d6e6574302d2c7070703158f4e94596f347fb30ea853086e9699633ec6c62e98df443c659c2eb22db0ceb6257661b830e840c3f0f45b78c0791e5210f65a294f1ff9e8c7e8769ec2d95f15f278a84890289bc4dbab5c520ea6ede2cfdc1cf8bcd1c1b649f3f76f89c35edaabdda5a07a1d31134f8eab400467745b3e5c36c85c62e550190c9b3a7c4ccd98dad8b76a216328e3db75979b582c735a646904bed3ddd84fdff8ec6b7b3506ec8c049af15efbb2b66f444b8007fd61d4d36512b519c7d5e1ecc2e26ec69e49a30128c5daa9fcb0e5f55aa97e836f684d75bfce2"], 0x5f) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x80000) tkill(r0, 0x20000000001b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x10000000, 0x0, 0x8, 0x0, 0x7}) openat$rfkill(0xffffffffffffff9c, 0x0, 0x105000, 0x0) ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f0000000080)=0x6) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x21, r0, 0xfffffffffffffffd, 0xffffffffffbfffff) 09:03:36 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ad00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:03:36 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x200, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x4000, 0x0) splice(r0, &(0x7f0000001280), r0, &(0x7f00000012c0), 0xe53b, 0x6) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x800000002) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000000080)=0x1008) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000001180)={r3, @in6={{0xa, 0x4e24, 0x80000000, @remote, 0x8}}, 0xb7, 0x0, 0x7, 0xfffffffffffffffe, 0x80}, &(0x7f00000000c0)=0x98) ioctl$VIDIOC_SUBDEV_S_SELECTION(r1, 0xc040563e, &(0x7f0000001240)={0x1, 0x8606, 0x0, 0x5, {0xffffffffffffff6f, 0x100, 0x8, 0x2}}) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000100)={0x0, &(0x7f00000000c0)}) 09:03:36 executing program 3: io_setup(0x41000000000003, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x0, &(0x7f0000000b00)) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 09:03:36 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20000000001b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x10000000, 0x0, 0x8, 0x0, 0x7}) r1 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x70000000000000, 0xc, 0x0, r1}) 09:03:36 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf401]}, 0x10) 09:03:36 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5d400000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) [ 740.114636] audit: type=1326 audit(1543741416.444:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=862 comm="syz-executor4" exe="/root/syz-executor4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 09:03:36 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000000)={'teql0\x00', {0x2, 0x0, @dev}}) ioctl$KVM_RUN(r2, 0xae80, 0x300000000000000) 09:03:36 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(r0, 0x0, 0x2000000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20000000001b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x10000000, 0x0, 0x8, 0x0, 0x7}) r1 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0xf) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) 09:03:36 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b58300000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:03:36 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20000000001b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x10000000, 0x0, 0x8, 0x0, 0x7}) r1 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) fsetxattr$security_ima(r1, &(0x7f0000000000)='security.ima\x00', &(0x7f0000000040)=@ng={0x4, 0x5, "791ff69ca114e836dc2ba74a1477e0ba7422"}, 0x14, 0x1) 09:03:36 executing program 3: io_setup(0x41000000000003, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x1, &(0x7f0000000b00)=[0x0]) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 09:03:36 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1085a8e7]}, 0x10) 09:03:36 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b55a00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:03:37 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000)=0x0) wait4(r0, 0x0, 0x8, &(0x7f0000000140)) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x20000000001b) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x10000000, 0x0, 0x8, 0x0, 0x7}) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r1, 0x0, 0x0) 09:03:37 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b52100000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:03:37 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000000)={'teql0\x00', {0x2, 0x0, @dev}}) ioctl$KVM_RUN(r2, 0xae80, 0xf00) 09:03:37 executing program 3: io_setup(0x41000000000003, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x1, &(0x7f0000000b00)=[0x0]) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 09:03:37 executing program 4: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xfffffffffffffda9, 0xfa00, {0xffffffffffffffff, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e25, 0x0, @mcast2}, 0x38) listen(r0, 0x2) open(&(0x7f0000000140)='./file0\x00', 0x101000, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000380)={{{@in=@loopback, @in=@remote}}, {{}, 0x0, @in6=@mcast2}}, &(0x7f0000000200)=0xe8) sched_setaffinity(0x0, 0xfffffffffffffcbf, &(0x7f00000000c0)=0x8000009) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x6000000000000003, 0x6) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='tunl0\x00', 0x10) sendto$inet(r1, &(0x7f0000000200), 0x0, 0x404c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000000080), 0xfe7a, 0xb60, &(0x7f00000001c0)={0x2, 0x0, @rand_addr, [0x800000000000000]}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f00000007c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x1}}, 0x8000) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x19, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000500)=0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800000000000000}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)={0x2, 0x0, 0x3f, 0x9, 0x0, 0x1}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x2c) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000240)={&(0x7f0000000200)='./file0\x00'}, 0x10) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000003c0)=0x6, 0x4) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$NBD_SET_TIMEOUT(r5, 0xab09, 0x2) socket$kcm(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x4, 0x70}, 0x2c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e24, 0x0, @local}}, [0x80000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x3, 0x0, 0x8001, 0x70c16145, 0x0, 0x40000, 0x0, 0x1ff, 0x7d00]}, &(0x7f0000000680)=0x100) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000006c0)={r6, @in={{0x2, 0x4e24, @multicast1}}}, &(0x7f0000000780)=0x90) [ 740.896739] audit: type=1326 audit(1543741417.224:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=862 comm="syz-executor4" exe="/root/syz-executor4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 09:03:37 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaad8188a40000000]}, 0x10) 09:03:37 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b57a00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:03:37 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20000000001b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x10000000, 0x0, 0x8, 0x0, 0x7}) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x9, 0x0) ptrace$cont(0x1f, r0, 0x0, 0x0) 09:03:37 executing program 3: io_setup(0x41000000000003, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x1, &(0x7f0000000b00)=[0x0]) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 09:03:37 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5e600000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:03:37 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c000000]}, 0x10) 09:03:37 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000000)={'teql0\x00', {0x2, 0x0, @dev}}) ioctl$KVM_RUN(r2, 0xae80, 0x10b) 09:03:37 executing program 2: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x2000, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffff9c, 0xc0086420, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, &(0x7f0000000080)={r1, 0x1}) clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r2, 0x1, 0x0) tkill(r2, 0x20000000001b) ptrace$cont(0x18, r2, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x10000000, 0x4000, 0x8, 0x0, 0xcc3}) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r2, 0x0, 0x0) 09:03:37 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20000000001b) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x80, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x0}]}) ioctl$DRM_IOCTL_GET_CTX(r1, 0xc0086423, &(0x7f00000001c0)={r2, 0x1}) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x10000000, 0x0, 0x8, 0x0, 0x7}) r3 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$setregs(0xc, r0, 0x0, &(0x7f0000000200)="55311ffee744bb6699c2e94bc35f19cc0f113a8e37336af8bd097ef4410a7d60ff0b946a4a397a2926fbf7710dd9853ba6a4a74cc75715f32aaafc2dcae3be26e167c94263b882561151fd9111a93e0f8f94e1715dd9fe234ee593d512d88bc567a1877a3d333f743454ecd71b7821e1faa50d7cda6ea68e4e379ecddaabf7ad8e94c8289c8c3c994c20f756ebe24485f23d9d24bd0212f2609850bd5063") ptrace$cont(0x1f, r0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xa085, 0x1f, 0x81, 0x0, 0x0, 0x4, 0x0, 0xa, 0x3ff, 0x132, 0x5, 0x9, 0x8, 0x5, 0x40, 0x8, 0x2e060000, 0x4, 0x800, 0x7e3, 0x4, 0x5, 0x0, 0x6, 0x401, 0x4, 0xfc6, 0x5, 0x4, 0x9, 0x1000, 0x1000, 0x9, 0x9, 0x1, 0x7d33, 0x0, 0x6, 0x2, @perf_config_ext={0x20, 0x3}, 0x2, 0x9, 0x1, 0xb, 0x7, 0x80000000, 0x80000}, r0, 0x5, r3, 0x2) 09:03:37 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5b700000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:03:37 executing program 3: io_setup(0x41000000000003, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) [ 741.508997] Unknown ioctl -1073191901 [ 741.606518] Unknown ioctl -1073191901 09:03:38 executing program 4: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xfffffffffffffda9, 0xfa00, {0xffffffffffffffff, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e25, 0x0, @mcast2}, 0x38) listen(r0, 0x2) open(&(0x7f0000000140)='./file0\x00', 0x101000, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000380)={{{@in=@loopback, @in=@remote}}, {{}, 0x0, @in6=@mcast2}}, &(0x7f0000000200)=0xe8) sched_setaffinity(0x0, 0xfffffffffffffcbf, &(0x7f00000000c0)=0x8000009) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x6000000000000003, 0x6) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='tunl0\x00', 0x10) sendto$inet(r1, &(0x7f0000000200), 0x0, 0x404c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000000080), 0xfe7a, 0xb60, &(0x7f00000001c0)={0x2, 0x0, @rand_addr, [0x800000000000000]}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f00000007c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x1}}, 0x8000) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x19, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000500)=0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800000000000000}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)={0x2, 0x0, 0x3f, 0x9, 0x0, 0x1}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x2c) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000240)={&(0x7f0000000200)='./file0\x00'}, 0x10) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000003c0)=0x6, 0x4) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$NBD_SET_TIMEOUT(r5, 0xab09, 0x2) socket$kcm(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x4, 0x70}, 0x2c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e24, 0x0, @local}}, [0x80000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x3, 0x0, 0x8001, 0x70c16145, 0x0, 0x40000, 0x0, 0x1ff, 0x7d00]}, &(0x7f0000000680)=0x100) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000006c0)={r6, @in={{0x2, 0x4e24, @multicast1}}}, &(0x7f0000000780)=0x90) 09:03:38 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700]}, 0x10) 09:03:38 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b56900000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:03:38 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000000)={'teql0\x00', {0x2, 