#\x00', 0x0, 0x0)
write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0x10000007c)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
dup2(r1, r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)

08:11:49 executing program 2:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)

08:11:49 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x700000000000000]}, 0x3c)

08:11:49 executing program 0:
r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0)
write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0x10000007c)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
dup2(r1, r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)

08:11:49 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x800000000000000]}, 0x3c)

08:11:49 executing program 2:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)

08:11:49 executing program 5:
mknod(&(0x7f0000000200)='./bus\x00', 0x100c, 0x0)
r0 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0)
write$FUSE_DIRENTPLUS(r0, &(0x7f0000000640)={0x10}, 0x10)
r1 = memfd_create(&(0x7f0000000180)='^posix_acl_accessp\x04p1vk\xee\x05\xdaY\xd4\x8d\x13\x06\xce\\\x89\x18R\xa9{\x05#\a\xf6$\x0fcR\xc8\x15\a\x92]kL\xf5\x1f\x8b\xb9`0d1\x1aA\xc9\x16\n4:\x12\xf1\x82Z/\x02\xb0\x92w\xdd\xbfm\x1e\x12Gh\xbd\x8a\xcej\x19\n\x81\x86\xc9\xdb\xa3G\xa9\xa1W', 0x0)
write$P9_RATTACH(r0, &(0x7f0000000080)={0x14}, 0xfffffcde)
splice(r0, 0x0, r1, 0x0, 0x1000000007ff, 0x0)
r2 = socket(0x2000000000000010, 0x3, 0x0)
ioctl(r2, 0x1000008912, &(0x7f0000000280)="c0dca5055e0bcfec7be070")

08:11:49 executing program 0:
r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0)
write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0x10000007c)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
dup2(r1, r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)

08:11:49 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x900000000000000]}, 0x3c)

08:11:49 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0xe, &(0x7f0000000300)={&(0x7f00000009c0)={0x14, 0x29, 0x7}, 0x14}}, 0x0)

[  558.018176][T23729] IPVS: ftp: loaded support on port[0] = 21
[  558.139968][T23729] chnl_net:caif_netlink_parms(): no params data found
[  558.172715][T23729] bridge0: port 1(bridge_slave_0) entered blocking state
[  558.180011][T23729] bridge0: port 1(bridge_slave_0) entered disabled state
[  558.188141][T23729] device bridge_slave_0 entered promiscuous mode
[  558.196662][T23729] bridge0: port 2(bridge_slave_1) entered blocking state
[  558.203773][T23729] bridge0: port 2(bridge_slave_1) entered disabled state
[  558.211731][T23729] device bridge_slave_1 entered promiscuous mode
[  558.230863][T23729] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  558.241233][T23729] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  558.260014][T23729] team0: Port device team_slave_0 added
[  558.267251][T23729] team0: Port device team_slave_1 added
[  558.326114][T23729] device hsr_slave_0 entered promiscuous mode
[  558.374775][T23729] device hsr_slave_1 entered promiscuous mode
[  558.688360][T23729] bridge0: port 2(bridge_slave_1) entered blocking state
[  558.695473][T23729] bridge0: port 2(bridge_slave_1) entered forwarding state
[  558.702778][T23729] bridge0: port 1(bridge_slave_0) entered blocking state
[  558.709935][T23729] bridge0: port 1(bridge_slave_0) entered forwarding state
[  558.868485][T23729] 8021q: adding VLAN 0 to HW filter on device bond0
[  558.882151][T21076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  558.891072][T21076] bridge0: port 1(bridge_slave_0) entered disabled state
[  558.902211][T21076] bridge0: port 2(bridge_slave_1) entered disabled state
[  558.910673][T21076] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[  559.042440][T23729] 8021q: adding VLAN 0 to HW filter on device team0
[  559.053089][T23178] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  559.062274][T23178] bridge0: port 1(bridge_slave_0) entered blocking state
[  559.069440][T23178] bridge0: port 1(bridge_slave_0) entered forwarding state
[  559.207419][ T8815] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  559.216221][ T8815] bridge0: port 2(bridge_slave_1) entered blocking state
[  559.223416][ T8815] bridge0: port 2(bridge_slave_1) entered forwarding state
[  559.234504][T21076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  559.243353][T21076] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  559.253746][T21076] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  559.390338][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  559.400703][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  559.409294][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  559.418088][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  559.428951][T21076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  559.437767][T21076] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  559.573715][T23729] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  559.596573][T23729] 8021q: adding VLAN 0 to HW filter on device batadv0
08:11:52 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0xa00000000000000]}, 0x3c)

08:11:52 executing program 2:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)

08:11:52 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000000)={'TPROXY\x00'}, &(0x7f00000000c0)=0x1e)

08:11:52 executing program 0:
r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f0000057fa0)=[{}, {}], 0x10000007c)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
dup2(r1, r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)

08:11:52 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:11:52 executing program 5:
mknod(&(0x7f0000000200)='./bus\x00', 0x100c, 0x0)
r0 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0)
write$FUSE_DIRENTPLUS(r0, &(0x7f0000000640)={0x10}, 0x10)
r1 = memfd_create(&(0x7f0000000180)='^posix_acl_accessp\x04p1vk\xee\x05\xdaY\xd4\x8d\x13\x06\xce\\\x89\x18R\xa9{\x05#\a\xf6$\x0fcR\xc8\x15\a\x92]kL\xf5\x1f\x8b\xb9`0d1\x1aA\xc9\x16\n4:\x12\xf1\x82Z/\x02\xb0\x92w\xdd\xbfm\x1e\x12Gh\xbd\x8a\xcej\x19\n\x81\x86\xc9\xdb\xa3G\xa9\xa1W', 0x0)
write$P9_RATTACH(r0, &(0x7f0000000080)={0x14}, 0xfffffcde)
splice(r0, 0x0, r1, 0x0, 0x1000000007ff, 0x0)
socket(0x2000000000000010, 0x3, 0x0)

08:11:53 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0xb00000000000000]}, 0x3c)

08:11:53 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000000)={'TPROXY\x00'}, &(0x7f00000000c0)=0x1e)

08:11:53 executing program 0:
r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f0000057fa0)=[{}, {}], 0x10000007c)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
dup2(r1, r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)

08:11:53 executing program 2:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)

08:11:53 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0xc00000000000000]}, 0x3c)

08:11:53 executing program 4:
r0 = socket$inet6(0xa, 0x2, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070")
open(&(0x7f0000000180)='./file0\x00', 0x40, 0x0)
clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
nanosleep(&(0x7f0000000080)={0x0, 0x1c9c380}, &(0x7f0000000100))
execve(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480), 0x0)

08:11:53 executing program 2:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)

08:11:53 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0xd00000000000000]}, 0x3c)

08:11:53 executing program 0:
r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f0000057fa0)=[{}, {}], 0x10000007c)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
dup2(r1, r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)

08:11:53 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0xe00000000000000]}, 0x3c)

08:11:54 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:11:54 executing program 2:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)

08:11:54 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0xf00000000000000]}, 0x3c)

08:11:54 executing program 0:
r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, 0x0, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
dup2(r1, r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)

08:11:54 executing program 5:
mknod(&(0x7f0000000200)='./bus\x00', 0x100c, 0x0)
r0 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0)
write$FUSE_DIRENTPLUS(r0, &(0x7f0000000640)={0x10}, 0x10)
r1 = memfd_create(&(0x7f0000000180)='^posix_acl_accessp\x04p1vk\xee\x05\xdaY\xd4\x8d\x13\x06\xce\\\x89\x18R\xa9{\x05#\a\xf6$\x0fcR\xc8\x15\a\x92]kL\xf5\x1f\x8b\xb9`0d1\x1aA\xc9\x16\n4:\x12\xf1\x82Z/\x02\xb0\x92w\xdd\xbfm\x1e\x12Gh\xbd\x8a\xcej\x19\n\x81\x86\xc9\xdb\xa3G\xa9\xa1W', 0x0)
write$P9_RATTACH(r0, &(0x7f0000000080)={0x14}, 0xfffffcde)
splice(r0, 0x0, r1, 0x0, 0x1000000007ff, 0x0)
socket(0x2000000000000010, 0x3, 0x0)

08:11:54 executing program 4:
r0 = socket$inet6(0xa, 0x2, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070")
open(&(0x7f0000000180)='./file0\x00', 0x40, 0x0)
clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
nanosleep(&(0x7f0000000080)={0x0, 0x1c9c380}, &(0x7f0000000100))
execve(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480), 0x0)

08:11:54 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x1000000000000000]}, 0x3c)

[  561.135473][    T7] device bridge_slave_1 left promiscuous mode
[  561.141737][    T7] bridge0: port 2(bridge_slave_1) entered disabled state
08:11:54 executing program 2:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
write$eventfd(0xffffffffffffffff, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)

[  561.195783][    T7] device bridge_slave_0 left promiscuous mode
[  561.212364][    T7] bridge0: port 1(bridge_slave_0) entered disabled state
08:11:54 executing program 0:
r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, 0x0, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
dup2(r1, r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)

[  561.278046][    T7] device bridge_slave_1 left promiscuous mode
[  561.293702][    T7] bridge0: port 2(bridge_slave_1) entered disabled state
08:11:54 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:11:54 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x1100000000000000]}, 0x3c)

[  561.382809][    T7] device bridge_slave_0 left promiscuous mode
[  561.394812][    T7] bridge0: port 1(bridge_slave_0) entered disabled state
08:11:54 executing program 0:
r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, 0x0, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
dup2(r1, r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)

08:11:54 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x1200000000000000]}, 0x3c)

08:11:54 executing program 2:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)

08:11:54 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x1300000000000000]}, 0x3c)

08:11:54 executing program 0:
r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f0000057fa0)=[{}], 0x18)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
dup2(r1, r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)

08:11:55 executing program 5:
mknod(&(0x7f0000000200)='./bus\x00', 0x100c, 0x0)
r0 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0)
write$FUSE_DIRENTPLUS(r0, &(0x7f0000000640)={0x10}, 0x10)
r1 = memfd_create(&(0x7f0000000180)='^posix_acl_accessp\x04p1vk\xee\x05\xdaY\xd4\x8d\x13\x06\xce\\\x89\x18R\xa9{\x05#\a\xf6$\x0fcR\xc8\x15\a\x92]kL\xf5\x1f\x8b\xb9`0d1\x1aA\xc9\x16\n4:\x12\xf1\x82Z/\x02\xb0\x92w\xdd\xbfm\x1e\x12Gh\xbd\x8a\xcej\x19\n\x81\x86\xc9\xdb\xa3G\xa9\xa1W', 0x0)
write$P9_RATTACH(r0, &(0x7f0000000080)={0x14}, 0xfffffcde)
splice(r0, 0x0, r1, 0x0, 0x1000000007ff, 0x0)
socket(0x2000000000000010, 0x3, 0x0)

[  565.697537][    T7] device hsr_slave_1 left promiscuous mode
[  565.749660][    T7] device hsr_slave_0 left promiscuous mode
[  565.800615][    T7] team0 (unregistering): Port device team_slave_1 removed
[  565.812440][    T7] team0 (unregistering): Port device team_slave_0 removed
[  565.823918][    T7] bond0 (unregistering): Releasing backup interface bond_slave_1
[  565.860672][    T7] bond0 (unregistering): Releasing backup interface bond_slave_0
[  565.952187][    T7] bond0 (unregistering): Released all slaves
[  566.117626][    T7] device hsr_slave_1 left promiscuous mode
[  566.179971][    T7] device hsr_slave_0 left promiscuous mode
[  566.247990][    T7] team0 (unregistering): Port device team_slave_1 removed
[  566.263539][    T7] team0 (unregistering): Port device team_slave_0 removed
[  566.274465][    T7] bond0 (unregistering): Releasing backup interface bond_slave_1
[  566.338390][    T7] bond0 (unregistering): Releasing backup interface bond_slave_0
[  566.432544][    T7] bond0 (unregistering): Released all slaves
08:11:59 executing program 4:
unshare(0x0)
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/mISDNtimer\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
readv(r0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/97, 0x61}], 0x1)

08:11:59 executing program 2:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)
write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)

08:11:59 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x1400000000000000]}, 0x3c)