0x0, @dev}}) ioctl$KVM_RUN(r2, 0xae80, 0x1a00000000000000) 09:03:38 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x10000000, 0x0, 0x8, 0x0, 0x7}) r1 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) utimensat(r1, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={{r2, r3/1000+10000}}, 0x0) 09:03:38 executing program 3: io_setup(0x41000000000003, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 09:03:38 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b56300000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:03:38 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3400]}, 0x10) 09:03:38 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000000)={'teql0\x00', {0x2, 0x0, @dev}}) ioctl$KVM_RUN(r2, 0xae80, 0xe8030000) 09:03:38 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(r0, 0x0, 0x7ffffffe, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x16) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x10000000, 0x0, 0x8, 0x0, 0x7}) r1 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) gettid() ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f0000000000)={{0x3, 0x3, 0xfff, 0x3, 0x6}, 0x8b, 0x100}) 09:03:38 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b54d00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:03:38 executing program 3: io_setup(0x41000000000003, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 09:03:38 executing program 4: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xfffffffffffffda9, 0xfa00, {0xffffffffffffffff, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e25, 0x0, @mcast2}, 0x38) listen(r0, 0x2) open(&(0x7f0000000140)='./file0\x00', 0x101000, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000380)={{{@in=@loopback, @in=@remote}}, {{}, 0x0, @in6=@mcast2}}, &(0x7f0000000200)=0xe8) sched_setaffinity(0x0, 0xfffffffffffffcbf, &(0x7f00000000c0)=0x8000009) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x6000000000000003, 0x6) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='tunl0\x00', 0x10) sendto$inet(r1, &(0x7f0000000200), 0x0, 0x404c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000000080), 0xfe7a, 0xb60, &(0x7f00000001c0)={0x2, 0x0, @rand_addr, [0x800000000000000]}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f00000007c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x1}}, 0x8000) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x19, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000500)=0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800000000000000}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)={0x2, 0x0, 0x3f, 0x9, 0x0, 0x1}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x2c) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000240)={&(0x7f0000000200)='./file0\x00'}, 0x10) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000003c0)=0x6, 0x4) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$NBD_SET_TIMEOUT(r5, 0xab09, 0x2) socket$kcm(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x4, 0x70}, 0x2c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e24, 0x0, @local}}, [0x80000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x3, 0x0, 0x8001, 0x70c16145, 0x0, 0x40000, 0x0, 0x1ff, 0x7d00]}, &(0x7f0000000680)=0x100) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000006c0)={r6, @in={{0x2, 0x4e24, @multicast1}}}, &(0x7f0000000780)=0x90) 09:03:38 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x218]}, 0x10) 09:03:38 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b58a00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:03:38 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000000)={'teql0\x00', {0x2, 0x0, @dev}}) ioctl$KVM_RUN(r2, 0xae80, 0x7000) 09:03:38 executing program 3: io_setup(0x41000000000003, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 09:03:38 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b53000000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:03:38 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe803000000000000]}, 0x10) 09:03:39 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5a500000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:03:39 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000000)={'teql0\x00', {0x2, 0x0, @dev}}) ioctl$KVM_RUN(r2, 0xae80, 0xf000000) 09:03:41 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x40000, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r1, 0x814, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7fffffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x10) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x20000000001b) ptrace$cont(0x18, r2, 0x0, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000200)) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x10000000, 0x0, 0x8, 0x0, 0x7}) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r2, 0x0, 0x0) 09:03:41 executing program 3: io_setup(0x41000000000003, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 09:03:41 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x10) 09:03:41 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ae00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:03:41 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000000)={'teql0\x00', {0x2, 0x0, @dev}}) ioctl$KVM_RUN(r2, 0xae80, 0x3000000) 09:03:41 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_FREQUENCY(r0, 0xc02c5638, &(0x7f0000000300)={0x1, 0x5, 0x2}) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000040)=0xffffffffffff0001) openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x20000, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000240)={0x0, 0x4, 0x3, 0x2, 0x2, 0x180000000}, &(0x7f0000000280)=0x14) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f00000001c0)={r1, 0x4}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={r2, 0xc1}, &(0x7f0000000100)=0x3e2) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000140)={0x0, 0x1}, &(0x7f0000000180)=0x8) 09:03:41 executing program 4: openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x803, 0x8) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0x0) r2 = request_key(&(0x7f0000000280)='rxrpc\x00', &(0x7f0000000240)={'syz', 0x2}, &(0x7f0000000200)='/dev/sfd/controlC#\x00', 0xfffffffffffffffa) keyctl$unlink(0x9, r1, r2) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c2d023c126285718070") futex(&(0x7f0000000180)=0x1, 0x81, 0x1, &(0x7f00000001c0), &(0x7f00000002c0)=0x2, 0x0) socketpair$inet6_sctp(0xa, 0x0, 0x84, &(0x7f0000000080)) r3 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$FS_IOC_GETFLAGS(r3, 0xc4c85513, &(0x7f0000000080)) socket$inet6_udp(0xa, 0x2, 0x0) 09:03:41 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b59a00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:03:41 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() sched_getscheduler(r0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20000000001b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x10000000, 0x0, 0x8, 0x0, 0x7}) r1 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x8, 0x76cc28d5736311cc) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000040)={0x1, 0x9, 0x8001, 0x7fff}) r2 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0xa7b5, 0x80) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000140)) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 09:03:41 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000000)={'teql0\x00', {0x2, 0x0, @dev}}) ioctl$KVM_RUN(r2, 0xae80, 0x300) 09:03:41 executing program 3: io_setup(0x41000000000003, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 09:03:41 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff0f]}, 0x10) 09:03:41 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20000000001b) r1 = open(&(0x7f0000000000)='./file0\x00', 0x8203, 0x10) ioctl$VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000040)={0xa, 0x3, 0xffffffffffff157b, 0x800}) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x10000000, 0x0, 0x8, 0x0, 0x7}) r2 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) mq_open(&(0x7f0000000080)='\x00', 0x800, 0x20, &(0x7f0000000140)={0xffffffff, 0x100, 0x8, 0x7ff, 0x9, 0xc96, 0x7fff, 0x3c}) ioctl$SCSI_IOCTL_START_UNIT(r2, 0x5) ptrace$cont(0x1f, r0, 0x0, 0x0) 09:03:41 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b55500000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:03:41 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20000000001b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x10000000, 0x0, 0x8, 0x0, 0x7}) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x22) accept4$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000080)=0x14, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 09:03:41 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/userio\x00', 0x20000, 0x0) fchmod(r0, 0x100) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) fcntl$setstatus(r1, 0x4, 0x2000) r2 = socket$inet6(0xa, 0x3, 0x3c) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, &(0x7f0000000040)={0x0, 0x9}, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000140)={0x5, 0x8000, 0x9, 0x3, r3}, &(0x7f0000000400)=0x10) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x9}, 0x2c5) mmap(&(0x7f00000db000/0x2000)=nil, 0x2000, 0x3, 0x40010, 0xffffffffffffffff, 0x1000) r4 = msgget(0x3, 0x400) fstat(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) msgctl$IPC_RMID(r4, 0x0) r6 = openat$md(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/md0\x00', 0x80000, 0x0) fcntl$getownex(r6, 0x10, &(0x7f0000002940)={0x0, 0x0}) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000000100)={0x100000001}, 0xffffffffffffff31) pread64(r2, &(0x7f0000000000)=""/21, 0x15, 0x0) setregid(r5, r5) ioctl$EXT4_IOC_RESIZE_FS(0xffffffffffffffff, 0x40086610, &(0x7f0000000280)=0x9) sendmsg$alg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000001800)="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", 0x1000}], 0x1}, 0x24000050) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f00000001c0)={[], 0x7, 0x5, 0x4, 0x9, 0xffffffff, r7}) write$binfmt_script(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0xae) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) 09:03:41 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5a600000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:03:41 executing program 3: io_setup(0x41000000000003, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 09:03:41 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000000)={'teql0\x00', {0x2, 0x0, @dev}}) ioctl$KVM_RUN(r2, 0xae80, 0x6500) 09:03:41 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1802]}, 0x10) 09:03:42 executing program 2: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0xa, &(0x7f0000000080)='/dev/null\x00', 0xffffffffffffffff}, 0x30) sched_getscheduler(r0) clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x20000000001b) ptrace$cont(0x18, r1, 0x0, 0x0) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x10000000, 0x0, 0x8, 0x0, 0x7}) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-control\x00', 0x0, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200000, 0x0) write$P9_RAUTH(r2, &(0x7f0000000040)={0x14, 0x67, 0x1, {0x8, 0x3, 0x7}}, 0x14) r3 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x40800, 0x0) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000180)) ptrace$setregs(0xd, r1, 0xfffffffffffffff9, &(0x7f00000001c0)="1950aeaefd1f0ad7f2e84c7192afc2562e34f3b420") ptrace$cont(0x1f, r1, 0x0, 0x0) 09:03:42 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b52a00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:03:42 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500]}, 0x10) 09:03:42 executing program 3: io_setup(0x41000000000003, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 09:03:42 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getresuid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f00000001c0)) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) pipe2(&(0x7f0000000740)={0xffffffffffffffff}, 0x800) r6 = shmget(0x2, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) shmctl$SHM_LOCK(r6, 0xb) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffff9c, 0x84, 0x7b, &(0x7f0000000940)={0x0}, &(0x7f0000000980)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f00000009c0)={r7, 0x0, 0x30, 0x81, 0x4}, &(0x7f0000000a00)=0x18) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000500)=0xe8) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@multicast1}}, &(0x7f0000000700)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000780)={{{@in=@multicast1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in6=@ipv4={[], [], @loopback}}}, &(0x7f0000000880)=0xe8) fsetxattr$system_posix_acl(r0, &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f00000008c0)={{}, {0x1, 0x4}, [{0x2, 0x4, r1}, {0x2, 0x6, r2}, {0x2, 0x2, r3}, {0x2, 0x0, r4}, {0x2, 0x7, r8}, {0x2, 0x3, r9}, {0x2, 0x7, r10}, {0x2, 0x1, r11}], {0x4, 0x2}, [], {0x10, 0x4}, {0x20, 0x1}}, 0x64, 0x3) clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r12 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) tkill(r12, 0x20000000001b) ptrace$cont(0x18, r12, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={[], 0x10000000, 0x0, 0x8, 0x3, 0x7}) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r12, 0x0, &(0x7f0000000080)) r13 = syz_open_procfs(r12, &(0x7f0000000000)='net/xfrm_stat\x00') ioctl$BLKIOMIN(r13, 0x1278, &(0x7f0000000040)) ptrace$cont(0x1f, r12, 0x0, 0x0) 09:03:42 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5a400000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:03:42 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20000000001b) ptrace$cont(0x18, r0, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x92002, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000280)='/dev/vcsa#\x00', 0x0, 0x40040) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f00000001c0)={[], 0x4, 0x0, 0x1008, 0x100000000, 0xc, r0}) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 09:03:42 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/userio\x00', 0x20000, 0x0) fchmod(r0, 0x100) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) fcntl$setstatus(r1, 0x4, 0x2000) r2 = socket$inet6(0xa, 0x3, 0x3c) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, &(0x7f0000000040)={0x0, 0x9}, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000140)={0x5, 0x8000, 0x9, 0x3, r3}, &(0x7f0000000400)=0x10) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x9}, 0x2c5) mmap(&(0x7f00000db000/0x2000)=nil, 0x2000, 0x3, 0x40010, 0xffffffffffffffff, 0x1000) r4 = msgget(0x3, 0x400) fstat(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) msgctl$IPC_RMID(r4, 0x0) r6 = openat$md(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/md0\x00', 0x80000, 0x0) fcntl$getownex(r6, 0x10, &(0x7f0000002940)={0x0, 0x0}) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000000100)={0x100000001}, 0xffffffffffffff31) pread64(r2, &(0x7f0000000000)=""/21, 0x15, 0x0) setregid(r5, r5) ioctl$EXT4_IOC_RESIZE_FS(0xffffffffffffffff, 0x40086610, &(0x7f0000000280)=0x9) sendmsg$alg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000001800)="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", 0x1000}], 0x1}, 0x24000050) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f00000001c0)={[], 0x7, 0x5, 0x4, 0x9, 0xffffffff, r7}) write$binfmt_script(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0xae) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) 09:03:42 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000000)={'teql0\x00', {0x2, 0x0, @dev}}) ioctl$KVM_RUN(r2, 0xae80, 0x477618807f0000) 09:03:42 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000]}, 0x10) 09:03:42 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5c800000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:03:42 executing program 3: io_setup(0x41000000000003, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 09:03:42 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x10000000, 0x0, 0x8, 0x0, 0x7}) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 09:03:42 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000000000]}, 0x10) 09:03:42 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5e400000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:03:42 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b59400000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:03:42 executing program 3: io_setup(0x41000000000003, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 09:03:42 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000000)={'teql0\x00', {0x2, 0x0, @dev}}) ioctl$KVM_RUN(r2, 0xae80, 0x8000000000000000) 09:03:42 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000040)=0x9, 0x4) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20000000001b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x10000000, 0x0, 0x8, 0x0, 0x7}) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 09:03:42 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/userio\x00', 0x20000, 0x0) fchmod(r0, 0x100) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) fcntl$setstatus(r1, 0x4, 0x2000) r2 = socket$inet6(0xa, 0x3, 0x3c) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, &(0x7f0000000040)={0x0, 0x9}, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000140)={0x5, 0x8000, 0x9, 0x3, r3}, &(0x7f0000000400)=0x10) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x9}, 0x2c5) mmap(&(0x7f00000db000/0x2000)=nil, 0x2000, 0x3, 0x40010, 0xffffffffffffffff, 0x1000) r4 = msgget(0x3, 0x400) fstat(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) msgctl$IPC_RMID(r4, 0x0) r6 = openat$md(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/md0\x00', 0x80000, 0x0) fcntl$getownex(r6, 0x10, &(0x7f0000002940)={0x0, 0x0}) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000000100)={0x100000001}, 0xffffffffffffff31) pread64(r2, &(0x7f0000000000)=""/21, 0x15, 0x0) setregid(r5, r5) ioctl$EXT4_IOC_RESIZE_FS(0xffffffffffffffff, 0x40086610, &(0x7f0000000280)=0x9) sendmsg$alg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000001800)="a1e6f83a09a4be8e76afd1348eea83b337cc6bda6392f9e48e7bed1bf2abfc2e90de0bc84b1b50c0b005e7ada9c8a248359c9111bf9032e306e0ae6240731023ccb898178e6f81c596335dfc08f80970a59c51b622306d16f2243e6628f47fd7417802d19b557d29e9954ec86eb92803378cc6f8490f805cd81b3a079ac825af302b04100a141d0e95078b78f98b702f51681c9ac7c63c990065012136bb420aa1c2055d9ff316e02283d408662f3683e034ef04d94f1a11742b8cfb5ecc7d52ef7222ec34ca873b92e86427a6b91eb224e4b557f922ed2f2ba491c2684c2624872305fff132c882238affac27e34372e64e80e3f81bcd8c2ddb0fcf4c1542c4e1b24a1fd4a248a899ebcec5029453d01a0200c2d113d15c39987c813c6a808d8efa69f9778d1a6cb5701b9c5f0b2c3927a7a16c5865b437571d163c4a689d0b732ac0d2b7398b720feb84a256505527d02182801dc729eb123d931d9056d5651d176661f299d731253e5aa73c33a25c14783667a6e234f80f6618fda631550e5df2d6679f91fbabb9d09384d2ec66c4954026bd8672a772fe2f5e25b9e89e6203d76663b907b640195ddf47510baeb643ed21069af9c32922b94bfbb9ed17a3f8110eb9ba3eb0bcfab6a5a03f52a56acbee8b217315f725f3fdd0a3e942bc8441a40367b87c0ae27a372188283b62cd5e936874eeed37f4d6a9017b4a6d4b45e26b75638810681eefea15f3bb444aa1636bd0a46ad1e1b3f8aa197049357a8b23901186b9523c9e3207944085360d94d2cc0153548a419a4c846a0d576e48ea5ce43b6d087a07a668256d4d4bebf2223bd5cf36901e58556404dc3d36607af70dc85c8c24dc55a09be3722108130a0d3189f2c9f4eb7d65ad12594c523862333b20418283f7a3e5fef614c1c649798aaaee0396f8d275018c6832d4f7e310327c2d58b52c07383da55c2c661dc35843ff558d8993271da96458c3073bd0e3f02e46bebc5c1822adbe7182bab5e2f04f30bf0a58c83b9a89d734bd3f686402d595d0ff963690248c2c7e76ca2e5a720dec5d3eca2ef5160b487b5858436a46038f64f1076804ce5978abb267ab80f02b79d16f4eb3a221dd4a7be674bf399739148558046ff10d749c5cd1bf2a67e79f6fd8e70aa9a6816742c4c9fc8dab5b94b7d8ccf3861d0d64254b3091f09be02f39ddc83488d606348177f5b9638eafd4d585f4a4d8d8c7f14032c9ded28a3195fa0e8b2d9ff6398f381765ae8b88a098079a826a560e5832d6c9aeb9587f7289dadc8c99e8372efb0314335e2a6354edb46ac0bbd0834585ed110a89244d0ae054ffae767c56f34a7b3879bcbdf328765b65b77f226a5843e7bfff003add2df86965ad659f91113213d66e28ec0af14e410727a9eac4e754596bb9902ccf289816bc8d8608de0222bc8ba330b2cdbc75e552c0f8d2e5352f6827c3aa63f22089f1b06a8c002b2df013c4a66c55c323e93d888a2a8d645f1b94ef1b25c764a36328a0a7cb1a671700726cffbb02e6ec28437340a087b389fc9e644cf238f079ba281f4dbae1bd12e30e26c67aff3ce0c39aae415144f1f5f61f976bb1fead2f133fa62a5e75ba8cbf9c59a313144c1555250b944480db946c97cd58eae5981c736409eed7f597a8a4b740d60627a16acf6e16499513efdd972070627e4a1c868fc284a051d929d9a989c94e41ea9f4517a9b08bd252d2f68e2eed5a82cfc7015aff4e2fab6ba0d00555400c52389d106818aae7305c42760f292897357166959c3c459e1f7b60c573bc8c40b0733c01a5c66e71ba8d401ba87ee9f2c1f30b10bccb72db541fef8e99882c2efe7a47e24fcfaf6dc7a423d9ec62957f5c4f461254a847e0536527ed3750522e8489c93a38332736de5b3ef4437fe8362e1574f4d886823e6f959dbed277f7bc8f5c7ef3081e1926b5beaf178a8ec18e71fbef675a9409fdf5f365cf4071050b2aea96e7449998aa9a50832f281c6e19cd7afbec852e0d153eeb0243d73060cae696402dd34c30fd74f402fccef0e8d2c7a108d0a3ad374ad26c1a245f0f152ac50dfaf15c15b728792aa01a19dc53a820cb1b353f2634de2ac98b622fa6949ce50a706008f582b885bac3d3a6ce04f964d1ab26eb45a544cf688a3d79235c87c299c5534906fd006ea3c0e5b385c71564fe7e1d56a474e4ee11818b97e1f8a5b0b51b826c2283f2febf78337559872c69dca83f4bb47d140c58b555edc3d0be6b664094545bd0f1cb174c7b46a209e25b53b26251f5c1ad3fbc5e60b1cf2218e9fbd2ead92b477b1054cacd27f93ba120817d07e5b989a527e1eca02a4e352ee3351fd8a5e21f338a595281632f8d2bd28f8df90fe44163c5016783a1951c291bb466242ff86ead9df175fee23b7c5302d60ffb55f39aebde3206e60bf4b763d10382cb6a52ee888fc4621044f67ac729723d0e31023f169e34b660b6737f66bc6de0705a4aba795e065ef7f9fdff7e827e27e4c412e359ad1d63688ae7a50a20053b7a95018e3b57bf45225eea85dbd2de1f5516cea74eda977c6a6f7cd408ff044396c7062f4737c0080fba853b7a7577b67682ba512e5d9e8f7d88b665d96506ed1157f69bad714fcfc47f155a0630d1fbdcd199f9ef6c2bddc038d3e3ba5697555728c0677c3b7fd806df9ac1e40bf40c8fb64c079b9b00e264555328391c6764cdd79426504a4abad802bfcd927d2a477381edc37298b2478ad1b65e11b59cc9c62d371a1fbf03f5ab0289cb4a3f90a83faab236de423bb04776daf70caf80ca18196e194faa8e499174cc83285ec16bdc60734fe47bf593a2824902a5b1bf5981a7c9adda672163df7c258c4de1b85a659e6760f864604a35285ac7e515c2acfb30f510574eb019315872ba6cac29d5de27cc4c61a872e3a53274144ae8ccd07c6acdf621787ab29546c324f5d31a3983bcfce55a11c22237b64e212185e5d7bf6b0473d7e92171364c8dafc9aa102dd856fc3a6b15fc8d48e7db9c1d9ff62545e3ce9a68922d119045ffe848b8d5b5abfc9da4558dbc0b6fe7d73f7199277679b1393e055a133357bddd7f9116c4a6af8154a933a9ff9fa89bd37e39f8bebe9bcf51de8e8ae42e8e2cdb99ba6567fe1abbeee55adb1d64a67a25a1b445117a826bf22d47320c08d840b17b178e2d88afd1a2144131962e73dfaafb665e7d9a10bf7fa6da3ece76f7d20f75d4353eb96965e92c72dbcea50574984ea80248dc895e0d15fdeada5e2c70a5adc9bc24bd01eecae1ef89559625260fd58c6f2ef43f301654dc250a82279bac3b3dbd25db017eaae395552fda6909c629e163b48b94cd777543616fba1c34b5cda3a0acc99cd14e5d21f44c89fc1df197d0cee68ac3dae538922a5b1eeb336db76efbbf4b3c138b1d74ff0e97810c1907e74cfc6b7cb22ce5dc1695ccc6f42351b4e9509df83402689ca4ea91bc0d22b7e59803d6fea61d021a8279c41fbdf6d9ae0bf49b8f35c9414aba67a566611095ef51bbbf27da236a20dab32443403c0aada952a030ce728dc94714715e2b68eb987ff3fa5f44f8f35f8bec6f3133ad3c7991a5f11bfd82f23f8c855848ad31212a71ff05e6a08008eb75d17aa88e40e38d38aa87873c94eb57399b21d40667b15c49863dd770081a8b7dd3e60bf2a938344dda0a54b280fad0d1b9ad04719d52ecfd17a783ca2b844ab7b90e578e96140b99bd192afc2e70daa4aba4e276fc9be2664ca8fa92e1a6acd10e7ee16fd85d44f9a3c4b28f2746e0040d01506047b8a03bcc3bb6090aac96efb1a4dd45310edb02867f27799787f69f39cd83151644d69ac10f08fda7da51bd1620dd49bdeb62f5c6db2cfbe088181610c2acfb5a1379a5303a7f5ecf31d377ccf7ea6649584dc40767bbc57f78f8dde5230b1a80ada4d420cb52690d78e8dc7a6c2e3cabfa015d26a27cb4ee2b9c5e2b940b05b1e635374f40c16ddb117d24bb14852347eb87917019c0d485dae409d977f5ce30f5299fb32df3796adb1e6441736186827f408ad1350e7985494c21ac46c6b5ed1096b2e7ebc9d4595a399f47b18014e672872bb6800c6cf79e60195cbf83f0dc3e165376477738112c5bb402d8148823c55707244d96c574d12f016733a4f04564cd72eee2f4c8e4036cea87359cfd9b8576c616cdb960ed9f02c5c91bada46e12718f8e1a4d9fefdbe86559550238e2b9e483635ee0575bc9ce9d46123ecfe18eb9488089b6113373b27435fcf519b2c80f38f16d4e0a7b4431e20f4d04046e31a44a30841ae8aa5c8f8daaac172e6b3496f47219ff55d2a91dd26d367