08:11:59 executing program 0:
r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f0000057fa0)=[{}], 0x18)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
dup2(r1, r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)

[  566.553143][T23847] IPVS: ftp: loaded support on port[0] = 21
[  566.909204][T23847] chnl_net:caif_netlink_parms(): no params data found
[  566.969591][T23847] bridge0: port 1(bridge_slave_0) entered blocking state
[  566.976966][T23847] bridge0: port 1(bridge_slave_0) entered disabled state
[  566.986057][T23847] device bridge_slave_0 entered promiscuous mode
[  566.995663][T23847] bridge0: port 2(bridge_slave_1) entered blocking state
[  567.002955][T23847] bridge0: port 2(bridge_slave_1) entered disabled state
[  567.011657][T23847] device bridge_slave_1 entered promiscuous mode
[  567.038981][T23847] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  567.050672][T23847] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  567.091223][T23847] team0: Port device team_slave_0 added
[  567.103254][T23847] team0: Port device team_slave_1 added
[  567.187295][T23847] device hsr_slave_0 entered promiscuous mode
[  567.224660][T23847] device hsr_slave_1 entered promiscuous mode
[  567.287080][T23847] bridge0: port 2(bridge_slave_1) entered blocking state
[  567.294271][T23847] bridge0: port 2(bridge_slave_1) entered forwarding state
[  567.301680][T23847] bridge0: port 1(bridge_slave_0) entered blocking state
[  567.308840][T23847] bridge0: port 1(bridge_slave_0) entered forwarding state
[  567.365546][T23847] 8021q: adding VLAN 0 to HW filter on device bond0
[  567.382103][T23178] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  567.392636][T23178] bridge0: port 1(bridge_slave_0) entered disabled state
[  567.412518][T23178] bridge0: port 2(bridge_slave_1) entered disabled state
[  567.436851][T23847] 8021q: adding VLAN 0 to HW filter on device team0
[  567.451357][T23178] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  567.460388][T23178] bridge0: port 1(bridge_slave_0) entered blocking state
[  567.467579][T23178] bridge0: port 1(bridge_slave_0) entered forwarding state
[  567.523242][ T8769] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  567.533152][ T8769] bridge0: port 2(bridge_slave_1) entered blocking state
[  567.540307][ T8769] bridge0: port 2(bridge_slave_1) entered forwarding state
[  567.580257][ T8769] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  567.598175][T23178] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  567.607833][T23178] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  567.620063][T23178] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  567.638354][T23178] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  567.651202][T23178] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  567.666968][T23847] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  567.679336][T23847] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  567.689454][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  567.698962][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  567.726455][T23847] 8021q: adding VLAN 0 to HW filter on device batadv0
08:12:00 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:12:00 executing program 2:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)
write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)

08:12:00 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040))
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000))
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0)

08:12:00 executing program 5:
mknod(&(0x7f0000000200)='./bus\x00', 0x100c, 0x0)
r0 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0)
write$FUSE_DIRENTPLUS(r0, &(0x7f0000000640)={0x10}, 0x10)
r1 = memfd_create(&(0x7f0000000180)='^posix_acl_accessp\x04p1vk\xee\x05\xdaY\xd4\x8d\x13\x06\xce\\\x89\x18R\xa9{\x05#\a\xf6$\x0fcR\xc8\x15\a\x92]kL\xf5\x1f\x8b\xb9`0d1\x1aA\xc9\x16\n4:\x12\xf1\x82Z/\x02\xb0\x92w\xdd\xbfm\x1e\x12Gh\xbd\x8a\xcej\x19\n\x81\x86\xc9\xdb\xa3G\xa9\xa1W', 0x0)
write$P9_RATTACH(r0, &(0x7f0000000080)={0x14}, 0xfffffcde)
splice(r0, 0x0, r1, 0x0, 0x1000000007ff, 0x0)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000280)="c0dca5055e0bcfec7be070")

08:12:00 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x1500000000000000]}, 0x3c)

08:12:00 executing program 0:
r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f0000057fa0)=[{}], 0x18)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
dup2(r1, r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)

08:12:01 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x1600000000000000]}, 0x3c)

08:12:01 executing program 2:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)
write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
mount$fuse(0x0, 0x0, &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)

08:12:01 executing program 0:
r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f0000057fa0)=[{}], 0x18)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
dup2(r1, r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)

08:12:01 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x1800000000000000]}, 0x3c)

08:12:01 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040))
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000))
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0)

08:12:01 executing program 2:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)
write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
mount$fuse(0x0, 0x0, &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)

08:12:01 executing program 0:
r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f0000057fa0)=[{}], 0x18)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
dup2(r1, r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)

08:12:01 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:12:01 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x4000000000000000]}, 0x3c)

08:12:01 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040))
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000))
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0)

08:12:01 executing program 5:
mknod(&(0x7f0000000200)='./bus\x00', 0x100c, 0x0)
r0 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0)
write$FUSE_DIRENTPLUS(r0, &(0x7f0000000640)={0x10}, 0x10)
r1 = memfd_create(&(0x7f0000000180)='^posix_acl_accessp\x04p1vk\xee\x05\xdaY\xd4\x8d\x13\x06\xce\\\x89\x18R\xa9{\x05#\a\xf6$\x0fcR\xc8\x15\a\x92]kL\xf5\x1f\x8b\xb9`0d1\x1aA\xc9\x16\n4:\x12\xf1\x82Z/\x02\xb0\x92w\xdd\xbfm\x1e\x12Gh\xbd\x8a\xcej\x19\n\x81\x86\xc9\xdb\xa3G\xa9\xa1W', 0x0)
write$P9_RATTACH(r0, &(0x7f0000000080)={0x14}, 0xfffffcde)
splice(r0, 0x0, r1, 0x0, 0x1000000007ff, 0x0)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000280)="c0dca5055e0bcfec7be070")

08:12:01 executing program 2:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)
write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
mount$fuse(0x0, 0x0, &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)

08:12:01 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x8001000000000000]}, 0x3c)

08:12:02 executing program 2:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)
write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)

08:12:02 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:12:02 executing program 0:
r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f0000057fa0)=[{}], 0x18)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
dup2(r1, r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)

08:12:02 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0xe4ffffff00000000]}, 0x3c)

08:12:02 executing program 4:
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x8, 0x209e20, 0x8000000001}, 0x2c)
perf_event_open(&(0x7f0000001600)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c)
bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x4, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c)

08:12:02 executing program 2:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)
write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)

08:12:02 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}, 0x3c)

08:12:02 executing program 0:
r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0x10000007c)
r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
dup2(r1, r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)

08:12:02 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x3]}, 0x3c)

08:12:02 executing program 4:
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x8, 0x209e20, 0x8000000001}, 0x2c)
perf_event_open(&(0x7f0000001600)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c)
bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x4, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c)

08:12:02 executing program 5:
mknod(&(0x7f0000000200)='./bus\x00', 0x100c, 0x0)
r0 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0)
write$FUSE_DIRENTPLUS(r0, &(0x7f0000000640)={0x10}, 0x10)
r1 = memfd_create(&(0x7f0000000180)='^posix_acl_accessp\x04p1vk\xee\x05\xdaY\xd4\x8d\x13\x06\xce\\\x89\x18R\xa9{\x05#\a\xf6$\x0fcR\xc8\x15\a\x92]kL\xf5\x1f\x8b\xb9`0d1\x1aA\xc9\x16\n4:\x12\xf1\x82Z/\x02\xb0\x92w\xdd\xbfm\x1e\x12Gh\xbd\x8a\xcej\x19\n\x81\x86\xc9\xdb\xa3G\xa9\xa1W', 0x0)
write$P9_RATTACH(r0, &(0x7f0000000080)={0x14}, 0xfffffcde)
splice(r0, 0x0, r1, 0x0, 0x1000000007ff, 0x0)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000280)="c0dca5055e0bcfec7be070")

08:12:02 executing program 2:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)
write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)

08:12:02 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4]}, 0x3c)

[  571.414535][T23985] IPVS: ftp: loaded support on port[0] = 21
[  571.607974][T23985] chnl_net:caif_netlink_parms(): no params data found
[  571.762603][T23985] bridge0: port 1(bridge_slave_0) entered blocking state
[  571.769829][T23985] bridge0: port 1(bridge_slave_0) entered disabled state
[  571.777972][T23985] device bridge_slave_0 entered promiscuous mode
[  571.905015][T23985] bridge0: port 2(bridge_slave_1) entered blocking state
[  571.912210][T23985] bridge0: port 2(bridge_slave_1) entered disabled state
[  571.920488][T23985] device bridge_slave_1 entered promiscuous mode
[  571.938376][T23985] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  571.949659][T23985] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  571.965646][    T7] device bridge_slave_1 left promiscuous mode
[  571.971894][    T7] bridge0: port 2(bridge_slave_1) entered disabled state
[  572.025379][    T7] device bridge_slave_0 left promiscuous mode
[  572.031558][    T7] bridge0: port 1(bridge_slave_0) entered disabled state
[  572.086262][    T7] device bridge_slave_1 left promiscuous mode
[  572.092515][    T7] bridge0: port 2(bridge_slave_1) entered disabled state
[  572.125498][    T7] device bridge_slave_0 left promiscuous mode
[  572.131697][    T7] bridge0: port 1(bridge_slave_0) entered disabled state
[  575.387496][    T7] device hsr_slave_1 left promiscuous mode
[  575.449843][    T7] device hsr_slave_0 left promiscuous mode
[  575.511236][    T7] team0 (unregistering): Port device team_slave_1 removed
[  575.522160][    T7] team0 (unregistering): Port device team_slave_0 removed
[  575.540662][    T7] bond0 (unregistering): Releasing backup interface bond_slave_1
[  575.571215][    T7] bond0 (unregistering): Releasing backup interface bond_slave_0
[  575.671566][    T7] bond0 (unregistering): Released all slaves
[  575.837890][    T7] device hsr_slave_1 left promiscuous mode
[  575.880158][    T7] device hsr_slave_0 left promiscuous mode
[  575.941390][    T7] team0 (unregistering): Port device team_slave_1 removed
[  575.953152][    T7] team0 (unregistering): Port device team_slave_0 removed
[  575.966213][    T7] bond0 (unregistering): Releasing backup interface bond_slave_1
[  576.011098][    T7] bond0 (unregistering): Releasing backup interface bond_slave_0
[  576.101848][    T7] bond0 (unregistering): Released all slaves
[  576.248091][T23985] team0: Port device team_slave_0 added
[  576.255101][T23985] team0: Port device team_slave_1 added
[  576.306264][T23985] device hsr_slave_0 entered promiscuous mode
[  576.334715][T23985] device hsr_slave_1 entered promiscuous mode
[  576.419587][T23985] 8021q: adding VLAN 0 to HW filter on device bond0
[  576.436949][T21076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  576.446018][T21076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  576.457744][T23985] 8021q: adding VLAN 0 to HW filter on device team0
[  576.474624][T21076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  576.483674][T21076] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  576.494575][T21076] bridge0: port 1(bridge_slave_0) entered blocking state
[  576.501660][T21076] bridge0: port 1(bridge_slave_0) entered forwarding state
[  576.510014][T21076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  576.518863][T21076] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  576.527397][T21076] bridge0: port 2(bridge_slave_1) entered blocking state
[  576.534499][T21076] bridge0: port 2(bridge_slave_1) entered forwarding state
[  576.542065][T21076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  576.550816][T21076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  576.559383][T21076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  576.568060][T21076] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  576.577101][T21076] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  576.585289][T21076] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  576.599103][T23178] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  576.608218][T23178] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  576.626830][T23985] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  576.638173][T23985] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  576.650478][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  576.659702][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  576.670106][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  576.688341][T23985] 8021q: adding VLAN 0 to HW filter on device batadv0
08:12:10 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:12:10 executing program 0:
r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0x10000007c)
r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
dup2(r1, r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)

08:12:10 executing program 4:
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x8, 0x209e20, 0x8000000001}, 0x2c)
perf_event_open(&(0x7f0000001600)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c)
bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x4, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c)

08:12:10 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x5]}, 0x3c)

08:12:10 executing program 2:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)
write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, 0x0)
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)