a50f390930433244999b608ae15234a5102de60f12ad3df758aae26cbe4c9227595b8363d425197f4e43fa6b4982d1cb831d8de9e7b3fe4fc6607332332d5a09fca711bfe3384317a076ce4d53891de7a74f266a13ba303e94cc698e7bef78f5fb13510e486309c218d74e3143194054ec4d36a77c1dbfe830c236865f6d6d7de7b3a800fdd44fcbd9fe0ff4e03e872254d2979b1a87d429575c3b4d526978ca63a4f88828d6d9a98e5e53856bcd420a944b879ac2fa9b8167b0fc97f93093ccbfed3c520302b5ef0c2fd079add1b2781162c25885d0d3219dd581378c075865c3dd25304db73a77658b71233e386ed92351349332bc958fdb26fa0fbc85b2dc12d7342cf57037b16a72f236633f34b80373c56865ae05f202a21ce1fbfd7cf45ab1658062265523e45bc829e98dcb488beee06fb44aa0d5c745c37849abb393738de7cb3bf47914d09deef0f9d9e04dc4bc5727824d600e56832094300cd9ce32c5a289ef17c6470c55d43bca3d27db2a69dbca254a0f171a76758eceea88ad37eb9fc092aeece77ede842cda76a385d61fb7a0ae013537543e92c21fb49af28135ebf2b99934716eecffc531dd717a08dacd7b3390e7a068f844552b37b58108582cecd237621f027a86a7e826b1dc4efc32acc457dc22364932d090211c018c67bfa97764002fbfde1c5fefff51183f8c248191aa92d0864f8b9d7fcfe3491014885d9c14517f7ec8d5706551e5d66a4e757c532b5e4d27270fec1ad46311a61c6f69e07e39671539dd44255bbcde9f8742690f78fb35cba89ed64ade5e0b8f7ef92502cc9c4f507d1ecc52f46d268a26d757025d946e720b3fbc27dd41855cfdb5976ac49209a9b71e11f664a1f9fc28d4c5371d0f2ef1feb292885c548136bdcdafff4ec95d5b04d1cf11a0b61bbab5d5878490eea347f200c74a3470a03cf7cf9ae8f128d5ae227be65b2d9c4231b79fffbce9c7c93dd86b7bb4bac36c9d69e915ee4d530077b739877e7b8c91ce4effa90a821f92e14900e61555a4a99ff6fd20811413b610364e230f174370d41402ca215b8d577beb2b6eb968b9c4cd38045d687b54112ee9d4f76ac1da7784a7bf5b482795c9206b60deb0f92ea5b39690788f090a6a7d0790adbdcd5c74847864e53ab3afd74c9671594b8db170abb4b7802039e060b13ccbdd0ea9a7816cc4023be1a84c67665a8ccb5205c08ffdbe53ccd74a1efed16431a2fb5c95450912562b3570c694abb6a90a0f73590cbb51a936fb8c30e38aba18ac104394e070171d81fa901490a32e7d2b6ac5342999a281018bfdb5cf4126f30a913a72355c841f51e8590f7f68dec6bbe324fbcf07e4317f077330d41f121435a8ec95fdc669241e5fed547d76fd45f8620728c48d5e1f9257e7698e717565db5cb8db7ac94797ab31b64b77f4b2f85dd7aa09d4a6b016bc6355ccfc347", 0x1000}], 0x1}, 0x24000050) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f00000001c0)={[], 0x7, 0x5, 0x4, 0x9, 0xffffffff, r7}) write$binfmt_script(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0xae) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) 09:03:42 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5bb00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:03:42 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27a8851000000000]}, 0x10) 09:03:42 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000000)={'teql0\x00', {0x2, 0x0, @dev}}) ioctl$KVM_RUN(r2, 0xae80, 0x65000000) 09:03:42 executing program 3: io_setup(0x41000000000003, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 09:03:42 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5b500000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:03:43 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8dffffff00000000]}, 0x10) 09:03:43 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000000)={'teql0\x00', {0x2, 0x0, @dev}}) ioctl$KVM_RUN(r2, 0xae80, 0x1700) 09:03:43 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b56000000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:03:43 executing program 3: io_setup(0x41000000000003, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 09:03:43 executing program 4: r0 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x2, 0x2a1ace087d326265) connect$pppoe(r0, &(0x7f00000000c0)={0x18, 0x0, {0x4, @local, 'veth1_to_bridge\x00'}}, 0x1e) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='comm\x00') exit(0x0) r2 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000000)={r2}) write$FUSE_GETXATTR(r1, 0x0, 0x0) 09:03:45 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20000000001b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x10000000, 0x0, 0x8, 0x0, 0x7}) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0x3, &(0x7f0000000140)=""/235) ptrace$cont(0x1f, r0, 0x0, 0x0) 09:03:45 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xeffdffff]}, 0x10) 09:03:45 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b55b00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:03:45 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000000)={'teql0\x00', {0x2, 0x0, @dev}}) ioctl$KVM_RUN(r2, 0xae80, 0x8004) 09:03:45 executing program 3: io_setup(0x41000000000003, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 09:03:45 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000940)="2f677288b9702e73746174007d88231ba79cfad631b04fb68d9fb4db977cf33fec62de80dfdfb5acfaf3d5eeb38f73553b6cc55a955c21bd4862af8f2c6bf5a75682774d76fe52fdecdf01de8c7fe9105e629655442851b5a5415cd4b43dd221c8bcb4b8b6eaaf6299aee1967b237166322ddc70aa806d384f45322e", 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086607, 0x0) getpid() unlink(&(0x7f0000000280)='./file0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) write$cgroup_int(r1, &(0x7f0000000980), 0xffffff4d) close(r1) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f00000002c0)={&(0x7f0000000040)=@ax25, 0x80, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x97}], 0x1, &(0x7f00000001c0)=""/17, 0x11}, 0x3f00) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:03:45 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b58e00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:03:46 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe803]}, 0x10) 09:03:46 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b58400000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:03:46 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4a06, r0, 0x0, 0x1e) tkill(r0, 0x20000000001b) tgkill(r0, r0, 0x3c) setxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.capability\x00', 0xffffffffffffffff, 0x0, 0x0) ptrace$cont(0x18, r0, 0x100000001, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x10000000, 0x0, 0x8, 0x0, 0x7}) r1 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x2) setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@int=0x200, 0x4) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000140)) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0xfffffffffffffff7, 0x7) ptrace$cont(0x1f, r0, 0x0, 0x0) 09:03:46 executing program 3: io_setup(0x41000000000003, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 09:03:46 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000000)={'teql0\x00', {0x2, 0x0, @dev}}) ioctl$KVM_RUN(r2, 0xae80, 0xd00) 09:03:46 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20000000001b) ptrace$cont(0x18, r0, 0x0, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x0, 0x0) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000001c0), 0xfffffcd4) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x10000000, 0x0, 0x8, 0x0, 0x7}) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x21, r0, 0xffffffffffffffff, 0x8) 09:03:46 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b58c00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:03:46 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x10) 09:03:46 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b56a00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:03:46 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000000)={'teql0\x00', {0x2, 0x0, @dev}}) ioctl$KVM_RUN(r2, 0xae80, 0x3e00000000000000) 09:03:46 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e8]}, 0x10) 09:03:46 executing program 3: io_setup(0x41000000000003, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 09:03:46 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5aa00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:03:46 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b58e00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:03:46 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000000)={'teql0\x00', {0x2, 0x0, @dev}}) ioctl$KVM_RUN(r2, 0xae80, 0x7000000000000000) 09:03:46 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5c300000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:03:46 executing program 4: r0 = syz_open_dev$dmmidi(&(0x7f0000000300)='/dev/dmmidi#\x00', 0x5, 0x80000) ioctl$ASHMEM_GET_NAME(r0, 0x81007702, &(0x7f0000000400)=""/196) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x200, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f0000000500)={r1, 0x1, 0xffffffff, "2a12ec7db9fcaca8bcb1255cad15da1e97499268ece9965c3a0f2e7f5e45563a77873d5cbef5ce6252f31ca11fabecbb1b873ac55d0aa3cd9d44d654e2deaa5543f9ff2d1d733c126ca62f2972f595343917496aac12616952390f18491abb5415bb6ecad22d417c750ecd8dcd4b0e3edb4373ea5cbeff9cb5f88174a411ca16b2e4b99a56e46540687078963f8835f9c09d5534becd981c36bc44d94ea26a8cdbc2c366a1e304ba40fadf98cc3c14e3ef7480b900e79ce55f50138c60eecf289610442c4cd6972d95525db4ec4ed9"}) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xa8200}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x148, r2, 0x218, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x84, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x100000000}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syz_tun\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0x58, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7fffffff}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@local}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fff}]}, 0x148}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) syz_emit_ethernet(0x3e, &(0x7f0000d53fc1)={@remote, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @broadcast}, @icmp=@parameter_prob={0x21, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}}}}}}, &(0x7f0000000000)={0x0, 0x0, [0x0, 0x0, 0x1]}) socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000000c0)) 09:03:49 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000000)={'teql0\x00', {0x2, 0x0, @dev}}) ioctl$KVM_RUN(r2, 0xae80, 0x2) 09:03:49 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff8d]}, 0x10) 09:03:49 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ec00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:03:49 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(r0, 0x0, 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) tkill(r0, 0x20000000001b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x10000000, 0x0, 0x8, 0x0, 0x7}) openat$rfkill(0xffffffffffffff9c, 0x0, 0x400003, 0x0) lsetxattr$trusted_overlay_nlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.nlink\x00', &(0x7f0000000080)={'L+', 0x6}, 0x28, 0x2) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x21, r0, 0x1, 0x8) 09:03:49 executing program 3: io_setup(0x41000000000003, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 09:03:49 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket(0x10, 0x803, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x3c, &(0x7f0000000080), 0x10) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x2, 0x0) r3 = dup3(r2, r0, 0x80000) write$P9_RXATTRWALK(r3, &(0x7f0000000040)={0xf, 0x1f, 0x1, 0x20}, 0xf) 09:03:49 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b52200000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:03:49 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20000000001b) ptrace$cont(0x18, r0, 0x0, 0x0) sched_rr_get_interval(r0, &(0x7f0000000000)) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x10000000, 0x0, 0x8, 0x0, 0x7}) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 09:03:49 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x91ffffff]}, 0x10) 09:03:49 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000000)={'teql0\x00', {0x2, 0x0, @dev}}) ioctl$KVM_RUN(r2, 0xae80, 0xf00000000000000) 09:03:49 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b58d00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:03:49 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20000000001b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x10000000, 0x0, 0x8, 0x0, 0x7}) ptrace$setopts(0x4206, r0, 0x9, 0x2) r1 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) fsetxattr$security_selinux(r1, &(0x7f0000000000)='security.selinux\x00', &(0x7f0000000040)='system_u:object_r:systemd_notify_exec_t:s0\x00', 0x2b, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r0, r1, 0x0, 0x2, &(0x7f0000000080)=')\x00', 0xffffffffffffffff}, 0x30) ptrace$cont(0x1f, r0, 0x0, 0x0) 09:03:49 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8030000]}, 0x10) 09:03:49 executing program 3: io_setup(0x41000000000003, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) 09:03:49 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_mount_image$erofs(&(0x7f0000000040)='erofs\x00', &(0x7f0000000080)='./file0\x00', 0x7, 0x2, &(0x7f0000000300)=[{&(0x7f0000000140)="aaa160deda9298056a4a5636a3300bcd88c1ec3f7ede7475014e799e0b283dd4df217a882e3d38faaff3eedf0040cc833dbd7a06c61533e8d7aa9b2ef5e5182b31a8e43991b0c39f1baff53e6d8475949ef0d9f052bec66b802e63d00b557b960742ee7c8d1d45e8b94489280aaae58d0487c042fbce354e476e1681dcb27364a58492b77bf137048267147a2c1b5f893e4371214147416762b2cc24ba2c5285107f887237045f0ff8ea546746d5c70612d87b4bee31d9", 0xb7, 0xfffffffffffffff9}, {&(0x7f0000000200)="7bf23db52cdf2281f44e01847fd365477abfd77840f4f0da34834db74d64c76e8fbae46c1e99a3b63b52f27b9360342494b3dd9df20bfbf63661f753b319c4bf178d2ed54610717035e8b1870e008454896843f222f7e4c5273160799e0373aeb634bd4b2194eea4a3fed15c6614dd9e260486a7823a53955daf7bd57369bbefb1dfdd033bd1cac3885fa1ad2c282790d2836a3ffd3ad7c3e1fa235f7918fe229305859d24777e6a2a70d7d2e8eb91276cbf84e3d6844bccee9a53ab07abd5f5c488f522ba34da9078525f7f821feb95e5f972603a4b6b6afa1e0baab28454c53f294d03aa97b8778716e94c389a85bfdd", 0xf1, 0x3}], 0x1080000, &(0x7f0000000340)=ANY=[@ANYBLOB="6e6f757365725f78617474722c6661756c745f696e6a656374696f6e3d3078303030303030343030303030303030332c6e6f757365725f78617474722c6661756c745f696e6a656374696f6e3d3078303030303030303030303030303230302c61636c2c6e6f61636c2c61636c2c6e6f757365725f78617474722c6661756c745f696e6a656374696f6e3d3078303030303030303030303030313030302c736d61636b6673666c6f6f723d76626f786e657431657468302db82f7b002c00"]) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20000000001b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x10000000, 0x0, 0x8, 0x0, 0x7}) r1 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000000)=0x8, 0x4) ptrace$cont(0x1f, r0, 0x0, 0x0) 09:03:49 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b51c00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:03:49 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000000)={'teql0\x00', {0x2, 0x0, @dev}}) ioctl$KVM_RUN(r2, 0xae80, 0x18000000) 09:03:49 executing program 4 (fault-call:4 fault-nth:0): io_setup(0x41000000000003, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 09:03:49 executing program 3: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20000000001b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x10000000, 0x0, 0x8, 0x0, 0x7}) ptrace$setopts(0x4206, r0, 0x9, 0x2) r1 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) fsetxattr$security_selinux(r1, &(0x7f0000000000)='security.selinux\x00', &(0x7f0000000040)='system_u:object_r:systemd_notify_exec_t:s0\x00', 0x2b, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r0, r1, 0x0, 0x2, &(0x7f0000000080)=')\x00', 0xffffffffffffffff}, 0x30) ptrace$cont(0x1f, r0, 0x0, 0x0) 09:03:49 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000]}, 0x10) 09:03:49 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20000000001b) ptrace$cont(0x18, r0, 0x0, 0x0) socketpair$inet(0x2, 0x0, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000140)={0x4a, {{0x2, 0x4e24, @empty}}, 0x0, 0x6, [{{0x2, 0x4e23, @loopback}}, {{0x2, 0x4e24, @multicast1}}, {{0x2, 0x4e22, @local}}, {{0x2, 0x4e21, @multicast1}}, {{0x2, 0x4e23, @empty}}, {{0x2, 0x4e21, @multicast2}}]}, 0x390) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x10000000, 0x0, 0x8, 0x0, 0x7}) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 09:03:49 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b50b00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:03:49 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000000)={'teql0\x00', {0x2, 0x0, @dev}}) ioctl$KVM_RUN(r2, 0xae80, 0x900) 09:03:49 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b53e00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:03:49 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x25}}, &(0x7f0000000000)="504c20004cf7d12af11ce92537b5e3191e66de5d4ec18e4c2df01484a86d77842f624946eae310794c8c96ff1466232e25951139bda5d2990e523f8ec3080ffc1224d8dc4c84a9c8e8ab31576806715523fa749e8615c61049b8b1be6aa7740702cc5add", 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) get_thread_area(&(0x7f0000000200)={0x1, 0x100000, 0x1000, 0xfffffffffffff62a, 0x6, 0xfffffffffffffff7, 0x1, 0x37f, 0x4, 0x4}) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r2, r0, 0x0, 0x6, &(0x7f0000000100)='wlan1\x00'}, 0x30) 09:03:49 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8dffffff]}, 0x10) 09:03:50 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b53100000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:03:50 executing program 4: io_setup(0x41000000000003, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 09:03:50 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c00]}, 0x10) 09:03:50 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000000)={'teql0\x00', {0x2, 0x0, @dev}}) ioctl$KVM_RUN(r2, 0xae80, 0x1b00) 09:03:50 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b59700000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:03:50 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe6bc1411]}, 0x10) 09:03:52 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20000000001b) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x44000, 0x0) ioctl$BLKROGET(r1, 0x125e, &(0x7f0000000040)) ptrace$cont(0x18, r0, 0x0, 0x0) connect$unix(r1, &(0x7f0000000140)=@abs={0x1, 0x0, 0x4e22}, 0x6e) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x10000000, 0x0, 0x8, 0x0, 0x7}) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 09:03:52 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000000)={'teql0\x00', {0x2, 0x0, @dev}}) ioctl$KVM_RUN(r2, 0xae80, 0x14) 09:03:52 executing program 4: io_setup(0x41000000000003, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0xc0306201, 0x0) 09:03:52 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5e800000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:03:52 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) add_key(0x0, 0x0, &(0x7f0000000300)="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", 0xc81, 0xfffffffffffffff8) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0xffffffffffffffce, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000100)=ANY=[@ANYBLOB="000018d8f65b8120490bf41b02cc7af5968a397f93f06208588a36ee2b8f0cfd482aba5fe89467fd000000004a3a40ce10b574012452b1e3971ad5b9b808204238008acb9a87264a4e643778f3488e7f60458f353b5b80f3131af93d44b1cffcef8df32512cfa42e"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:03:52 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f4]}, 0x10) [ 756.540468] binder: 1505:1512 ioctl c0306201 0 returned -14 09:03:52 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b50d00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:03:52 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff91]}, 0x10) 09:03:52 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20000000001b) ptrace$cont(0x18, r0, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0xfffffffffffffffa, 0x880) r1 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x2) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f00000000c0)={[], 0x10000000, 0x0, 0xb, 0x0, 0x7, r0}) r2 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VT_RESIZE(r2, 0x5609, 0xfffffffffffffffe) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x3, 0x604f) [ 756.599239] binder: 1505:1524 ioctl c0306201 0 returned -14 09:03:53 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2) getdents(r0, &(0x7f0000000200)=""/199, 0xc7) socketpair$unix(0x1, 0x400000001, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x10000000000032, 0xffffffffffffffff, 0x0) r2 = socket(0x8000000002, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200010c0], 0x0, &(0x7f0000000040), &(0x7f00000010c0)=[{}, {}, {}]}, 0x108) 09:03:53 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b52900000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:03:53 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000000)={'teql0\x00', {0x2, 0x0, @dev}}) ioctl$KVM_RUN(r2, 0xae80, 0x4000000000000) 09:03:53 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1114bce6]}, 0x10) 09:03:53 executing program 4: io_setup(0x41000000000003, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046205, 0x0) 09:03:53 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5d100000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:03:53 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b51300000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) [ 756.859059] kernel msg: ebtables bug: please report to author: Couldn't copy entries from userspace [ 756.886917] binder: 1559:1562 ioctl 40046205 0 returned -22 [ 756.902483] binder: 1559:1569 ioctl 40046205 0 returned -22 09:03:53 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000400), 0x32e}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000081, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000cfd000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0xffffffffffffffe0, 0x200) write$P9_RREADLINK(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="160000001701000d002e2f66696c65302f6669f96530"], 0x16) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r1) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x7ff, &(0x7f0000000240)=0x0) io_cancel(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x4, r1, &(0x7f0000000340)="df5d65e0b3f5f79d3c7041c8cb7dbdf7e969d7a849a7743f1772992e845518f3abfa8d5c74626bf466af954b249513e90fca7a4db987183faf27e1fbb469de8ac6a87ef19060ca42121ce7dde3d763eaf838a2bfa616d2dab82a712f22032c401c985b96f065329ded83c2f37865da857277c52d", 0x74, 0x8, 0x0, 0x1, 0xffffffffffffff9c}, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000d80)={@in, 0x0, 0x8, 0x0, "4dbd3b0988e17b2d1d331c69872a9dda1d6a64edcd1cd30fb0ce73f1249d122559232b4970ee70afb23c5802edeb144bd80029d8a5754107cec75bbd53956c00"}, 0xd8) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) 09:03:53 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000000)={'teql0\x00', {0x2, 0x0, @dev}}) ioctl$KVM_RUN(r2, 0xae80, 0xe00) 09:03:53 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe6bc141100000000]}, 0x10) 09:03:53 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b57200000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) [ 757.186473] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 09:03:56 executing program 4: io_setup(0x41000000000003, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0xc0045878, 0x0) 09:03:56 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20000000001b) getpgid(r0) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x10000000, 0x0, 0x8, 0x0, 0x7}) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 09:03:56 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b55300000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:03:56 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c000000]}, 0x10) 09:03:56 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000000)={'teql0\x00', {0x2, 0x0, @dev}}) ioctl$KVM_RUN(r2, 0xae80, 0x1100) 09:03:56 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000400), 0x32e}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000081, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000cfd000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0xffffffffffffffe0, 0x200) write$P9_RREADLINK(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="160000001701000d002e2f66696c65302f6669f96530"], 0x16) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r1) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x7ff, &(0x7f0000000240)=0x0) io_cancel(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x4, r1, &(0x7f0000000340)="df5d65e0b3f5f79d3c7041c8cb7dbdf7e969d7a849a7743f1772992e845518f3abfa8d5c74626bf466af954b249513e90fca7a4db987183faf27e1fbb469de8ac6a87ef19060ca42121ce7dde3d763eaf838a2bfa616d2dab82a712f22032c401c985b96f065329ded83c2f37865da857277c52d", 