08:12:10 executing program 5:
mknod(&(0x7f0000000200)='./bus\x00', 0x100c, 0x0)
r0 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0)
write$FUSE_DIRENTPLUS(r0, &(0x7f0000000640)={0x10}, 0x10)
r1 = memfd_create(&(0x7f0000000180)='^posix_acl_accessp\x04p1vk\xee\x05\xdaY\xd4\x8d\x13\x06\xce\\\x89\x18R\xa9{\x05#\a\xf6$\x0fcR\xc8\x15\a\x92]kL\xf5\x1f\x8b\xb9`0d1\x1aA\xc9\x16\n4:\x12\xf1\x82Z/\x02\xb0\x92w\xdd\xbfm\x1e\x12Gh\xbd\x8a\xcej\x19\n\x81\x86\xc9\xdb\xa3G\xa9\xa1W', 0x0)
splice(r0, 0x0, r1, 0x0, 0x1000000007ff, 0x0)
r2 = socket(0x2000000000000010, 0x3, 0x0)
ioctl(r2, 0x1000008912, &(0x7f0000000280)="c0dca5055e0bcfec7be070")

08:12:10 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x6]}, 0x3c)

08:12:10 executing program 5:
mknod(&(0x7f0000000200)='./bus\x00', 0x100c, 0x0)
r0 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0)
write$FUSE_DIRENTPLUS(r0, &(0x7f0000000640)={0x10}, 0x10)
r1 = memfd_create(&(0x7f0000000180)='^posix_acl_accessp\x04p1vk\xee\x05\xdaY\xd4\x8d\x13\x06\xce\\\x89\x18R\xa9{\x05#\a\xf6$\x0fcR\xc8\x15\a\x92]kL\xf5\x1f\x8b\xb9`0d1\x1aA\xc9\x16\n4:\x12\xf1\x82Z/\x02\xb0\x92w\xdd\xbfm\x1e\x12Gh\xbd\x8a\xcej\x19\n\x81\x86\xc9\xdb\xa3G\xa9\xa1W', 0x0)
splice(r0, 0x0, r1, 0x0, 0x1000000007ff, 0x0)
r2 = socket(0x2000000000000010, 0x3, 0x0)
ioctl(r2, 0x1000008912, &(0x7f0000000280)="c0dca5055e0bcfec7be070")

08:12:10 executing program 2:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)
write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, 0x0)
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)

08:12:10 executing program 0:
r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0x10000007c)
r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
dup2(r1, r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)

08:12:10 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7]}, 0x3c)

08:12:10 executing program 4:
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x8, 0x209e20, 0x8000000001}, 0x2c)
perf_event_open(&(0x7f0000001600)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c)
bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x4, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c)

08:12:10 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:12:10 executing program 5:
mknod(&(0x7f0000000200)='./bus\x00', 0x100c, 0x0)
r0 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0)
write$FUSE_DIRENTPLUS(r0, &(0x7f0000000640)={0x10}, 0x10)
r1 = memfd_create(&(0x7f0000000180)='^posix_acl_accessp\x04p1vk\xee\x05\xdaY\xd4\x8d\x13\x06\xce\\\x89\x18R\xa9{\x05#\a\xf6$\x0fcR\xc8\x15\a\x92]kL\xf5\x1f\x8b\xb9`0d1\x1aA\xc9\x16\n4:\x12\xf1\x82Z/\x02\xb0\x92w\xdd\xbfm\x1e\x12Gh\xbd\x8a\xcej\x19\n\x81\x86\xc9\xdb\xa3G\xa9\xa1W', 0x0)
splice(r0, 0x0, r1, 0x0, 0x1000000007ff, 0x0)
r2 = socket(0x2000000000000010, 0x3, 0x0)
ioctl(r2, 0x1000008912, &(0x7f0000000280)="c0dca5055e0bcfec7be070")

08:12:10 executing program 2:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)
write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, 0x0)
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)

08:12:10 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x8]}, 0x3c)

08:12:10 executing program 4:
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect(r0, &(0x7f0000000380)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x71)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r1=>0x0})
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070")
sendmsg$can_bcm(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="0000000002000000000000000000000018987764ae00c61a72fa9169f832160aae010ef260c9415d0f8baea5dc5106fbaa79983c3bb4a963736a0600b9370fb1dc3ba9304dced163a7eb4787ef730fbcc25e105f0aabc667b218b34b52a2e91fa106c78137fb679d479f28a67a2a4b576e7a0e72ecbfd3e8ef63b7eeb973ea3ff58a79a0354cde0dc0349337fbf08476e652377de288ceda886139fadc23c634359ff0f986c568"], 0x1}}, 0x0)

08:12:10 executing program 0:
r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0x10000007c)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)

08:12:10 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x9]}, 0x3c)

08:12:10 executing program 5:
mknod(&(0x7f0000000200)='./bus\x00', 0x100c, 0x0)
r0 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0)
write$FUSE_DIRENTPLUS(r0, &(0x7f0000000640)={0x10}, 0x10)
write$P9_RATTACH(r0, &(0x7f0000000080)={0x14}, 0xfffffcde)
splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x1000000007ff, 0x0)
r1 = socket(0x2000000000000010, 0x3, 0x0)
ioctl(r1, 0x1000008912, &(0x7f0000000280)="c0dca5055e0bcfec7be070")

08:12:10 executing program 2:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)
write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)

08:12:10 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:12:11 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0xa]}, 0x3c)

08:12:11 executing program 2:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)
write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)

08:12:11 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0xb]}, 0x3c)

08:12:11 executing program 0:
r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0x10000007c)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)

08:12:11 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:12:11 executing program 2:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)
write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)

08:12:12 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$sndtimer(0x0, 0x0, 0x0)
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[])

08:12:12 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0xc]}, 0x3c)

08:12:12 executing program 2:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)
write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)

08:12:12 executing program 0:
r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0x10000007c)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)

08:12:12 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:12:12 executing program 5:
mknod(&(0x7f0000000200)='./bus\x00', 0x100c, 0x0)
r0 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0)
write$FUSE_DIRENTPLUS(r0, &(0x7f0000000640)={0x10}, 0x10)
write$P9_RATTACH(r0, &(0x7f0000000080)={0x14}, 0xfffffcde)
splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x1000000007ff, 0x0)
r1 = socket(0x2000000000000010, 0x3, 0x0)
ioctl(r1, 0x1000008912, &(0x7f0000000280)="c0dca5055e0bcfec7be070")

08:12:12 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0xd]}, 0x3c)

08:12:12 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0xe]}, 0x3c)

08:12:12 executing program 2:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)
write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)

08:12:12 executing program 0:
r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0x10000007c)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
dup2(r1, 0xffffffffffffffff)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)

08:12:13 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:12:13 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0xf]}, 0x3c)

08:12:13 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$sndtimer(0x0, 0x0, 0x0)
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

08:12:13 executing program 2:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)
write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)

08:12:13 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x10]}, 0x3c)

08:12:13 executing program 2:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)
write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(0x0, 0x9)

08:12:13 executing program 0:
r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0x10000007c)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
dup2(r1, 0xffffffffffffffff)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)

08:12:13 executing program 5:
mknod(&(0x7f0000000200)='./bus\x00', 0x100c, 0x0)
r0 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0)
write$FUSE_DIRENTPLUS(r0, &(0x7f0000000640)={0x10}, 0x10)
write$P9_RATTACH(r0, &(0x7f0000000080)={0x14}, 0xfffffcde)
splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x1000000007ff, 0x0)
r1 = socket(0x2000000000000010, 0x3, 0x0)
ioctl(r1, 0x1000008912, &(0x7f0000000280)="c0dca5055e0bcfec7be070")

08:12:13 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x11]}, 0x3c)

08:12:13 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070")

08:12:13 executing program 2:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)
write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(0x0, 0x9)

08:12:13 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:12:13 executing program 0:
r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0x10000007c)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
dup2(r1, 0xffffffffffffffff)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)

[  580.669101][T24163] FAT-fs (loop4): bogus number of reserved sectors
08:12:13 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x12]}, 0x3c)

[  580.718526][T24163] FAT-fs (loop4): Can't find a valid FAT filesystem
08:12:13 executing program 2:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)
write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(0x0, 0x9)

08:12:13 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)=0x300000000)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[])

08:12:13 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:12:14 executing program 0:
r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0x10000007c)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
dup2(r1, r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0)

08:12:14 executing program 2:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)
write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x0)

08:12:14 executing program 5:
mknod(&(0x7f0000000200)='./bus\x00', 0x100c, 0x0)
r0 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0)
r1 = memfd_create(&(0x7f0000000180)='^posix_acl_accessp\x04p1vk\xee\x05\xdaY\xd4\x8d\x13\x06\xce\\\x89\x18R\xa9{\x05#\a\xf6$\x0fcR\xc8\x15\a\x92]kL\xf5\x1f\x8b\xb9`0d1\x1aA\xc9\x16\n4:\x12\xf1\x82Z/\x02\xb0\x92w\xdd\xbfm\x1e\x12Gh\xbd\x8a\xcej\x19\n\x81\x86\xc9\xdb\xa3G\xa9\xa1W', 0x0)
write$P9_RATTACH(r0, &(0x7f0000000080)={0x14}, 0xfffffcde)
splice(r0, 0x0, r1, 0x0, 0x1000000007ff, 0x0)
r2 = socket(0x2000000000000010, 0x3, 0x0)
ioctl(r2, 0x1000008912, &(0x7f0000000280)="c0dca5055e0bcfec7be070")

08:12:14 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x13]}, 0x3c)

08:12:14 executing program 2:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)
write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x0)

08:12:14 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)=0x300000000)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[])

08:12:14 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:12:14 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x14]}, 0x3c)

08:12:14 executing program 2:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)
write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x0)

08:12:14 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070")
r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000180)=0x8)
write$cgroup_type(r1, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(r1, 0x3, 0x0, 0x10000408001)
write$binfmt_script(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="e7"], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000200)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78)
fallocate(r1, 0x3, 0x0, 0x80000003)

08:12:14 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x15]}, 0x3c)

08:12:14 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:12:16 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x16]}, 0x3c)

08:12:16 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000002c0)=ANY=[@ANYBLOB="050000000000000000000040050000a90000000000fa00000000e23f0003000001000000000000002560b700ff"])
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000009004"])

08:12:16 executing program 4:
r0 = getpid()
sched_setattr(r0, &(0x7f0000000180)={0x30, 0x0, 0x0, 0x0, 0x1, 0x800}, 0x0)
socket$alg(0x26, 0x5, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
r2 = shmget$private(0x0, 0x3000, 0x54000108, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_UNLOCK(r2, 0xc)
getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0)
ioctl$RTC_AIE_OFF(r1, 0x7002)
getsockopt$inet6_tcp_int(r1, 0x6, 0x8000000000018, &(0x7f0000000100), &(0x7f00000001c0)=0x4)
syncfs(r1)
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000340)='/proc/self/attr/current\x00', 0x2, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x6)
ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000300)=0x1)
keyctl$update(0x2, 0x0, 0x0, 0x0)

08:12:16 executing program 0:
r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0x10000007c)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
dup2(r1, r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0)

08:12:16 executing program 5:
mknod(&(0x7f0000000200)='./bus\x00', 0x100c, 0x0)
r0 = memfd_create(&(0x7f0000000180)='^posix_acl_accessp\x04p1vk\xee\x05\xdaY\xd4\x8d\x13\x06\xce\\\x89\x18R\xa9{\x05#\a\xf6$\x0fcR\xc8\x15\a\x92]kL\xf5\x1f\x8b\xb9`0d1\x1aA\xc9\x16\n4:\x12\xf1\x82Z/\x02\xb0\x92w\xdd\xbfm\x1e\x12Gh\xbd\x8a\xcej\x19\n\x81\x86\xc9\xdb\xa3G\xa9\xa1W', 0x0)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14}, 0xfffffcde)
splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x1000000007ff, 0x0)
r1 = socket(0x2000000000000010, 0x3, 0x0)
ioctl(r1, 0x1000008912, &(0x7f0000000280)="c0dca5055e0bcfec7be070")