0x74, 0x8, 0x0, 0x1, 0xffffffffffffff9c}, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000d80)={@in, 0x0, 0x8, 0x0, "4dbd3b0988e17b2d1d331c69872a9dda1d6a64edcd1cd30fb0ce73f1249d122559232b4970ee70afb23c5802edeb144bd80029d8a5754107cec75bbd53956c00"}, 0xd8) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) 09:03:56 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x40) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x10000000, 0x0, 0x8, 0x0, 0x7}) mlockall(0x1) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x800, 0x0) ioctl$VIDIOC_OVERLAY(r1, 0x4004560e, &(0x7f0000000040)=0x5b2) r2 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000140)={&(0x7f0000000080)=[0x100000000], 0x1, 0xf80, 0x80000000, 0x3, 0x7fff, 0x7, {0x7, 0x7f, 0x2, 0x7ff, 0x5, 0x0, 0x1c4, 0x2, 0xfd, 0x5, 0x4f35, 0x7, 0x3, 0x40800000000000, "598eeee9cd26b4d4d38794ce8761a5eab581db4b0371cad292acc5c03fabd89b"}}) ptrace$cont(0x1f, r0, 0x0, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0)=r0, 0x12) 09:03:56 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b53200000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:03:56 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b53700000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:03:56 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000000)={'teql0\x00', {0x2, 0x0, @dev}}) ioctl$KVM_RUN(r2, 0xae80, 0x7e) 09:03:56 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b52b00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:03:56 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5bd00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:03:56 executing program 4: io_setup(0x41000000000003, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x5450, 0x0) 09:03:56 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000000)={'teql0\x00', {0x2, 0x0, @dev}}) ioctl$KVM_RUN(r2, 0xae80, 0x81000000) 09:03:56 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5b200000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) [ 760.617449] Unknown ioctl 1074025998 09:03:57 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe000000]}, 0x10) 09:03:57 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000400), 0x32e}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000081, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000cfd000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0xffffffffffffffe0, 0x200) write$P9_RREADLINK(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="160000001701000d002e2f66696c65302f6669f96530"], 0x16) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r1) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x7ff, &(0x7f0000000240)=0x0) io_cancel(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x4, r1, &(0x7f0000000340)="df5d65e0b3f5f79d3c7041c8cb7dbdf7e969d7a849a7743f1772992e845518f3abfa8d5c74626bf466af954b249513e90fca7a4db987183faf27e1fbb469de8ac6a87ef19060ca42121ce7dde3d763eaf838a2bfa616d2dab82a712f22032c401c985b96f065329ded83c2f37865da857277c52d", 0x74, 0x8, 0x0, 0x1, 0xffffffffffffff9c}, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000d80)={@in, 0x0, 0x8, 0x0, "4dbd3b0988e17b2d1d331c69872a9dda1d6a64edcd1cd30fb0ce73f1249d122559232b4970ee70afb23c5802edeb144bd80029d8a5754107cec75bbd53956c00"}, 0xd8) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) 09:03:57 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b53400000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:03:59 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20000000001b) ptrace$cont(0x18, r0, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x5, 0x3, &(0x7f0000001240)=[{&(0x7f0000000140)="0fba0a01ffee2a8e6ff77e65b62e4151e7300156201705d919246db5a006bb35692dade3eb8e4c8f90b3f4525ab3561f68efc081a5490eb1974864bfea5140cf64dcf7b0d149c58b50f4dd9b0cbe88f9df2d2e06bc4f80d037497f0b3c62ac5e1f7de3164d38feacb268eeabf30eac4f6c937d933e6e23a29fd59f40f6b6a41e534b9bf71c2586dd4a168e52f730fb3d90dc305f767f7073b3433f7c6a346176d4c279540e2c903a49c0516b858b41fe7c25b8202730bda1cf99a56afc7a347e7e79e76bb9a7dc1c58040d3688e204e3", 0xd0, 0x2}, {&(0x7f0000000080)="ff7e446573ce50bd0f1657148587170e8f4ef3ebf34ff4730be308d2a474920e759e731b45de8c278d46a9984bd6269e76a02daca177df11d5d24d10735e23", 0x3f, 0x1}, {&(0x7f0000000240)="d2f561eb2db6c7144c839a7d46eab879f91d814f4121c4bd491473ea173cc16cc93e9b45e59e6e52141ff9688feb4c259113f730ce226e5349d070d11b244d00b2dbbf52bd0a92bd7c65e89c0f1e74891837e1c45e5933aa9ac404865fb9bd407eb0675354cf731e4c87f63957a16c0cd7d27ce5a10cc0c42dcf0577d303402220a4830b40e86461cf462bd409aadfccde61f13b3102b9e20c566dad50a3af9b863d78a906495c73b69699d98b29ff0ecec1b4e584b9e6c1b3b66bc14862858e63e26d84f206f3d12fb87cd4cfce21221dbb4a44d39e7930a10d05464a8f522b782d839121d5863765b51746b828b73ee927585b219062f9c72d48802c90c3fb05cefaa3f902e446e6b7b46769ce3ac2fcad41655cf88959c01243d9281e86f801da2969234df16b10fafa1ac7bdb2236b303b41a6adb9861ea1018ed20de1facb6223b23acf215d7ed73f675081da7c4103c2f054132ba9c2557e0c0ac5be7b444da10e724244c1f62a55b87bb11470969d195614d575bc2cfd1f3f9d178cbd4ca73758dc51dd0a89b81ffa556e10feaa1a83b13a46a5b4e29f7e745415e741783c816e1e4850f2e1b808d69cfb97bd47d5aa0b279987ca9758356e78cb1fb5b2ec14ff807cd60b48900082509a5ab58aa07349b5527d7242a36cbf144b38568493900dbd27aca5c0dc57c698b615dd6c77a9a84942fcb7f50685b0eb2325327368a6d1438d490ad6e3854d8e6318a5ffe9aea88c23a2ac85e636f8cddc9c8b7f0cc49979e27fa068506037c51b6e7a6b0cbd313cc8c1847986986d360c9b3e4af876e5daf284e02594412f3a7484c10ba03571c3ad2e44435edf69b85dfcac72a3eff0a71b27772c5dd3c4f7c23eb799c69de33037ff8ed66a146cf43c1dddae32e3fef4832789dc2566ae2aea3d1ed144d7057b4ba526daf98a3b1fa36ec2d96a6d40bccc032219ca3c8e92c89fff795901dfc851f2ebb6e63f6790593c156eaf29fedb9ab8d4528d928d10e5d8f7882fd2b50c404003da4d08d38590bc7a5a0dacb33219b34cb96d777669f31716b775cec20f770ab9fc2e89a76947519b1ae521aff2a5b5b34d8ee011daea31f3f3274d2a8b294efdc041a4ceaf13f17b886d6da1af7ff5d26501ba05c6eeffba46ca509737f31221ae6e97abc71747e7a8ef9edf07c2ff263991cc5196ed4b8566a35498753deb4b0d6e146ebffe6f8a9006432e73a8f414fcf7c64838f220f95ab3084ce93075e7897037fbe37dba3f92c230c13021a21088d184db29a75f890ee9738aacae0a452adeb339bc0ce40880f5f611d59da923fe1a61dbbcf91fb0c69c5ac154e776c67897d746535144e44d1a6874220d13e9150b9eba19a4c9d3b387053ed35057e4d171cd2fa49ca3259ebf87af07e94acabcfa485e42968f6794debfe6fad8cd95ec38e1cb8c5135905339e4ed0a6069eb72040525a300059971c4f149497a704d0b83fd59ddfaa0e4e00827cda76135978ec0c3f56809c97b1cfbb722f32cf23775d2c1ce50ff44834dd7d70ebfe499d3fd05342f61dcf4b45e5198e722037af42dbf42b874bc20bfed0c749725bf47c12e93bba3d1d8a36e733eaed05216547afa32f09325d47ea0051f4c822e68d1de38eaa7fc1751f8264c50f46c89f2a51c96213ebae8c5e5aa8285ce4e7c318e2fda6c0deead40cef0a9b566b9bf03e2ec81dd831938b8a69154b58d02dc7b5fa3244b5cce099109ddaaeafe98ab219be9532a7893f7368277059786fac1fada340a3720f719e1bb746976c503faac1025c346356701b15869d1021f7cb3fefae66029c674942b50aeea5519ad3efc4b20d2b16c957edf1673489ac2cce4014ec3da9d100e3eb5f12813b3be330ee86510e59794498625842389c8afe93ca779aca4ec482bc26816fcf91c99e785c99e950187ad9e77b3780f9980018b8dd7b6c8830dd01ca3a6af13e73a3600c074bc0703d3616bb6c2542bdce1df5e4f47e8b97bb538b781248ec56a56b68475418a7f4ccf956f135e38a015ea30fb2f8918dfae6372d4a8344a4c4dd61d448b687c9c9eeedacdec1ccb5ef6ede4da61b417dee44725bb0c59b201455d0176325263e9135b46404cc3d19ba0daac2eba4e3224bad706a13a57c09061792132a8cb400512be70dc04feea3b6a60879aa0a3d00e3f2421f16121611f052cc3736329c5737e387019c5d80f9dc952c93bba51e5612c706c853948b2c9fb4dd8961d3be61f35a7cdb5abe1db90e89b62c51d59b2210a2df5d7e0158d190249afa9c2093d66e586b8d57cf7f96935de09a348efb5109a06ac509f7c4cead48ac94b05fe24c24b8166ad16438a901c0e08de61f60b4ac8c7c9ca747f3e70279303d38b427e5d8c3d8489b6c6a8dc9c426475680f14888580fef64b081397f2aed252ffa97e459ef01ce790c8f33858c26d4303d32aab305a92aba5908b3f9ca5bd36f0b62e1211d4db4b908bf9b72091df30df03309bd3bb575e9244ea1eeb95473620606ac945f991ef672001421630c79e6337fb1a711fad1e1dd2ee93f1d119479d829051ebc33e5aaa08b2b6d4932ea0eec3cce9bedb0779abcfb6b988c7eb745c563b388ca40364bcbbbfb76181479a90f86ff157569fe79666564506ae9e5d722d7f75684094f788397e5f1b21c562a8bcf09e90abfa4c00cca5e3be4e8c48a0940f87c2069b2b30b5f095849757ad4d54c2ff605c8fa463086c9e43da4217c6c606f0e15d114ff0f8a3c739d67d407a05ef234ad46846f1ccc2a2f9362aea3e06a4160f321f75a9c418ac17f4395f29b67202536f0dbf8e40dcdb728fc22eb8bfdb2d7f91c5486df9bc67207c030d7dd970a9c7498b5c6f1f50640dd716557169837d6a682a6bbdcae500081b9176bf3940182cb8ce3a23b26c4f1834745306e0d499094cec9a3ae931e480d6ab7bfbb5617499117e4bb45c09f813d60961f251ace045051b533d7c6a579435f5a5c38f7bf61093463dbb7c4c213083b3f065d1fd82b0c833a3e581a2c0a58e483e01423bbe9a8a31f518e958848cde94288b6d2f6fd600c5c0250f6a6e358889469a86f53bf72f8cd573e27febe25d2d74e93373f7a72e113a863e995539a69f5f7078e8111ed734f1657d12a510e8803f4ab76bd4a903a9e43eeb36f88003d972d9f4173f1dbb82bef2f6aeec37e13f3f5e4e78bd83b91c240319d1f8e97b6d2424c40aa4f5485b39c8ab6ae3fb244f8e4ffc37fce74cd2422318fceda7724c7e6486f209fd685f7674d062d7aeda6e90203d7fdf0949a05f0217eac41285787826318c04f39bf7922ac528ce893e0c9c3229c87249755c0fd6ad142a8af306e96523ec809c9d63ad98279a56ecdb6b16062d58c1f0a282ae5dbdbe6251f821172760eb6fa15de65176d3159491bfd5e6c192942781d9e4dcfdcba02c18ba7f82ec5857ee4add7a718fdcc9f23620fde69dd6bf82e0fb934991329ae06c2af7be6c5925cb4e4615a8a1dc839f03d704128defee5151b2cebd2ae4dc2dc6d54a29fc3a55fb80a450aab1e4cef5470c4c7a06e97bd946b9e6b274e28b33848e8f8d93204ed919125e802c70b715d22c9233eb2bb5ec0106984c326c73a3b97864ca933f2081d14f93c40ee6baf523d15c8b85099c013b1dde093b8c7d7acce83a9746923fd24e16082e9fdff25d53d5b33037015f0c95b8e3658ce72d484a8c4b8a75a2d390bbd5d2cc2e26122102a0487753e8a057e9c70820787d28a3727e522a4f46468579bedca660c90cd796c64b28f8fbfaf4bb8ef8203aa7b7966a3d3bd19c22062e390024983807c3b303211c71d498399cf36631b7eefa335d282bc6c07519cccf1526384ec5de53cb64201b5c8f6adbd59481eafa29439d292d4c160554c9ae89db83a8e7a78368680c5afed6962caa2cfc456576b91b53047dd053e600fc247208d28e5a95f3cd6e90b10278c00718f5072b4de5bec5c5f0bb728c03acd43dd3c336f8fec94411838b3ab7ae81ff13c9847b34d1af45de3bf9fc4435809d48b9bdbedbd0ffea79b45b0b2898e6bf50c38c6b3a0c4771d8dcd8c0f9d8f542a55455f1f2ac10f6ca286d9a1b9b87ac9fbadc8e17f5e42a13ba934f1fadfd45f19ec0483d7df0db54d77ee00f7268ce254fce191ddebd4b8e1f5c0e3e715a8400ee8fb32023e6627641d476d96dfa649450a3960ffa464c324ea6090b8195c118d5395614c9df895120399342cdeecedabc7197d4960b8440a5c3863742bd7ada7d337bd261ce3ed82ee80333d797e8f13062bf5fa5b247b080238bddea2fee1af50a76b7f552830e89257bb7f1bdbf7e056e9c1b208c30d43a99886f6fd1e6d3663c1cd3eec14265c9c8bf8419f29b258e8692f323e2a672d859d663b3e9d7fb936ed525e6b57e3a254745764a1efb768f72a3714fb28b1dfd42ea98bbb834986ad5ebeb677cfe86ab096bf4e404aa2ea75bed3d2518849a84a0d164afdaa72e700a6f5225db9e20378cf0dba5b79a462dbb9e52790a6d5520bfb9785605a8a17466d648bdbeb0a9e1f4103f7672b99095a77318ad0a13abc0ce20014f10cef4502575623d21596e34eeef815e6a3518019c42768d46082cc49f8bbe91133453537b4d3d3560185bd76b0eae303eb86f960c2c9b0d0986d4426b24d4cffa9e162a30875898ad76fab3a240fdb183688b0d5b3b2ea5ef86e037b5eb3b2d0a8a8e942ca6eae1fee0fb385ab4e5ffdaadbc67e82617fc325e6b9315dec5d9e3a12400122e7a9ba64b0f7e3358acfadf9304f7d9d34bde020882b8f69b2c7747436e7f6201fe064380f9aeaf456359c3d029a09523d0aa2d42ef421d956ea1b8417ef2de53ec07692a0825be577fe5aeee71b3eb3f41026bb9da1a33d0255b42005303eb976f52638422b02ce7515f15556b2edfa0e38f2e968c82a2ede934b8180de5879a1f29a3d43b185aeabb88fbb089d0de3c6a4768351402840d9c7fa35cd4d84adac067689bdfaba4aefd26603984216d982cfb81ef37b8e6aa8008b43ea7fe492d4f826f7fc7a9b94592cf338feebac040829fe5e0c4a0bcaec192729c3dc56470040e2e41a71acaf7b92afbe447ff2c003df6653e86bebe92f6a379b52bf0e2bb87e53a0a8d549649b65dc1d4d187bf71d42de256cc33091143dbe8fa880e6e90c89d611192a733ad8de936c548dc1b7e218b3617ba92371eb53540963765bc681292ec920bb702a2af613cded00485d277ceaedc0361fb220b69bda981df881025f780a5df225faa1b4456b88fc6a75de622dd8181649bc5a30a93aec04119ca085f8eb54195ed97d2eddfe7bf68d3c5bf38ad3d59dce9be9996302a209440316246e6896ca0f25fb35419ea8990779c53cad5bdbc9e641d0402ce02adeaf8b656eaab2ad02bc82520f2c145d44e7261da59951b4096c9bb94a29e28df142f237ea4f95314b3903e0c2cc88b9eda07dbfd4b165a0546a58889cc5f4f38c24d6a369e0ec116f2cd6dc2355be84b371c7ec8916c0f4df9796b18b0fcd8fe010f180981a3dc096f7306c2c6437408e4499d35b824424847936fdb9773c4597483065f1f6b325014471c1d8fe2fcfd1f8cd46545f158252195c77b920261dee232ff6d1d1abd5a37b9a81cebfcc1a05bb3d3ef2800025dd5bd8c216287c438f1c7a56429a2d73031aafe1f66dbbd4e5565ea7436a17df75e2b5c388b2e5dd99ebcc0cc2863b563183469a44784a1dd0cd38233cdffc0a3a07018baf5546dee7527e7eeb74ff76ee986b57c19583a308c8bdb46848038ac73", 