08:12:16 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:12:16 executing program 5:
mknod(&(0x7f0000000200)='./bus\x00', 0x100c, 0x0)
r0 = memfd_create(&(0x7f0000000180)='^posix_acl_accessp\x04p1vk\xee\x05\xdaY\xd4\x8d\x13\x06\xce\\\x89\x18R\xa9{\x05#\a\xf6$\x0fcR\xc8\x15\a\x92]kL\xf5\x1f\x8b\xb9`0d1\x1aA\xc9\x16\n4:\x12\xf1\x82Z/\x02\xb0\x92w\xdd\xbfm\x1e\x12Gh\xbd\x8a\xcej\x19\n\x81\x86\xc9\xdb\xa3G\xa9\xa1W', 0x0)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14}, 0xfffffcde)
splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x1000000007ff, 0x0)
r1 = socket(0x2000000000000010, 0x3, 0x0)
ioctl(r1, 0x1000008912, &(0x7f0000000280)="c0dca5055e0bcfec7be070")

08:12:16 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x18]}, 0x3c)

08:12:16 executing program 5:
mknod(&(0x7f0000000200)='./bus\x00', 0x100c, 0x0)
r0 = memfd_create(&(0x7f0000000180)='^posix_acl_accessp\x04p1vk\xee\x05\xdaY\xd4\x8d\x13\x06\xce\\\x89\x18R\xa9{\x05#\a\xf6$\x0fcR\xc8\x15\a\x92]kL\xf5\x1f\x8b\xb9`0d1\x1aA\xc9\x16\n4:\x12\xf1\x82Z/\x02\xb0\x92w\xdd\xbfm\x1e\x12Gh\xbd\x8a\xcej\x19\n\x81\x86\xc9\xdb\xa3G\xa9\xa1W', 0x0)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14}, 0xfffffcde)
splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x1000000007ff, 0x0)
r1 = socket(0x2000000000000010, 0x3, 0x0)
ioctl(r1, 0x1000008912, &(0x7f0000000280)="c0dca5055e0bcfec7be070")

08:12:16 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x180]}, 0x3c)

08:12:16 executing program 4:
r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
write(r0, &(0x7f0000000040)="06", 0x1)
sendfile(r0, r0, &(0x7f0000001000), 0xffff)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={<r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000000c0)={0x0, 0x0}, 0x10)

08:12:16 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000002c0)=ANY=[@ANYBLOB="050000000000000000000040050000a90000000000fa00000000e23f0003000001000000000000002560b700ff"])
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000009004"])

08:12:16 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:12:16 executing program 5:
r0 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0)
r1 = memfd_create(&(0x7f0000000180)='^posix_acl_accessp\x04p1vk\xee\x05\xdaY\xd4\x8d\x13\x06\xce\\\x89\x18R\xa9{\x05#\a\xf6$\x0fcR\xc8\x15\a\x92]kL\xf5\x1f\x8b\xb9`0d1\x1aA\xc9\x16\n4:\x12\xf1\x82Z/\x02\xb0\x92w\xdd\xbfm\x1e\x12Gh\xbd\x8a\xcej\x19\n\x81\x86\xc9\xdb\xa3G\xa9\xa1W', 0x0)
write$P9_RATTACH(r0, &(0x7f0000000080)={0x14}, 0xfffffcde)
splice(r0, 0x0, r1, 0x0, 0x1000000007ff, 0x0)
r2 = socket(0x2000000000000010, 0x3, 0x0)
ioctl(r2, 0x1000008912, &(0x7f0000000280)="c0dca5055e0bcfec7be070")

08:12:17 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x300]}, 0x3c)

08:12:18 executing program 0:
r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0x10000007c)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
dup2(r1, r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0)

08:12:18 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:12:18 executing program 5:
r0 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0)
r1 = memfd_create(&(0x7f0000000180)='^posix_acl_accessp\x04p1vk\xee\x05\xdaY\xd4\x8d\x13\x06\xce\\\x89\x18R\xa9{\x05#\a\xf6$\x0fcR\xc8\x15\a\x92]kL\xf5\x1f\x8b\xb9`0d1\x1aA\xc9\x16\n4:\x12\xf1\x82Z/\x02\xb0\x92w\xdd\xbfm\x1e\x12Gh\xbd\x8a\xcej\x19\n\x81\x86\xc9\xdb\xa3G\xa9\xa1W', 0x0)
write$P9_RATTACH(r0, &(0x7f0000000080)={0x14}, 0xfffffcde)
splice(r0, 0x0, r1, 0x0, 0x1000000007ff, 0x0)
r2 = socket(0x2000000000000010, 0x3, 0x0)
ioctl(r2, 0x1000008912, &(0x7f0000000280)="c0dca5055e0bcfec7be070")

08:12:18 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x500]}, 0x3c)

08:12:18 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000002c0)=ANY=[@ANYBLOB="050000000000000000000040050000a90000000000fa00000000e23f0003000001000000000000002560b700ff"])
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000009004"])

08:12:18 executing program 4:
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0)
r0 = socket$pppoe(0x18, 0x1, 0x0)
r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vfio/vfio\x00', 0x101000, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000180), &(0x7f00000001c0)=0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = gettid()
migrate_pages(r2, 0x100000000, &(0x7f0000000000)=0x9, &(0x7f0000000080))
r3 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x3f, 0x101001)
perf_event_open(&(0x7f0000000200)={0x4, 0x70, 0x8, 0xe13, 0x0, 0x0, 0x0, 0x3ff, 0x48600, 0x7, 0x80, 0x7ff0, 0x3, 0x1, 0x7, 0x7e4, 0x6, 0x0, 0x4, 0x4, 0x7, 0x9, 0x7fffffff, 0x2f6e, 0x1, 0x783, 0x43, 0x2e, 0x0, 0x80000001, 0x3f, 0xffffffffffffffc0, 0x9, 0x6, 0x6145, 0x0, 0x0, 0xbf, 0x0, 0x0, 0x7, @perf_config_ext={0x100, 0x40000}, 0x0, 0x100000000, 0x8000, 0x1, 0x3, 0xf3eb, 0x42}, r2, 0xb, r3, 0xb)
ioctl$UI_BEGIN_FF_ERASE(r3, 0xc00c55ca, &(0x7f0000000100)={0xe, 0x582c, 0x3})
connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x2, @local, 'batadv0\x00'}}, 0x1e)
sendmmsg(r0, &(0x7f0000005b40), 0x40000000000014d, 0x0)
ioctl$VIDIOC_SUBDEV_G_SELECTION(r3, 0xc040563d, &(0x7f0000000280)={0x1, 0x0, 0x103, 0x3, {0x9, 0x80000000, 0x2, 0x7}})

08:12:18 executing program 5:
r0 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0)
r1 = memfd_create(&(0x7f0000000180)='^posix_acl_accessp\x04p1vk\xee\x05\xdaY\xd4\x8d\x13\x06\xce\\\x89\x18R\xa9{\x05#\a\xf6$\x0fcR\xc8\x15\a\x92]kL\xf5\x1f\x8b\xb9`0d1\x1aA\xc9\x16\n4:\x12\xf1\x82Z/\x02\xb0\x92w\xdd\xbfm\x1e\x12Gh\xbd\x8a\xcej\x19\n\x81\x86\xc9\xdb\xa3G\xa9\xa1W', 0x0)
write$P9_RATTACH(r0, &(0x7f0000000080)={0x14}, 0xfffffcde)
splice(r0, 0x0, r1, 0x0, 0x1000000007ff, 0x0)
r2 = socket(0x2000000000000010, 0x3, 0x0)
ioctl(r2, 0x1000008912, &(0x7f0000000280)="c0dca5055e0bcfec7be070")

08:12:18 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x600]}, 0x3c)

08:12:19 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000002c0)=ANY=[@ANYBLOB="050000000000000000000040050000a90000000000fa00000000e23f0003000001000000000000002560b700ff"])
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000009004"])

08:12:19 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:12:19 executing program 5:
mknod(0x0, 0x100c, 0x0)
r0 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0)
r1 = memfd_create(&(0x7f0000000180)='^posix_acl_accessp\x04p1vk\xee\x05\xdaY\xd4\x8d\x13\x06\xce\\\x89\x18R\xa9{\x05#\a\xf6$\x0fcR\xc8\x15\a\x92]kL\xf5\x1f\x8b\xb9`0d1\x1aA\xc9\x16\n4:\x12\xf1\x82Z/\x02\xb0\x92w\xdd\xbfm\x1e\x12Gh\xbd\x8a\xcej\x19\n\x81\x86\xc9\xdb\xa3G\xa9\xa1W', 0x0)
write$P9_RATTACH(r0, &(0x7f0000000080)={0x14}, 0xfffffcde)
splice(r0, 0x0, r1, 0x0, 0x1000000007ff, 0x0)
r2 = socket(0x2000000000000010, 0x3, 0x0)
ioctl(r2, 0x1000008912, &(0x7f0000000280)="c0dca5055e0bcfec7be070")

08:12:19 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x700]}, 0x3c)

08:12:20 executing program 4:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000240)={0x0, 0x3f, 0x0, 0x0, 0xffffffffffffffff})

08:12:20 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x900]}, 0x3c)

08:12:20 executing program 0:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/mISDNtimer\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000180))

08:12:20 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000009004"])

08:12:20 executing program 5:
mknod(0x0, 0x100c, 0x0)
r0 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0)
r1 = memfd_create(&(0x7f0000000180)='^posix_acl_accessp\x04p1vk\xee\x05\xdaY\xd4\x8d\x13\x06\xce\\\x89\x18R\xa9{\x05#\a\xf6$\x0fcR\xc8\x15\a\x92]kL\xf5\x1f\x8b\xb9`0d1\x1aA\xc9\x16\n4:\x12\xf1\x82Z/\x02\xb0\x92w\xdd\xbfm\x1e\x12Gh\xbd\x8a\xcej\x19\n\x81\x86\xc9\xdb\xa3G\xa9\xa1W', 0x0)
write$P9_RATTACH(r0, &(0x7f0000000080)={0x14}, 0xfffffcde)
splice(r0, 0x0, r1, 0x0, 0x1000000007ff, 0x0)
r2 = socket(0x2000000000000010, 0x3, 0x0)
ioctl(r2, 0x1000008912, &(0x7f0000000280)="c0dca5055e0bcfec7be070")

08:12:20 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:12:21 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0xa00]}, 0x3c)

08:12:21 executing program 4:
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_RESET(r0, 0x2401, 0x0)

08:12:21 executing program 5:
mknod(0x0, 0x100c, 0x0)
r0 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0)
r1 = memfd_create(&(0x7f0000000180)='^posix_acl_accessp\x04p1vk\xee\x05\xdaY\xd4\x8d\x13\x06\xce\\\x89\x18R\xa9{\x05#\a\xf6$\x0fcR\xc8\x15\a\x92]kL\xf5\x1f\x8b\xb9`0d1\x1aA\xc9\x16\n4:\x12\xf1\x82Z/\x02\xb0\x92w\xdd\xbfm\x1e\x12Gh\xbd\x8a\xcej\x19\n\x81\x86\xc9\xdb\xa3G\xa9\xa1W', 0x0)
write$P9_RATTACH(r0, &(0x7f0000000080)={0x14}, 0xfffffcde)
splice(r0, 0x0, r1, 0x0, 0x1000000007ff, 0x0)
r2 = socket(0x2000000000000010, 0x3, 0x0)
ioctl(r2, 0x1000008912, &(0x7f0000000280)="c0dca5055e0bcfec7be070")

08:12:21 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:12:21 executing program 0:

08:12:21 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000009004"])

08:12:21 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0xb00]}, 0x3c)

08:12:21 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_proto_private(0xffffffffffffffff, 0x0, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000400))
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0)
getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e23, @remote}}}, &(0x7f0000000180)=0x84)
getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000a80)=ANY=[@ANYBLOB="00100000be0c0b20db6061a1fd3443e546be86e7dc8d60f536f2b5261d205c7a95ebf7f98c4c677b4cbd07eb1ec662c5066bba64127653228974bacd7a7e88d4bec2760537b249dbbaed97b403516fe38fab9a3820d37e2e46f17f8841830fa251cb43c8e6e1feab58ac6000038a4b4cc846bfb00c70148eee054fbefce62d475f480c7ebe6e389f58a9aaad96da47a467b2bfbf3e589ca8b7fbd338b15a21e39a97c3b9d346f08588c57a078def6781f43a43217bb2ec9a2680c0d3882e4d4b27b12998193aa25c12423ea20a8a0a4489adec3c528fdcac8ef366f9dcd0af8529b6f2fce2da45a2c70527ef3fc2ce1129cebfbed6533576bc82f2637bd7e030a7c699c52d0b9c6b742aba34ea02ea43be0beed1d782f129bc4e49829ca6b319f2b6b3effde69a72bf448b84cc26b24f179b29a19a6b882c24ef4d35779370a176decc95ff16229bcaaf0eb8e84661762f21433a9131628c003255482d641908d2587bdafc9531b0b32491d084344da5877b8dae7808854399698f96759ad14ac7900e702546c0bbfeaca16add2dec4ce474481c40fcb8bb986a1d8687ce2e92795728ff20a5a875ead1f32e5e2c021e04789d6c1019e7462fa43357aa"], 0x0)
r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2)
stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000380))
r1 = memfd_create(&(0x7f0000000040)='-vboxnet0\x00', 0x4)
ftruncate(r1, 0x1000000)
sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

08:12:21 executing program 5:
mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0)
r1 = memfd_create(&(0x7f0000000180)='^posix_acl_accessp\x04p1vk\xee\x05\xdaY\xd4\x8d\x13\x06\xce\\\x89\x18R\xa9{\x05#\a\xf6$\x0fcR\xc8\x15\a\x92]kL\xf5\x1f\x8b\xb9`0d1\x1aA\xc9\x16\n4:\x12\xf1\x82Z/\x02\xb0\x92w\xdd\xbfm\x1e\x12Gh\xbd\x8a\xcej\x19\n\x81\x86\xc9\xdb\xa3G\xa9\xa1W', 0x0)
write$P9_RATTACH(r0, &(0x7f0000000080)={0x14}, 0xfffffcde)
splice(r0, 0x0, r1, 0x0, 0x1000000007ff, 0x0)
r2 = socket(0x2000000000000010, 0x3, 0x0)
ioctl(r2, 0x1000008912, &(0x7f0000000280)="c0dca5055e0bcfec7be070")

08:12:21 executing program 4:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r0)

08:12:21 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:12:21 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0xc00]}, 0x3c)

08:12:21 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000009004"])

08:12:21 executing program 4:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r0)

08:12:21 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0xd00]}, 0x3c)

08:12:21 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:12:21 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f00000002c0)=ANY=[@ANYBLOB="050000000000000000000040050000a90000000000fa00000000e23f0003000001000000000000002560b700ff"])
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000009004"])

08:12:21 executing program 4:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r0)

08:12:22 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0xe00]}, 0x3c)

08:12:22 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_proto_private(0xffffffffffffffff, 0x0, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000400))
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0)
getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e23, @remote}}}, &(0x7f0000000180)=0x84)
getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000a80)=ANY=[@ANYBLOB="00100000be0c0b20db6061a1fd3443e546be86e7dc8d60f536f2b5261d205c7a95ebf7f98c4c677b4cbd07eb1ec662c5066bba64127653228974bacd7a7e88d4bec2760537b249dbbaed97b403516fe38fab9a3820d37e2e46f17f8841830fa251cb43c8e6e1feab58ac6000038a4b4cc846bfb00c70148eee054fbefce62d475f480c7ebe6e389f58a9aaad96da47a467b2bfbf3e589ca8b7fbd338b15a21e39a97c3b9d346f08588c57a078def6781f43a43217bb2ec9a2680c0d3882e4d4b27b12998193aa25c12423ea20a8a0a4489adec3c528fdcac8ef366f9dcd0af8529b6f2fce2da45a2c70527ef3fc2ce1129cebfbed6533576bc82f2637bd7e030a7c699c52d0b9c6b742aba34ea02ea43be0beed1d782f129bc4e49829ca6b319f2b6b3effde69a72bf448b84cc26b24f179b29a19a6b882c24ef4d35779370a176decc95ff16229bcaaf0eb8e84661762f21433a9131628c003255482d641908d2587bdafc9531b0b32491d084344da5877b8dae7808854399698f96759ad14ac7900e702546c0bbfeaca16add2dec4ce474481c40fcb8bb986a1d8687ce2e92795728ff20a5a875ead1f32e5e2c021e04789d6c1019e7462fa43357aa"], 0x0)
r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2)
stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000380))
r1 = memfd_create(&(0x7f0000000040)='-vboxnet0\x00', 0x4)
ftruncate(r1, 0x1000000)
sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

08:12:22 executing program 5:
mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0)
r1 = memfd_create(&(0x7f0000000180)='^posix_acl_accessp\x04p1vk\xee\x05\xdaY\xd4\x8d\x13\x06\xce\\\x89\x18R\xa9{\x05#\a\xf6$\x0fcR\xc8\x15\a\x92]kL\xf5\x1f\x8b\xb9`0d1\x1aA\xc9\x16\n4:\x12\xf1\x82Z/\x02\xb0\x92w\xdd\xbfm\x1e\x12Gh\xbd\x8a\xcej\x19\n\x81\x86\xc9\xdb\xa3G\xa9\xa1W', 0x0)
write$P9_RATTACH(r0, &(0x7f0000000080)={0x14}, 0xfffffcde)
splice(r0, 0x0, r1, 0x0, 0x1000000007ff, 0x0)
r2 = socket(0x2000000000000010, 0x3, 0x0)
ioctl(r2, 0x1000008912, &(0x7f0000000280)="c0dca5055e0bcfec7be070")

08:12:22 executing program 4:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
fcntl$setstatus(r1, 0x4, 0x1004c)
recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x800e00725)

08:12:22 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f00000002c0)=ANY=[@ANYBLOB="050000000000000000000040050000a90000000000fa00000000e23f0003000001000000000000002560b700ff"])
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000009004"])

08:12:22 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0xf00]}, 0x3c)

08:12:22 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:12:22 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x1100]}, 0x3c)

08:12:22 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f00000002c0)=ANY=[@ANYBLOB="050000000000000000000040050000a90000000000fa00000000e23f0003000001000000000000002560b700ff"])
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000009004"])

08:12:22 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:12:22 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x1200]}, 0x3c)

08:12:22 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x1300]}, 0x3c)

08:12:22 executing program 2:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r0, 0x4008ae8a, &(0x7f00000002c0)=ANY=[@ANYBLOB="050000000000000000000040050000a90000000000fa00000000e23f0003000001000000000000002560b700ff"])
ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000009004"])

08:12:23 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000400))
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0)
getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, &(0x7f0000000180))
getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x0)
r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2)
stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000380))
r1 = memfd_create(&(0x7f0000000040)='-vboxnet0\x00', 0x4)
ftruncate(r1, 0x1000000)
sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

08:12:23 executing program 5:
mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0)
r1 = memfd_create(&(0x7f0000000180)='^posix_acl_accessp\x04p1vk\xee\x05\xdaY\xd4\x8d\x13\x06\xce\\\x89\x18R\xa9{\x05#\a\xf6$\x0fcR\xc8\x15\a\x92]kL\xf5\x1f\x8b\xb9`0d1\x1aA\xc9\x16\n4:\x12\xf1\x82Z/\x02\xb0\x92w\xdd\xbfm\x1e\x12Gh\xbd\x8a\xcej\x19\n\x81\x86\xc9\xdb\xa3G\xa9\xa1W', 0x0)
write$P9_RATTACH(r0, &(0x7f0000000080)={0x14}, 0xfffffcde)
splice(r0, 0x0, r1, 0x0, 0x1000000007ff, 0x0)
r2 = socket(0x2000000000000010, 0x3, 0x0)
ioctl(r2, 0x1000008912, &(0x7f0000000280)="c0dca5055e0bcfec7be070")

08:12:23 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
timerfd_gettime(0xffffffffffffffff, 0x0)
r1 = gettid()
connect$netlink(r0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
getsockopt$sock_timeval(r0, 0x1, 0x0, 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0)
tkill(r1, 0x800000000000014)

08:12:23 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:12:23 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x1400]}, 0x3c)

08:12:23 executing program 2:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r0, 0x4008ae8a, &(0x7f00000002c0)=ANY=[@ANYBLOB="050000000000000000000040050000a90000000000fa00000000e23f0003000001000000000000002560b700ff"])
ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000009004"])

08:12:23 executing program 2:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r0, 0x4008ae8a, &(0x7f00000002c0)=ANY=[@ANYBLOB="050000000000000000000040050000a90000000000fa00000000e23f0003000001000000000000002560b700ff"])
ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000009004"])

08:12:23 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x1500]}, 0x3c)

08:12:23 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:12:23 executing program 4:

08:12:23 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x1600]}, 0x3c)

08:12:23 executing program 2:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f00000002c0)=ANY=[@ANYBLOB="050000000000000000000040050000a90000000000fa00000000e23f0003000001000000000000002560b700ff"])
ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000009004"])

08:12:23 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000400))
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0)
getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, &(0x7f0000000180))
getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x0)
r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2)
stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000380))
r1 = memfd_create(&(0x7f0000000040)='-vboxnet0\x00', 0x4)
ftruncate(r1, 0x1000000)
sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

08:12:24 executing program 5:
mknod(&(0x7f0000000200)='./bus\x00', 0x100c, 0x0)
r0 = open(0x0, 0x2, 0x0)
r1 = memfd_create(&(0x7f0000000180)='^posix_acl_accessp\x04p1vk\xee\x05\xdaY\xd4\x8d\x13\x06\xce\\\x89\x18R\xa9{\x05#\a\xf6$\x0fcR\xc8\x15\a\x92]kL\xf5\x1f\x8b\xb9`0d1\x1aA\xc9\x16\n4:\x12\xf1\x82Z/\x02\xb0\x92w\xdd\xbfm\x1e\x12Gh\xbd\x8a\xcej\x19\n\x81\x86\xc9\xdb\xa3G\xa9\xa1W', 0x0)
write$P9_RATTACH(r0, &(0x7f0000000080)={0x14}, 0xfffffcde)
splice(r0, 0x0, r1, 0x0, 0x1000000007ff, 0x0)
r2 = socket(0x2000000000000010, 0x3, 0x0)
ioctl(r2, 0x1000008912, &(0x7f0000000280)="c0dca5055e0bcfec7be070")

08:12:24 executing program 4:

08:12:24 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x1800]}, 0x3c)

08:12:24 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:12:24 executing program 2:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f00000002c0)=ANY=[@ANYBLOB="050000000000000000000040050000a90000000000fa00000000e23f0003000001000000000000002560b700ff"])
ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000009004"])

08:12:24 executing program 4:

08:12:24 executing program 2:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f00000002c0)=ANY=[@ANYBLOB="050000000000000000000040050000a90000000000fa00000000e23f0003000001000000000000002560b700ff"])
ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000009004"])

08:12:24 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4000]}, 0x3c)

08:12:24 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:12:24 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x400000]}, 0x3c)

08:12:24 executing program 4:

08:12:24 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000400))
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0)
getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, &(0x7f0000000180))
getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000a80)=ANY=[@ANYBLOB="00100000be0c0b20db6061a1fd3443e546be86e7dc8d60f536f2b5261d205c7a95ebf7f98c4c677b4cbd07eb1ec662c5066bba64127653228974bacd7a7e88d4bec2760537b249dbbaed97b403516fe38fab9a3820d37e2e46f17f8841830fa251cb43c8e6e1feab58ac6000038a4b4cc846bfb00c70148eee054fbefce62d475f480c7ebe6e389f58a9aaad96da47a467b2bfbf3e589ca8b7fbd338b15a21e39a97c3b9d346f08588c57a078def6781f43a43217bb2ec9a2680c0d3882e4d4b27b12998193aa25c12423ea20a8a0a4489adec3c528fdcac8ef366f9dcd0af8529b6f2fce2da45a2c70527ef3fc2ce1129cebfbed6533576bc82f2637bd7e030a7c699c52d0b9c6b742aba34ea02ea43be0beed1d782f129bc4e49829ca6b319f2b6b3effde69a72bf448b84cc26b24f179b29a19a6b882c24ef4d35779370a176decc95ff16229bcaaf0eb8e84661762f21433a9131628c003255482d641908d2587bdafc9531b0b32491d084344da5877b8dae7808854399698f96759ad14ac7900e702546c0bbfeaca16add2dec4ce474481c40fcb8bb986a1d8687ce2e92795728ff20a5a875ead1f32e5e2c021e04789d6c1019e7462fa43357aa"], 0x0)
r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2)
stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000380))
r1 = memfd_create(&(0x7f0000000040)='-vboxnet0\x00', 0x4)
ftruncate(r1, 0x1000000)
sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