0x1000}], 0x0, &(0x7f00000012c0)={[{@utf8='utf8'}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@norock='norock'}, {@dmode={'dmode', 0x3d, 0x80000001}}, {@nocompress='nocompress'}, {@norock='norock'}, {@unhide='unhide'}, {@nocompress='nocompress'}], [{@fsuuid={'fsuuid', 0x3d, {[0x3d, 0x61, 0x65, 0x35, 0x7f, 0x37, 0x33, 0x66], 0x2d, [0x37, 0x7f, 0x63, 0x77], 0x2d, [0x35, 0x65, 0x77, 0x30], 0x2d, [0x61, 0x67, 0x37], 0x2d, [0x66, 0x30, 0x77, 0x62, 0x7f, 0x77, 0x62, 0x7d]}}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}]}) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x10000000, 0x0, 0x8, 0x0, 0x7}) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 09:03:59 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000000)={'teql0\x00', {0x2, 0x0, @dev}}) ioctl$KVM_RUN(r2, 0xae80, 0xb010000) 09:03:59 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5b800000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:03:59 executing program 4: io_setup(0x41000000000003, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046207, 0x0) 09:03:59 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000]}, 0x10) 09:03:59 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000400), 0x32e}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000081, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000cfd000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0xffffffffffffffe0, 0x200) write$P9_RREADLINK(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="160000001701000d002e2f66696c65302f6669f96530"], 0x16) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r1) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x7ff, &(0x7f0000000240)=0x0) io_cancel(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x4, r1, &(0x7f0000000340)="df5d65e0b3f5f79d3c7041c8cb7dbdf7e969d7a849a7743f1772992e845518f3abfa8d5c74626bf466af954b249513e90fca7a4db987183faf27e1fbb469de8ac6a87ef19060ca42121ce7dde3d763eaf838a2bfa616d2dab82a712f22032c401c985b96f065329ded83c2f37865da857277c52d", 0x74, 0x8, 0x0, 0x1, 0xffffffffffffff9c}, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000d80)={@in, 0x0, 0x8, 0x0, "4dbd3b0988e17b2d1d331c69872a9dda1d6a64edcd1cd30fb0ce73f1249d122559232b4970ee70afb23c5802edeb144bd80029d8a5754107cec75bbd53956c00"}, 0xd8) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) [ 762.984447] binder: BINDER_SET_CONTEXT_MGR already set 09:03:59 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4000, 0x104) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000140)={0x0, 0x9, 0x81, 0x3, 0x9d3a, 0x5, 0x80, 0x0, {0x0, @in6={{0xa, 0x4e21, 0xf47, @loopback, 0x1}}, 0x9, 0x6, 0x8, 0x8, 0x100000001}}, &(0x7f0000000040)=0xb0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000080)={r2, 0x80000001}, &(0x7f0000000200)=0x8) tkill(r0, 0x20000000001b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x10000000, 0x0, 0x8, 0x0, 0x7}) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) [ 763.022530] binder: 1672:1677 ioctl 40046207 0 returned -16 09:03:59 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b57b00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:03:59 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7a88510]}, 0x10) 09:03:59 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000000)={'teql0\x00', {0x2, 0x0, @dev}}) ioctl$KVM_RUN(r2, 0xae80, 0x1300) 09:03:59 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b54e00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:03:59 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b52f00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:03:59 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000000)={'teql0\x00', {0x2, 0x0, @dev}}) ioctl$KVM_RUN(r2, 0xae80, 0xa00000000000000) 09:04:00 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5c700000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:04:00 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5a100000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:04:00 executing program 4: io_setup(0x41000000000003, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40049409, 0x0) 09:04:00 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000000)={'teql0\x00', {0x2, 0x0, @dev}}) ioctl$KVM_RUN(r2, 0xae80, 0x2e00000000000000) 09:04:00 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000000)={'teql0\x00', {0x2, 0x0, @dev}}) ioctl$KVM_RUN(r2, 0xae80, 0xe00) 09:04:02 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b53d00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:04:02 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe]}, 0x10) 09:04:02 executing program 3: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f00000002c0)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f00000000c0)={r1, r0, r1}, 0xfffffffffffffffe, 0xf9ffffff, 0x0) getpeername(0xffffffffffffff9c, &(0x7f00000008c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff}}, &(0x7f0000000940)=0x80) bind$netlink(r2, &(0x7f0000000980)={0x10, 0x0, 0x25dfdbff, 0x40080}, 0xc) 09:04:02 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x10000000, 0x0, 0x8, 0x0, 0x7}) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 09:04:02 executing program 4: io_setup(0x41000000000003, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0xc018620b, 0x0) 09:04:02 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000000)={'teql0\x00', {0x2, 0x0, @dev}}) ioctl$KVM_RUN(r2, 0xae80, 0x26) 09:04:02 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5a700000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 09:04:02 executing program 3: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x40100, 0x0) setsockopt$inet6_dccp_buf(r0, 0x21, 0x8c, &(0x7f0000000080)="2ac658122538c710d3f68f18854f22b352832842d47878e607692f609592d5e7d9c668c7899f5a706d6d03b56bec3336d3c74297ce3135ba03c2c2a27e1b06cfe77ea1b5a5e64ade62b3e5e708619a4df244c334151ebe301a5c48b8d155f70e545b7ba4f55601674e76a132b3ff5be98efe2151a98d81637b6efb7b8b74ca28f83c8dbebb1cd1fdc70be7765acfa9fac56a6eddf865d3ab198828f4278b94be441c9eabe57ac722a1a5c9bd1cdfe0a82602bb2c1ced27043c975d46d7f8a721930e5fa6a6543df4627a5478136875ef8c6ba551fca1c8", 0xd7) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000000080), &(0x7f0000000240), &(0x7f0000000200), &(0x7f0000000380)) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) open(&(0x7f0000000580)='./file0\x00', 0x2, 0x5) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000480)={0x0}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r0, 0x4010641c, &(0x7f0000000540)={r5, &(0x7f00000004c0)=""/124}) write$sndseq(r0, &(0x7f0000000300)=[{0x80a, 0x6, 0xba70, 0xc1b1, @tick=0x1, {0x7, 0x10}, {0x20, 0x1}, @note={0x401, 0x9, 0x7, 0xfff, 0x1}}, {0xd3ce, 0x7, 0x2000000020000, 0x2, @time, {0xffffffff, 0x9}, {0x6, 0xffffffff}, @control={0x5, 0xbc, 0x200}}, {0x0, 0x7e37, 0xff, 0x2, @time={r1, r2+10000000}, {0x40, 0xfffffffffffffffb}, {0x4, 0xcc0}, @result={0x200}}, {0x1, 0xe72, 0x6, 0x101, @time={r3, r4+10000000}, {0x5, 0x3}, {0x101, 0x6}, @addr={0x797, 0x3ff}}, {0x80000000, 0x9, 0x40, 0x0, @tick=0xfffffffffffffff9, {0x4, 0x101}, {0x7, 0x3f}, @connect={{0x8000, 0xff}, {0xd9, 0x3}}}, {0x800, 0xae4f, 0xb492, 0x3, @tick=0x4, {0xeb0b, 0x2}, {0x2, 0x5}, @connect={{0x1, 0x5}, {0xfff, 0x3}}}, {0x1, 0x3ff, 0xffffffff, 0x7, @tick=0x3, {0x40, 0x4577}, {0x7f, 0xfe}, @quote={{0x9, 0x6}, 0x6, &(0x7f0000000280)={0x7, 0x5, 0x9, 0x40, @tick=0x40, {0x2, 0xdfa}, {0x1, 0x6}, @control={0x9, 0x5, 0xfffffffffffffffc}}}}, {0xfe9e, 0x3, 0x4, 0x8001, @time={0x77359400}, {0x3, 0x1}, {0x4, 0x2}, @quote={{0x100000001, 0x4}, 0x2, &(0x7f00000002c0)={0xfffffffffffff801, 0xfff, 0xfffffffffffffff8, 0x7, @tick=0x4, {0x4, 0x9}, {0x81, 0x3}, @control={0x7, 0x7f044428, 0x9}}}}], 0x180) [ 766.303581] binder: 1748:1755 ioctl c018620b 0 returned -14 [ 766.333999] binder: 1748:1763 ioctl c018620b 0 returned -14 09:04:02 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500]}, 0x10) 09:04:02 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000000)={'teql0\x00', {0x2, 0x0, @dev}}) ioctl$KVM_RUN(r2, 0xae80, 0xd000000) 09:04:02 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b54c00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) [ 766.539825] ================================================================== [ 766.547449] BUG: KASAN: use-after-free in _free_event+0x49a/0x1660 [ 766.547464] Write of size 4 at addr ffff8881ccb120e0 by task syz-executor3/1775 [ 766.547468] [ 766.547484] CPU: 1 PID: 1775 Comm: syz-executor3 Not tainted 4.20.0-rc4+ #138 [ 766.547497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 766.561243] Call Trace: [ 766.561265] dump_stack+0x244/0x39d [ 766.561297] ? dump_stack_print_info.cold.1+0x20/0x20 [ 766.561311] ? printk+0xa7/0xcf [ 766.561325] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 766.561350] print_address_description.cold.7+0x9/0x1ff [ 766.561372] kasan_report.cold.8+0x242/0x309 [ 766.608706] ? _free_event+0x49a/0x1660 [ 766.612701] check_memory_region+0x13e/0x1b0 [ 766.617106] kasan_check_write+0x14/0x20 [ 766.621164] _free_event+0x49a/0x1660 [ 766.624963] ? kasan_check_read+0x11/0x20 [ 766.629111] ? ring_buffer_attach+0x840/0x840 [ 766.633612] ? __perf_remove_from_context+0x1ec/0x470 [ 766.638814] ? kasan_check_write+0x14/0x20 [ 766.643068] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 766.647999] ? event_function_call+0x343/0x600 [ 766.652597] ? wait_for_completion+0x8a0/0x8a0 [ 766.657242] ? event_sched_out.isra.98+0xdf0/0xdf0 [ 766.662197] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 766.667737] free_event+0xb4/0x180 [ 766.671289] ? _free_event+0x1660/0x1660 [ 766.675363] perf_event_release_kernel+0x7d4/0x10e0 [ 766.680389] ? put_event+0x60/0x60 [ 766.683936] ? find_held_lock+0x36/0x1c0 [ 766.688005] ? locks_remove_file+0x3c1/0x5c0 [ 766.692439] ? kasan_check_read+0x11/0x20 [ 766.696586] ? do_raw_spin_unlock+0xa7/0x330 [ 766.701006] ? locks_check_ctx_file_list+0xdd/0x120 [ 766.706032] ? locks_remove_file+0x3c6/0x5c0 [ 766.710442] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 766.715976] ? ima_file_free+0x132/0x650 [ 766.720040] ? fsnotify_first_mark+0x350/0x350 [ 766.724622] ? ima_file_check+0x130/0x130 [ 766.728771] ? fsnotify+0xef0/0xef0 [ 766.732413] ? perf_event_release_kernel+0x10e0/0x10e0 [ 766.737692] perf_release+0x37/0x50 [ 766.741329] __fput+0x385/0xa30 [ 766.744627] ? get_max_files+0x20/0x20 [ 766.748511] ? trace_hardirqs_on+0xbd/0x310 [ 766.752849] ? kasan_check_read+0x11/0x20 [ 766.757001] ? task_work_run+0x1af/0x2a0 [ 766.761063] ? trace_hardirqs_off_caller+0x310/0x310 [ 766.766175] ____fput+0x15/0x20 [ 766.769453] task_work_run+0x1e8/0x2a0 [ 766.773342] ? task_work_cancel+0x240/0x240 [ 766.777660] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 766.783193] ? switch_task_namespaces+0x9d/0xd0 [ 766.787866] do_exit+0x1ad6/0x26d0 [ 766.791404] ? __put_cred+0x28c/0x360 [ 766.795227] ? mm_update_next_owner+0x990/0x990 [ 766.799893] ? prepare_creds+0x4d0/0x4d0 [ 766.803973] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 766.809512] ? do_coredump+0x477/0x4001 [ 766.813498] ? unwind_get_return_address+0x61/0xa0 [ 766.818427] ? __save_stack_trace+0x8d/0xf0 [ 766.822759] ? dump_align+0xa0/0xa0 [ 766.826437] ? save_stack+0xa9/0xd0 [ 766.830062] ? save_stack+0x43/0xd0 [ 766.833690] ? __kasan_slab_free+0x102/0x150 [ 766.838115] ? kasan_slab_free+0xe/0x10 [ 766.842086] ? kmem_cache_free+0x83/0x290 [ 766.846233] ? __sigqueue_free.part.29+0x74/0x90 [ 766.850987] ? __dequeue_signal+0x530/0x7d0 [ 766.855326] ? dequeue_signal+0xbd/0x630 [ 766.859385] ? get_signal+0x3ec/0x1980 [ 766.863269] ? do_signal+0x9c/0x21c0 [ 766.866992] ? exit_to_usermode_loop+0x2e5/0x380 [ 766.871748] ? prepare_exit_to_usermode+0x342/0x3b0 [ 766.876763] ? trace_hardirqs_off+0xb8/0x310 [ 766.881190] ? kasan_check_read+0x11/0x20 [ 766.885355] ? do_raw_spin_unlock+0xa7/0x330 [ 766.889778] ? trace_hardirqs_on+0x310/0x310 [ 766.894214] ? zap_class+0x640/0x640 [ 766.897943] ? __lock_is_held+0xb5/0x140 [ 766.902008] ? __sigqueue_free.part.29+0x74/0x90 [ 766.906762] ? zap_class+0x640/0x640 [ 766.910507] ? __sigqueue_free.part.29+0x74/0x90 [ 766.915264] ? rcu_read_lock_sched_held+0x14f/0x180 [ 766.920296] ? kmem_cache_free+0x24f/0x290 [ 766.924534] ? __sigqueue_free.part.29+0x74/0x90 [ 766.929330] ? find_held_lock+0x36/0x1c0 [ 766.933410] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 766.938948] ? proc_coredump_connector+0x4f8/0x630 [ 766.943877] ? proc_comm_connector+0x520/0x520 [ 766.948658] do_group_exit+0x177/0x440 [ 766.952550] ? __ia32_sys_exit+0x50/0x50 [ 766.956622] get_signal+0x8b0/0x1980 [ 766.960345] ? ptrace_notify+0x130/0x130 [ 766.964417] ? force_sig_info+0x281/0x310 [ 766.968588] ? force_sigsegv+0x3d/0x110 [ 766.972576] ? signal_setup_done+0xbb/0x2f0 [ 766.976895] ? set_current_blocked+0x40/0x40 [ 766.981310] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 766.986844] ? __send_signal+0xa10/0x1bb0 [ 766.990987] ? kasan_check_read+0x11/0x20 [ 766.995136] do_signal+0x9c/0x21c0 [ 766.998679] ? prepare_signal+0xe50/0xe50 [ 767.002832] ? check_preemption_disabled+0x48/0x280 [ 767.007854] ? setup_sigcontext+0x7d0/0x7d0 [ 767.012198] ? find_held_lock+0x36/0x1c0 [ 767.016261] ? exit_to_usermode_loop+0x8c/0x380 [ 767.020940] ? exit_to_usermode_loop+0x8c/0x380 [ 767.025625] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 767.030221] ? trace_hardirqs_on+0xbd/0x310 [ 767.034548] ? prepare_exit_to_usermode+0x342/0x3b0 [ 767.039570] ? trace_hardirqs_on+0xbd/0x310 [ 767.043899] exit_to_usermode_loop+0x2e5/0x380 [ 767.048498] ? __bpf_trace_sys_exit+0x30/0x30 [ 767.052994] ? trace_hardirqs_off_caller+0xbb/0x310 [ 767.058022] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 767.062885] prepare_exit_to_usermode+0x342/0x3b0 [ 767.067728] ? trace_event_raw_event_sys_enter+0x700/0x700 [ 767.073367] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 767.078386] ? general_protection+0x8/0x30 [ 767.082626] retint_user+0x8/0x18 [ 767.086077] RIP: 0033:0x457575 [ 767.089535] Code: 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 0f 83 cb b3 fb ff 66 2e 0f 1f 84 00 00 00 00 00 48 85 ff 41 57 4d 89 cf 41 56 41 [ 767.108436] RSP: 002b:0000000020000080 EFLAGS: 00010217 [ 767.113813] RAX: 0000000000000000 RBX: 0000000000000005 RCX: 0000000000457569 [ 767.121078] RDX: 0000000020000240 RSI: 0000000020000080 RDI: 0000000000000000 [ 767.128346] RBP: 000000000072bf00 R08: 0000000020000380 R09: 0000000000000000 [ 767.135611] R10: 0000000020000200 R11: 0000000000000246 R12: 00007f8a0a0eb6d4 [ 767.142875] R13: 00000000004bdaa6 R14: 00000000004cce30 R15: 00000000ffffffff [ 767.150175] [ 767.151844] Allocated by task 1770: [ 767.155467] save_stack+0x43/0xd0 [ 767.158925] kasan_kmalloc+0xc7/0xe0 [ 767.162652] kasan_slab_alloc+0x12/0x20 [ 767.166626] kmem_cache_alloc_node+0x144/0x730 [ 767.171206] copy_process+0x2026/0x87a0 [ 767.175183] _do_fork+0x1cb/0x11d0 [ 767.178732] __x64_sys_clone+0xbf/0x150 [ 767.182703] do_syscall_64+0x1b9/0x820 [ 767.186592] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 767.191766] [ 767.193408] Freed by task 1770: [ 767.196685] save_stack+0x43/0xd0 [ 767.200219] __kasan_slab_free+0x102/0x150 [ 767.204453] kasan_slab_free+0xe/0x10 [ 767.208249] kmem_cache_free+0x83/0x290 [ 767.212230] free_task+0x16e/0x1f0 [ 767.215769] copy_process+0x1dcc/0x87a0 [ 767.219743] _do_fork+0x1cb/0x11d0 [ 767.223288] __x64_sys_clone+0xbf/0x150 [ 767.227285] do_syscall_64+0x1b9/0x820 [ 767.231202] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 767.236397] [ 767.238022] The buggy address belongs to the object at ffff8881ccb120c0 [ 767.238022] which belongs to the cache task_struct(65:syz3) of size 6080 [ 767.251547] The buggy address is located 32 bytes inside of [ 767.251547] 6080-byte region [ffff8881ccb120c0, ffff8881ccb13880) [ 767.263419] The buggy address belongs to the page: [ 767.268346] page:ffffea000732c480 count:1 mapcount:0 mapping:ffff8881d45951c0 index:0x0 compound_mapcount: 0 [ 767.278310] flags: 0x2fffc0000010200(slab|head) [ 767.283011] raw: 02fffc0000010200 ffffea0006e20788 ffffea0005f40208 ffff8881d45951c0 [ 767.290927] raw: 0000000000000000 ffff8881ccb120c0 0000000100000001 ffff888182726780 [ 767.298796] page dumped because: kasan: bad access detected [ 767.304495] page->mem_cgroup:ffff888182726780 [ 767.308973] [ 767.310589] Memory state around the buggy address: [ 767.315515] ffff8881ccb11f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 767.322870] ffff8881ccb12000: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 767.330226] >ffff8881ccb12080: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb 09:04:03 executing program 4: io_setup(0x41000000000003, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x5452, 0x0) [ 767.337573] ^ [ 767.344059] ffff8881ccb12100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 767.351427] ffff8881ccb12180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 767.358772] ================================================================== [ 767.366123] Disabling lock debugging due to kernel taint [ 767.377602] attempt to access beyond end of device 09:04:03 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5b000000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) [ 767.395151] loop3: rw=1, want=4497, limit=112 09:04:03 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1085a827]}, 0x10) [ 767.425054] Kernel panic - not syncing: panic_on_warn set ... [ 767.430973] CPU: 1 PID: 1775 Comm: syz-executor3 Tainted: G B 4.20.0-rc4+ #138 [ 767.439632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 767.449014] Call Trace: [ 767.451670] dump_stack+0x244/0x39d [ 767.455345] ? dump_stack_print_info.cold.1+0x20/0x20 [ 767.460568] panic+0x2ad/0x55c [ 767.463762] ? add_taint.cold.5+0x16/0x16 [ 767.467925] ? preempt_schedule+0x4d/0x60 [ 767.472060] ? ___preempt_schedule+0x16/0x18 [ 767.476453] ? trace_hardirqs_on+0xb4/0x310 [ 767.480761] kasan_end_report+0x47/0x4f [ 767.484715] kasan_report.cold.8+0x76/0x309 [ 767.489022] ? _free_event+0x49a/0x1660 [ 767.492984] check_memory_region+0x13e/0x1b0 [ 767.497403] kasan_check_write+0x14/0x20 [ 767.501465] _free_event+0x49a/0x1660 [ 767.505254] ? kasan_check_read+0x11/0x20 [ 767.509392] ? ring_buffer_attach+0x840/0x840 [ 767.513874] ? __perf_remove_from_context+0x1ec/0x470 [ 767.519062] ? kasan_check_write+0x14/0x20 [ 767.523301] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 767.528217] ? event_function_call+0x343/0x600 [ 767.532805] ? wait_for_completion+0x8a0/0x8a0 [ 767.537384] ? event_sched_out.isra.98+0xdf0/0xdf0 [ 767.542308] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 767.547829] free_event+0xb4/0x180 [ 767.551353] ? _free_event+0x1660/0x1660 [ 767.555400] perf_event_release_kernel+0x7d4/0x10e0 [ 767.560401] ? put_event+0x60/0x60 [ 767.563937] ? find_held_lock+0x36/0x1c0 [ 767.568000] ? locks_remove_file+0x3c1/0x5c0 [ 767.572396] ? kasan_check_read+0x11/0x20 [ 767.576530] ? do_raw_spin_unlock+0xa7/0x330 [ 767.580937] ? locks_check_ctx_file_list+0xdd/0x120 [ 767.585938] ? locks_remove_file+0x3c6/0x5c0 [ 767.590334] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 767.595854] ? ima_file_free+0x132/0x650 [ 767.599902] ? fsnotify_first_mark+0x350/0x350 [ 767.604467] ? ima_file_check+0x130/0x130 [ 767.608598] ? fsnotify+0xef0/0xef0 [ 767.612213] ? perf_event_release_kernel+0x10e0/0x10e0 [ 767.617474] perf_release+0x37/0x50 [ 767.621088] __fput+0x385/0xa30 [ 767.624355] ? get_max_files+0x20/0x20 [ 767.628227] ? trace_hardirqs_on+0xbd/0x310 [ 767.632536] ? kasan_check_read+0x11/0x20 [ 767.636672] ? task_work_run+0x1af/0x2a0 [ 767.640726] ? trace_hardirqs_off_caller+0x310/0x310 [ 767.645855] ____fput+0x15/0x20 [ 767.649124] task_work_run+0x1e8/0x2a0 [ 767.653022] ? task_work_cancel+0x240/0x240 [ 767.657338] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 767.662858] ? switch_task_namespaces+0x9d/0xd0 [ 767.667514] do_exit+0x1ad6/0x26d0 [ 767.671038] ? __put_cred+0x28c/0x360 [ 767.674831] ? mm_update_next_owner+0x990/0x990 [ 767.679483] ? prepare_creds+0x4d0/0x4d0 [ 767.683529] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 767.689053] ? do_coredump+0x477/0x4001 [ 767.693035] ? unwind_get_return_address+0x61/0xa0 [ 767.697954] ? __save_stack_trace+0x8d/0xf0 [ 767.702259] ? dump_align+0xa0/0xa0 [ 767.705879] ? save_stack+0xa9/0xd0 [ 767.709490] ? save_stack+0x43/0xd0 [ 767.713099] ? __kasan_slab_free+0x102/0x150 [ 767.717503] ? kasan_slab_free+0xe/0x10 [ 767.721464] ? kmem_cache_free+0x83/0x290 [ 767.725595] ? __sigqueue_free.part.29+0x74/0x90 [ 767.730336] ? __dequeue_signal+0x530/0x7d0 [ 767.734639] ? dequeue_signal+0xbd/0x630 [ 767.738681] ? get_signal+0x3ec/0x1980 [ 767.742583] ? do_signal+0x9c/0x21c0 [ 767.746304] ? exit_to_usermode_loop+0x2e5/0x380 [ 767.751046] ? prepare_exit_to_usermode+0x342/0x3b0 [ 767.756047] ? trace_hardirqs_off+0xb8/0x310 [ 767.760437] ? kasan_check_read+0x11/0x20 [ 767.764569] ? do_raw_spin_unlock+0xa7/0x330 [ 767.768960] ? trace_hardirqs_on+0x310/0x310 [ 767.773369] ? zap_class+0x640/0x640 [ 767.777074] ? __lock_is_held+0xb5/0x140 [ 767.781135] ? __sigqueue_free.part.29+0x74/0x90 [ 767.785887] ? zap_class+0x640/0x640 [ 767.789602] ? __sigqueue_free.part.29+0x74/0x90 [ 767.794346] ? rcu_read_lock_sched_held+0x14f/0x180 [ 767.799346] ? kmem_cache_free+0x24f/0x290 [ 767.803564] ? __sigqueue_free.part.29+0x74/0x90 [ 767.808309] ? find_held_lock+0x36/0x1c0 [ 767.812360] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 767.817907] ? proc_coredump_connector+0x4f8/0x630 [ 767.822818] ? proc_comm_connector+0x520/0x520 [ 767.827384] do_group_exit+0x177/0x440 [ 767.831285] ? __ia32_sys_exit+0x50/0x50 [ 767.835353] get_signal+0x8b0/0x1980 [ 767.839052] ? ptrace_notify+0x130/0x130 [ 767.843097] ? force_sig_info+0x281/0x310 [ 767.847233] ? force_sigsegv+0x3d/0x110 [ 767.851202] ? signal_setup_done+0xbb/0x2f0 [ 767.855511] ? set_current_blocked+0x40/0x40 [ 767.859915] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 767.865451] ? __send_signal+0xa10/0x1bb0 [ 767.869598] ? kasan_check_read+0x11/0x20 [ 767.873729] do_signal+0x9c/0x21c0 [ 767.877254] ? prepare_signal+0xe50/0xe50 [ 767.881394] ? check_preemption_disabled+0x48/0x280 [ 767.886393] ? setup_sigcontext+0x7d0/0x7d0 [ 767.890698] ? find_held_lock+0x36/0x1c0 [ 767.894745] ? exit_to_usermode_loop+0x8c/0x380 [ 767.899399] ? exit_to_usermode_loop+0x8c/0x380 [ 767.904053] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 767.908619] ? trace_hardirqs_on+0xbd/0x310 [ 767.912924] ? prepare_exit_to_usermode+0x342/0x3b0 [ 767.917926] ? trace_hardirqs_on+0xbd/0x310 [ 767.922236] exit_to_usermode_loop+0x2e5/0x380 [ 767.926807] ? __bpf_trace_sys_exit+0x30/0x30 [ 767.931298] ? trace_hardirqs_off_caller+0xbb/0x310 [ 767.936310] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 767.941208] prepare_exit_to_usermode+0x342/0x3b0 [ 767.946039] ? trace_event_raw_event_sys_enter+0x700/0x700 [ 767.951648] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 767.956480] ? general_protection+0x8/0x30 [ 767.960704] retint_user+0x8/0x18 [ 767.964139] RIP: 0033:0x457575 [ 767.967333] Code: 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 0f 83 cb b3 fb ff 66 2e 0f 1f 84 00 00 00 00 00 48 85 ff 41 57 4d 89 cf 41 56 41 [ 767.986219] RSP: 002b:0000000020000080 EFLAGS: 00010217 [ 767.991565] RAX: 0000000000000000 RBX: 0000000000000005 RCX: 0000000000457569 [ 767.998817] RDX: 0000000020000240 RSI: 0000000020000080 RDI: 0000000000000000 [ 768.006069] RBP: 000000000072bf00 R08: 0000000020000380 R09: 0000000000000000 [ 768.013325] R10: 0000000020000200 R11: 0000000000000246 R12: 00007f8a0a0eb6d4 [ 768.020577] R13: 00000000004bdaa6 R14: 00000000004cce30 R15: 00000000ffffffff [ 768.028868] Kernel Offset: disabled [ 768.032492] Rebooting in 86400 seconds..