08:12:24 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000002c0)=ANY=[@ANYBLOB="050000000000000000000040050000a90000000000fa00000000e23f0003000001000000000000002560b700ff"])
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000009004"])

08:12:24 executing program 4:

08:12:24 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x80ffff]}, 0x3c)

08:12:24 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:12:24 executing program 5:
mknod(&(0x7f0000000200)='./bus\x00', 0x100c, 0x0)
r0 = open(0x0, 0x2, 0x0)
r1 = memfd_create(&(0x7f0000000180)='^posix_acl_accessp\x04p1vk\xee\x05\xdaY\xd4\x8d\x13\x06\xce\\\x89\x18R\xa9{\x05#\a\xf6$\x0fcR\xc8\x15\a\x92]kL\xf5\x1f\x8b\xb9`0d1\x1aA\xc9\x16\n4:\x12\xf1\x82Z/\x02\xb0\x92w\xdd\xbfm\x1e\x12Gh\xbd\x8a\xcej\x19\n\x81\x86\xc9\xdb\xa3G\xa9\xa1W', 0x0)
write$P9_RATTACH(r0, &(0x7f0000000080)={0x14}, 0xfffffcde)
splice(r0, 0x0, r1, 0x0, 0x1000000007ff, 0x0)
r2 = socket(0x2000000000000010, 0x3, 0x0)
ioctl(r2, 0x1000008912, &(0x7f0000000280)="c0dca5055e0bcfec7be070")

08:12:24 executing program 4:

08:12:24 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x1000000]}, 0x3c)

08:12:24 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000002c0)=ANY=[@ANYBLOB="050000000000000000000040050000a90000000000fa00000000e23f0003000001000000000000002560b700ff"])
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000009004"])

08:12:24 executing program 5:
mknod(&(0x7f0000000200)='./bus\x00', 0x100c, 0x0)
r0 = open(0x0, 0x2, 0x0)
r1 = memfd_create(&(0x7f0000000180)='^posix_acl_accessp\x04p1vk\xee\x05\xdaY\xd4\x8d\x13\x06\xce\\\x89\x18R\xa9{\x05#\a\xf6$\x0fcR\xc8\x15\a\x92]kL\xf5\x1f\x8b\xb9`0d1\x1aA\xc9\x16\n4:\x12\xf1\x82Z/\x02\xb0\x92w\xdd\xbfm\x1e\x12Gh\xbd\x8a\xcej\x19\n\x81\x86\xc9\xdb\xa3G\xa9\xa1W', 0x0)
write$P9_RATTACH(r0, &(0x7f0000000080)={0x14}, 0xfffffcde)
splice(r0, 0x0, r1, 0x0, 0x1000000007ff, 0x0)
r2 = socket(0x2000000000000010, 0x3, 0x0)
ioctl(r2, 0x1000008912, &(0x7f0000000280)="c0dca5055e0bcfec7be070")

08:12:24 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:12:24 executing program 4:

08:12:25 executing program 0:

08:12:25 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x3c)

08:12:25 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000002c0)=ANY=[@ANYBLOB="050000000000000000000040050000a90000000000fa00000000e23f0003000001000000000000002560b700ff"])
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000009004"])

08:12:25 executing program 5:
mknod(&(0x7f0000000200)='./bus\x00', 0x100c, 0x0)
r0 = open(&(0x7f0000000600)='./bus\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000180)='^posix_acl_accessp\x04p1vk\xee\x05\xdaY\xd4\x8d\x13\x06\xce\\\x89\x18R\xa9{\x05#\a\xf6$\x0fcR\xc8\x15\a\x92]kL\xf5\x1f\x8b\xb9`0d1\x1aA\xc9\x16\n4:\x12\xf1\x82Z/\x02\xb0\x92w\xdd\xbfm\x1e\x12Gh\xbd\x8a\xcej\x19\n\x81\x86\xc9\xdb\xa3G\xa9\xa1W', 0x0)
write$P9_RATTACH(r0, &(0x7f0000000080)={0x14}, 0xfffffcde)
splice(r0, 0x0, r1, 0x0, 0x1000000007ff, 0x0)
r2 = socket(0x2000000000000010, 0x3, 0x0)
ioctl(r2, 0x1000008912, &(0x7f0000000280)="c0dca5055e0bcfec7be070")

08:12:25 executing program 4:

08:12:25 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:12:25 executing program 4:

08:12:25 executing program 2:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f00000002c0)=ANY=[@ANYBLOB="050000000000000000000040050000a90000000000fa00000000e23f0003000001000000000000002560b700ff"])
ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000009004"])

08:12:25 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x3000000]}, 0x3c)

08:12:25 executing program 0:

08:12:25 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:12:25 executing program 4:

08:12:25 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4000000]}, 0x3c)

08:12:25 executing program 0:

08:12:25 executing program 2:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f00000002c0)=ANY=[@ANYBLOB="050000000000000000000040050000a90000000000fa00000000e23f0003000001000000000000002560b700ff"])
ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000009004"])

08:12:26 executing program 5:
mknod(&(0x7f0000000200)='./bus\x00', 0x100c, 0x0)
r0 = open(&(0x7f0000000600)='./bus\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000180)='^posix_acl_accessp\x04p1vk\xee\x05\xdaY\xd4\x8d\x13\x06\xce\\\x89\x18R\xa9{\x05#\a\xf6$\x0fcR\xc8\x15\a\x92]kL\xf5\x1f\x8b\xb9`0d1\x1aA\xc9\x16\n4:\x12\xf1\x82Z/\x02\xb0\x92w\xdd\xbfm\x1e\x12Gh\xbd\x8a\xcej\x19\n\x81\x86\xc9\xdb\xa3G\xa9\xa1W', 0x0)
write$P9_RATTACH(r0, &(0x7f0000000080)={0x14}, 0xfffffcde)
splice(r0, 0x0, r1, 0x0, 0x1000000007ff, 0x0)
r2 = socket(0x2000000000000010, 0x3, 0x0)
ioctl(r2, 0x1000008912, &(0x7f0000000280)="c0dca5055e0bcfec7be070")

08:12:26 executing program 4:

08:12:26 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x5000000]}, 0x3c)

08:12:26 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:12:26 executing program 2:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f00000002c0)=ANY=[@ANYBLOB="050000000000000000000040050000a90000000000fa00000000e23f0003000001000000000000002560b700ff"])
ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000009004"])

08:12:26 executing program 0:

08:12:26 executing program 0:

08:12:26 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f00000002c0)=ANY=[@ANYBLOB="050000000000000000000040050000a90000000000fa00000000e23f0003000001000000000000002560b700ff"])
ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000009004"])

08:12:26 executing program 4:

08:12:26 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x6000000]}, 0x3c)

08:12:26 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:12:26 executing program 0:

08:12:27 executing program 5:
mknod(&(0x7f0000000200)='./bus\x00', 0x100c, 0x0)
r0 = open(&(0x7f0000000600)='./bus\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000180)='^posix_acl_accessp\x04p1vk\xee\x05\xdaY\xd4\x8d\x13\x06\xce\\\x89\x18R\xa9{\x05#\a\xf6$\x0fcR\xc8\x15\a\x92]kL\xf5\x1f\x8b\xb9`0d1\x1aA\xc9\x16\n4:\x12\xf1\x82Z/\x02\xb0\x92w\xdd\xbfm\x1e\x12Gh\xbd\x8a\xcej\x19\n\x81\x86\xc9\xdb\xa3G\xa9\xa1W', 0x0)
write$P9_RATTACH(r0, &(0x7f0000000080)={0x14}, 0xfffffcde)
splice(r0, 0x0, r1, 0x0, 0x1000000007ff, 0x0)
r2 = socket(0x2000000000000010, 0x3, 0x0)
ioctl(r2, 0x1000008912, &(0x7f0000000280)="c0dca5055e0bcfec7be070")

08:12:27 executing program 4:

08:12:27 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7000000]}, 0x3c)

08:12:27 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f00000002c0)=ANY=[@ANYBLOB="050000000000000000000040050000a90000000000fa00000000e23f0003000001000000000000002560b700ff"])
ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000009004"])

08:12:27 executing program 0:

08:12:27 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:12:27 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x8000000]}, 0x3c)

08:12:27 executing program 0:

08:12:27 executing program 4:

08:12:27 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:12:27 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f00000002c0)=ANY=[@ANYBLOB="050000000000000000000040050000a90000000000fa00000000e23f0003000001000000000000002560b700ff"])
ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000009004"])

08:12:27 executing program 0:

08:12:28 executing program 5:
mknod(&(0x7f0000000200)='./bus\x00', 0x100c, 0x0)
r0 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0)
r1 = memfd_create(0x0, 0x0)
write$P9_RATTACH(r0, &(0x7f0000000080)={0x14}, 0xfffffcde)
splice(r0, 0x0, r1, 0x0, 0x1000000007ff, 0x0)
r2 = socket(0x2000000000000010, 0x3, 0x0)
ioctl(r2, 0x1000008912, &(0x7f0000000280)="c0dca5055e0bcfec7be070")

08:12:28 executing program 4:

08:12:28 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x9000000]}, 0x3c)

08:12:28 executing program 0:

08:12:28 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f00000002c0)=ANY=[@ANYBLOB="050000000000000000000040050000a90000000000fa00000000e23f0003000001000000000000002560b700ff"])
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000009004"])

08:12:28 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:12:28 executing program 4:

08:12:28 executing program 0:

08:12:28 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0xa000000]}, 0x3c)

08:12:28 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:12:28 executing program 4:

08:12:28 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f00000002c0)=ANY=[@ANYBLOB="050000000000000000000040050000a90000000000fa00000000e23f0003000001000000000000002560b700ff"])
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000009004"])

08:12:29 executing program 5:
mknod(&(0x7f0000000200)='./bus\x00', 0x100c, 0x0)
r0 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0)
r1 = memfd_create(0x0, 0x0)
write$P9_RATTACH(r0, &(0x7f0000000080)={0x14}, 0xfffffcde)
splice(r0, 0x0, r1, 0x0, 0x1000000007ff, 0x0)
r2 = socket(0x2000000000000010, 0x3, 0x0)
ioctl(r2, 0x1000008912, &(0x7f0000000280)="c0dca5055e0bcfec7be070")

08:12:29 executing program 0:

08:12:29 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0xb000000]}, 0x3c)

08:12:29 executing program 4:

08:12:29 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:12:29 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f00000002c0)=ANY=[@ANYBLOB="050000000000000000000040050000a90000000000fa00000000e23f0003000001000000000000002560b700ff"])
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000009004"])

08:12:29 executing program 4:

08:12:29 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0xc000000]}, 0x3c)

08:12:29 executing program 0:

08:12:29 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000009004"])

08:12:29 executing program 4:

08:12:29 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:12:30 executing program 5:
mknod(&(0x7f0000000200)='./bus\x00', 0x100c, 0x0)
r0 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0)
r1 = memfd_create(0x0, 0x0)
write$P9_RATTACH(r0, &(0x7f0000000080)={0x14}, 0xfffffcde)
splice(r0, 0x0, r1, 0x0, 0x1000000007ff, 0x0)
r2 = socket(0x2000000000000010, 0x3, 0x0)
ioctl(r2, 0x1000008912, &(0x7f0000000280)="c0dca5055e0bcfec7be070")

08:12:30 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0xd000000]}, 0x3c)

08:12:30 executing program 0:

08:12:30 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000009004"])

08:12:30 executing program 4:

08:12:30 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:12:30 executing program 4:

08:12:30 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz0\x00', 0x200002, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r2 = openat$cgroup_subtree(r1, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0)
close(0xffffffffffffffff)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x2b, 'pids'}]}, 0x6)
openat$cgroup_ro(r0, &(0x7f0000000100)='pids.events\x00', 0x0, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000080)={[{0x2d, 'pids'}]}, 0x6)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)

08:12:30 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0xe000000]}, 0x3c)

08:12:30 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000009004"])

08:12:30 executing program 5:
mknod(&(0x7f0000000200)='./bus\x00', 0x100c, 0x0)
r0 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0)
r1 = memfd_create(&(0x7f0000000180)='^posix_acl_accessp\x04p1vk\xee\x05\xdaY\xd4\x8d\x13\x06\xce\\\x89\x18R\xa9{\x05#\a\xf6$\x0fcR\xc8\x15\a\x92]kL\xf5\x1f\x8b\xb9`0d1\x1aA\xc9\x16\n4:\x12\xf1\x82Z/\x02\xb0\x92w\xdd\xbfm\x1e\x12Gh\xbd\x8a\xcej\x19\n\x81\x86\xc9\xdb\xa3G\xa9\xa1W', 0x0)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14}, 0xfffffcde)
splice(r0, 0x0, r1, 0x0, 0x1000000007ff, 0x0)
r2 = socket(0x2000000000000010, 0x3, 0x0)
ioctl(r2, 0x1000008912, &(0x7f0000000280)="c0dca5055e0bcfec7be070")

08:12:30 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:12:30 executing program 4:
perf_event_open(&(0x7f000025c000)={0x8000000000000002, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00\xc7\xec\xac\xd9&{\x0f\x96\xad\xd1\x8fl![\x8f\xb9\f\xca\x1d\xc2{\xee\xb7\x03K\x0f\xa6\xaa;\xf6\x89\xf7b^\xa5\xafI\r\xc4\x9f\v\xf2\x1c\xdc\xddp2\xb7\xbb\x1b\xfev\xea\xed\xe0\xaa\xe8\xceR`\xbb\xf2\xed;pC\x19\xbfn\x16\xaa\x199\xfe.Q\xebvB\xd2\x19&l?\x87\x17H\x1f.\xdbA\x1b\xafz\xe3\xdc};*\xec\xfe\xfa\xfb/\x18g\x80y\xfe\x89', 0x26e1, 0x0)
close(r1)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340))
write$cgroup_type(r1, &(0x7f0000000080)='threaded\x00', 0xfffffc61)
recvmsg(r0, 0x0, 0x0)
write$cgroup_type(0xffffffffffffffff, 0x0, 0x0)

08:12:30 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0xf000000]}, 0x3c)

08:12:30 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0xe, 0x0, &(0x7f00000000c0))

08:12:30 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000002c0)=ANY=[])
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000009004"])

08:12:30 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x10000000]}, 0x3c)

08:12:30 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0xe, 0x0, &(0x7f00000000c0))

08:12:30 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x11000000]}, 0x3c)

08:12:30 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:12:30 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000002c0)=ANY=[])
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000009004"])

08:12:30 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0xe, 0x0, &(0x7f00000000c0))

08:12:31 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0xe, 0x0, &(0x7f00000000c0))

08:12:31 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x12000000]}, 0x3c)

08:12:31 executing program 4:
perf_event_open(&(0x7f000025c000)={0x8000000000000002, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00\xc7\xec\xac\xd9&{\x0f\x96\xad\xd1\x8fl![\x8f\xb9\f\xca\x1d\xc2{\xee\xb7\x03K\x0f\xa6\xaa;\xf6\x89\xf7b^\xa5\xafI\r\xc4\x9f\v\xf2\x1c\xdc\xddp2\xb7\xbb\x1b\xfev\xea\xed\xe0\xaa\xe8\xceR`\xbb\xf2\xed;pC\x19\xbfn\x16\xaa\x199\xfe.Q\xebvB\xd2\x19&l?\x87\x17H\x1f.\xdbA\x1b\xafz\xe3\xdc};*\xec\xfe\xfa\xfb/\x18g\x80y\xfe\x89', 0x26e1, 0x0)
close(r1)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340))
write$cgroup_type(r1, &(0x7f0000000080)='threaded\x00', 0xfffffc61)
recvmsg(r0, 0x0, 0x0)
write$cgroup_type(0xffffffffffffffff, 0x0, 0x0)

08:12:31 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000002c0)=ANY=[])
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000009004"])

08:12:31 executing program 5:
mknod(&(0x7f0000000200)='./bus\x00', 0x100c, 0x0)
r0 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0)
r1 = memfd_create(&(0x7f0000000180)='^posix_acl_accessp\x04p1vk\xee\x05\xdaY\xd4\x8d\x13\x06\xce\\\x89\x18R\xa9{\x05#\a\xf6$\x0fcR\xc8\x15\a\x92]kL\xf5\x1f\x8b\xb9`0d1\x1aA\xc9\x16\n4:\x12\xf1\x82Z/\x02\xb0\x92w\xdd\xbfm\x1e\x12Gh\xbd\x8a\xcej\x19\n\x81\x86\xc9\xdb\xa3G\xa9\xa1W', 0x0)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14}, 0xfffffcde)
splice(r0, 0x0, r1, 0x0, 0x1000000007ff, 0x0)
r2 = socket(0x2000000000000010, 0x3, 0x0)
ioctl(r2, 0x1000008912, &(0x7f0000000280)="c0dca5055e0bcfec7be070")

08:12:31 executing program 0:
getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f00000000c0))

08:12:31 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:12:31 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x13000000]}, 0x3c)

08:12:31 executing program 0:
getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f00000000c0))

08:12:31 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x14000000]}, 0x3c)

08:12:31 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000002c0)=ANY=[@ANYBLOB])
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000009004"])

08:12:31 executing program 0:
getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f00000000c0))

08:12:31 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x15000000]}, 0x3c)

08:12:31 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:12:32 executing program 4:
perf_event_open(&(0x7f000025c000)={0x8000000000000002, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00\xc7\xec\xac\xd9&{\x0f\x96\xad\xd1\x8fl![\x8f\xb9\f\xca\x1d\xc2{\xee\xb7\x03K\x0f\xa6\xaa;\xf6\x89\xf7b^\xa5\xafI\r\xc4\x9f\v\xf2\x1c\xdc\xddp2\xb7\xbb\x1b\xfev\xea\xed\xe0\xaa\xe8\xceR`\xbb\xf2\xed;pC\x19\xbfn\x16\xaa\x199\xfe.Q\xebvB\xd2\x19&l?\x87\x17H\x1f.\xdbA\x1b\xafz\xe3\xdc};*\xec\xfe\xfa\xfb/\x18g\x80y\xfe\x89', 0x26e1, 0x0)
close(r1)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340))
write$cgroup_type(r1, &(0x7f0000000080)='threaded\x00', 0xfffffc61)
recvmsg(r0, 0x0, 0x0)
write$cgroup_type(0xffffffffffffffff, 0x0, 0x0)

08:12:32 executing program 0:
socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f00000000c0))

08:12:32 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x16000000]}, 0x3c)

08:12:32 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000002c0)=ANY=[@ANYBLOB])
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000009004"])

08:12:32 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:12:32 executing program 5:
mknod(&(0x7f0000000200)='./bus\x00', 0x100c, 0x0)
r0 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0)
r1 = memfd_create(&(0x7f0000000180)='^posix_acl_accessp\x04p1vk\xee\x05\xdaY\xd4\x8d\x13\x06\xce\\\x89\x18R\xa9{\x05#\a\xf6$\x0fcR\xc8\x15\a\x92]kL\xf5\x1f\x8b\xb9`0d1\x1aA\xc9\x16\n4:\x12\xf1\x82Z/\x02\xb0\x92w\xdd\xbfm\x1e\x12Gh\xbd\x8a\xcej\x19\n\x81\x86\xc9\xdb\xa3G\xa9\xa1W', 0x0)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14}, 0xfffffcde)
splice(r0, 0x0, r1, 0x0, 0x1000000007ff, 0x0)
r2 = socket(0x2000000000000010, 0x3, 0x0)
ioctl(r2, 0x1000008912, &(0x7f0000000280)="c0dca5055e0bcfec7be070")

08:12:32 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x18000000]}, 0x3c)

08:12:32 executing program 0:
socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f00000000c0))

08:12:32 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000002c0)=ANY=[@ANYBLOB])
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000009004"])

08:12:32 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:12:32 executing program 0:
socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f00000000c0))

08:12:32 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x40000000]}, 0x3c)

08:12:33 executing program 4:
perf_event_open(&(0x7f000025c000)={0x8000000000000002, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00\xc7\xec\xac\xd9&{\x0f\x96\xad\xd1\x8fl![\x8f\xb9\f\xca\x1d\xc2{\xee\xb7\x03K\x0f\xa6\xaa;\xf6\x89\xf7b^\xa5\xafI\r\xc4\x9f\v\xf2\x1c\xdc\xddp2\xb7\xbb\x1b\xfev\xea\xed\xe0\xaa\xe8\xceR`\xbb\xf2\xed;pC\x19\xbfn\x16\xaa\x199\xfe.Q\xebvB\xd2\x19&l?\x87\x17H\x1f.\xdbA\x1b\xafz\xe3\xdc};*\xec\xfe\xfa\xfb/\x18g\x80y\xfe\x89', 0x26e1, 0x0)
close(r1)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340))
write$cgroup_type(r1, &(0x7f0000000080)='threaded\x00', 0xfffffc61)
recvmsg(r0, 0x0, 0x0)
write$cgroup_type(0xffffffffffffffff, 0x0, 0x0)

08:12:33 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000002c0)=ANY=[@ANYBLOB="050000000000000000000040050000a90000000000fa00"])
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000009004"])

08:12:33 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:12:33 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x80010000]}, 0x3c)

08:12:33 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0xe, 0x0, 0x0)

08:12:33 executing program 5:
mknod(&(0x7f0000000200)='./bus\x00', 0x100c, 0x0)
r0 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0)
r1 = memfd_create(&(0x7f0000000180)='^posix_acl_accessp\x04p1vk\xee\x05\xdaY\xd4\x8d\x13\x06\xce\\\x89\x18R\xa9{\x05#\a\xf6$\x0fcR\xc8\x15\a\x92]kL\xf5\x1f\x8b\xb9`0d1\x1aA\xc9\x16\n4:\x12\xf1\x82Z/\x02\xb0\x92w\xdd\xbfm\x1e\x12Gh\xbd\x8a\xcej\x19\n\x81\x86\xc9\xdb\xa3G\xa9\xa1W', 0x0)
write$P9_RATTACH(r0, 0x0, 0x0)
splice(r0, 0x0, r1, 0x0, 0x1000000007ff, 0x0)
r2 = socket(0x2000000000000010, 0x3, 0x0)
ioctl(r2, 0x1000008912, &(0x7f0000000280)="c0dca5055e0bcfec7be070")

08:12:33 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0xe4ffffff]}, 0x3c)

08:12:33 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0xe, 0x0, 0x0)

08:12:33 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000002c0)=ANY=[@ANYBLOB="050000000000000000000040050000a90000000000fa00"])
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000009004"])

08:12:33 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:12:33 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0xe, 0x0, 0x0)

08:12:33 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0xffff8000]}, 0x3c)

08:12:34 executing program 4:
perf_event_open(&(0x7f000025c000)={0x8000000000000002, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00\xc7\xec\xac\xd9&{\x0f\x96\xad\xd1\x8fl![\x8f\xb9\f\xca\x1d\xc2{\xee\xb7\x03K\x0f\xa6\xaa;\xf6\x89\xf7b^\xa5\xafI\r\xc4\x9f\v\xf2\x1c\xdc\xddp2\xb7\xbb\x1b\xfev\xea\xed\xe0\xaa\xe8\xceR`\xbb\xf2\xed;pC\x19\xbfn\x16\xaa\x199\xfe.Q\xebvB\xd2\x19&l?\x87\x17H\x1f.\xdbA\x1b\xafz\xe3\xdc};*\xec\xfe\xfa\xfb/\x18g\x80y\xfe\x89', 0x26e1, 0x0)
close(r1)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340))
write$cgroup_type(r1, &(0x7f0000000080)='threaded\x00', 0xfffffc61)
recvmsg(r0, 0x0, 0x0)

08:12:34 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000000)={0x100000001, 0x3, 0xffffffff})

08:12:34 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000002c0)=ANY=[@ANYBLOB="050000000000000000000040050000a90000000000fa00"])
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000009004"])

08:12:34 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0xffffffe4]}, 0x3c)

08:12:34 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:12:34 executing program 5:
mknod(&(0x7f0000000200)='./bus\x00', 0x100c, 0x0)
r0 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0)
r1 = memfd_create(&(0x7f0000000180)='^posix_acl_accessp\x04p1vk\xee\x05\xdaY\xd4\x8d\x13\x06\xce\\\x89\x18R\xa9{\x05#\a\xf6$\x0fcR\xc8\x15\a\x92]kL\xf5\x1f\x8b\xb9`0d1\x1aA\xc9\x16\n4:\x12\xf1\x82Z/\x02\xb0\x92w\xdd\xbfm\x1e\x12Gh\xbd\x8a\xcej\x19\n\x81\x86\xc9\xdb\xa3G\xa9\xa1W', 0x0)
write$P9_RATTACH(r0, 0x0, 0x0)
splice(r0, 0x0, r1, 0x0, 0x1000000007ff, 0x0)
r2 = socket(0x2000000000000010, 0x3, 0x0)
ioctl(r2, 0x1000008912, &(0x7f0000000280)="c0dca5055e0bcfec7be070")

08:12:34 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x1000000000000]}, 0x3c)

08:12:34 executing program 0:
clock_nanosleep(0x2, 0x1, &(0x7f0000000000)={0x0, 0x989680}, 0x0)

08:12:34 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:12:34 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000002c0)=ANY=[@ANYBLOB="050000000000000000000040050000a90000000000fa00000000e23f000300000100"])
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000009004"])

08:12:34 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x40000000000000]}, 0x3c)

08:12:34 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x80ffff00000000]}, 0x3c)

08:12:35 executing program 4:
perf_event_open(&(0x7f000025c000)={0x8000000000000002, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmsg(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00\xc7\xec\xac\xd9&{\x0f\x96\xad\xd1\x8fl![\x8f\xb9\f\xca\x1d\xc2{\xee\xb7\x03K\x0f\xa6\xaa;\xf6\x89\xf7b^\xa5\xafI\r\xc4\x9f\v\xf2\x1c\xdc\xddp2\xb7\xbb\x1b\xfev\xea\xed\xe0\xaa\xe8\xceR`\xbb\xf2\xed;pC\x19\xbfn\x16\xaa\x199\xfe.Q\xebvB\xd2\x19&l?\x87\x17H\x1f.\xdbA\x1b\xafz\xe3\xdc};*\xec\xfe\xfa\xfb/\x18g\x80y\xfe\x89', 0x26e1, 0x0)
close(r0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340))
write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffc61)

08:12:35 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000002c0)=ANY=[@ANYBLOB="050000000000000000000040050000a90000000000fa00000000e23f000300000100"])
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000009004"])

08:12:35 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:12:35 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x100000000000000]}, 0x3c)

08:12:35 executing program 5:
mknod(&(0x7f0000000200)='./bus\x00', 0x100c, 0x0)
r0 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0)
r1 = memfd_create(&(0x7f0000000180)='^posix_acl_accessp\x04p1vk\xee\x05\xdaY\xd4\x8d\x13\x06\xce\\\x89\x18R\xa9{\x05#\a\xf6$\x0fcR\xc8\x15\a\x92]kL\xf5\x1f\x8b\xb9`0d1\x1aA\xc9\x16\n4:\x12\xf1\x82Z/\x02\xb0\x92w\xdd\xbfm\x1e\x12Gh\xbd\x8a\xcej\x19\n\x81\x86\xc9\xdb\xa3G\xa9\xa1W', 0x0)
write$P9_RATTACH(r0, 0x0, 0x0)
splice(r0, 0x0, r1, 0x0, 0x1000000007ff, 0x0)
r2 = socket(0x2000000000000010, 0x3, 0x0)
ioctl(r2, 0x1000008912, &(0x7f0000000280)="c0dca5055e0bcfec7be070")

08:12:35 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/uts\x00')

08:12:35 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x200000000000000]}, 0x3c)

08:12:35 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000002c0)=ANY=[@ANYBLOB="050000000000000000000040050000a90000000000fa00000000e23f000300000100"])
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000009004"])

08:12:35 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, 0x0}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:12:35 executing program 0:
r0 = getpid()
sched_setattr(r0, &(0x7f0000000180)={0x30, 0x2, 0x0, 0x0, 0x1, 0x800}, 0x0)
socket$alg(0x26, 0x5, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
r2 = shmget$private(0x0, 0x3000, 0x54000108, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_UNLOCK(r2, 0xc)
getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x7, &(0x7f0000000200)=""/222, &(0x7f0000000140)=0xde)
ioctl$RTC_AIE_OFF(r1, 0x7002)
getsockopt$inet6_tcp_int(r1, 0x6, 0x8000000000018, &(0x7f00000000c0), &(0x7f00000003c0)=0x4)
syncfs(r1)
sched_setparam(r0, &(0x7f0000000100)=0x1ff)
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000340)='/proc/self/attr/current\x00', 0x2, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x6)
ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000300)=0x1)
add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff9)
keyctl$update(0x2, 0x0, 0x0, 0x0)

08:12:35 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x300000000000000]}, 0x3c)

08:12:35 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x3c)

08:12:36 executing program 4:
perf_event_open(&(0x7f000025c000)={0x8000000000000002, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmsg(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00\xc7\xec\xac\xd9&{\x0f\x96\xad\xd1\x8fl![\x8f\xb9\f\xca\x1d\xc2{\xee\xb7\x03K\x0f\xa6\xaa;\xf6\x89\xf7b^\xa5\xafI\r\xc4\x9f\v\xf2\x1c\xdc\xddp2\xb7\xbb\x1b\xfev\xea\xed\xe0\xaa\xe8\xceR`\xbb\xf2\xed;pC\x19\xbfn\x16\xaa\x199\xfe.Q\xebvB\xd2\x19&l?\x87\x17H\x1f.\xdbA\x1b\xafz\xe3\xdc};*\xec\xfe\xfa\xfb/\x18g\x80y\xfe\x89', 0x26e1, 0x0)
close(r0)
write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffc61)

08:12:36 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000002c0)=ANY=[@ANYBLOB="050000000000000000000040050000a90000000000fa00000000e23f000300000100000000000000"])
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000009004"])

08:12:36 executing program 0:
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000180)=0x8)
write$cgroup_type(r0, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(r0, 0x3, 0x0, 0x10000408001)
write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="e7"], 0x1)

08:12:36 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, 0x0}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:12:36 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x500000000000000]}, 0x3c)

08:12:36 executing program 5:
mknod(&(0x7f0000000200)='./bus\x00', 0x100c, 0x0)
r0 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0)
r1 = memfd_create(&(0x7f0000000180)='^posix_acl_accessp\x04p1vk\xee\x05\xdaY\xd4\x8d\x13\x06\xce\\\x89\x18R\xa9{\x05#\a\xf6$\x0fcR\xc8\x15\a\x92]kL\xf5\x1f\x8b\xb9`0d1\x1aA\xc9\x16\n4:\x12\xf1\x82Z/\x02\xb0\x92w\xdd\xbfm\x1e\x12Gh\xbd\x8a\xcej\x19\n\x81\x86\xc9\xdb\xa3G\xa9\xa1W', 0x0)
write$P9_RATTACH(r0, &(0x7f0000000080)={0x14}, 0xfffffcde)
splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x1000000007ff, 0x0)
r2 = socket(0x2000000000000010, 0x3, 0x0)
ioctl(r2, 0x1000008912, &(0x7f0000000280)="c0dca5055e0bcfec7be070")

08:12:36 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000002c0)=ANY=[@ANYBLOB="050000000000000000000040050000a90000000000fa00000000e23f000300000100000000000000"])
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000009004"])

08:12:36 executing program 0:
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000180)=0x8)
write$cgroup_type(r0, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(r0, 0x3, 0x0, 0x10000408001)
write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="e7"], 0x1)

08:12:36 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x600000000000000]}, 0x3c)

08:12:36 executing program 4:
perf_event_open(&(0x7f000025c000)={0x8000000000000002, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmsg(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00\xc7\xec\xac\xd9&{\x0f\x96\xad\xd1\x8fl![\x8f\xb9\f\xca\x1d\xc2{\xee\xb7\x03K\x0f\xa6\xaa;\xf6\x89\xf7b^\xa5\xafI\r\xc4\x9f\v\xf2\x1c\xdc\xddp2\xb7\xbb\x1b\xfev\xea\xed\xe0\xaa\xe8\xceR`\xbb\xf2\xed;pC\x19\xbfn\x16\xaa\x199\xfe.Q\xebvB\xd2\x19&l?\x87\x17H\x1f.\xdbA\x1b\xafz\xe3\xdc};*\xec\xfe\xfa\xfb/\x18g\x80y\xfe\x89', 0x26e1, 0x0)
close(r0)
write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffc61)

08:12:36 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, 0x0}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:12:36 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x700000000000000]}, 0x3c)

08:12:36 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000002c0)=ANY=[@ANYBLOB="050000000000000000000040050000a90000000000fa00000000e23f000300000100000000000000"])
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000009004"])

08:12:36 executing program 0:
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000180)=0x8)
write$cgroup_type(r0, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(r0, 0x3, 0x0, 0x10000408001)
write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="e7"], 0x1)

08:12:36 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x800000000000000]}, 0x3c)

08:12:36 executing program 4:
perf_event_open(&(0x7f000025c000)={0x8000000000000002, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmsg(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00\xc7\xec\xac\xd9&{\x0f\x96\xad\xd1\x8fl![\x8f\xb9\f\xca\x1d\xc2{\xee\xb7\x03K\x0f\xa6\xaa;\xf6\x89\xf7b^\xa5\xafI\r\xc4\x9f\v\xf2\x1c\xdc\xddp2\xb7\xbb\x1b\xfev\xea\xed\xe0\xaa\xe8\xceR`\xbb\xf2\xed;pC\x19\xbfn\x16\xaa\x199\xfe.Q\xebvB\xd2\x19&l?\x87\x17H\x1f.\xdbA\x1b\xafz\xe3\xdc};*\xec\xfe\xfa\xfb/\x18g\x80y\xfe\x89', 0x26e1, 0x0)
close(r0)
write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffc61)

08:12:37 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x900000000000000]}, 0x3c)

08:12:37 executing program 5:
mknod(&(0x7f0000000200)='./bus\x00', 0x100c, 0x0)
r0 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0)
r1 = memfd_create(&(0x7f0000000180)='^posix_acl_accessp\x04p1vk\xee\x05\xdaY\xd4\x8d\x13\x06\xce\\\x89\x18R\xa9{\x05#\a\xf6$\x0fcR\xc8\x15\a\x92]kL\xf5\x1f\x8b\xb9`0d1\x1aA\xc9\x16\n4:\x12\xf1\x82Z/\x02\xb0\x92w\xdd\xbfm\x1e\x12Gh\xbd\x8a\xcej\x19\n\x81\x86\xc9\xdb\xa3G\xa9\xa1W', 0x0)
write$P9_RATTACH(r0, &(0x7f0000000080)={0x14}, 0xfffffcde)
splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x1000000007ff, 0x0)
r2 = socket(0x2000000000000010, 0x3, 0x0)
ioctl(r2, 0x1000008912, &(0x7f0000000280)="c0dca5055e0bcfec7be070")

08:12:37 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$eventfd(0xffffffffffffffff, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:12:37 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000002c0)=ANY=[@ANYBLOB="050000000000000000000040050000a90000000000fa00000000e23f0003000001000000000000002560b7"])
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000009004"])

08:12:37 executing program 4:
perf_event_open(&(0x7f000025c000)={0x8000000000000002, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmsg(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00\xc7\xec\xac\xd9&{\x0f\x96\xad\xd1\x8fl![\x8f\xb9\f\xca\x1d\xc2{\xee\xb7\x03K\x0f\xa6\xaa;\xf6\x89\xf7b^\xa5\xafI\r\xc4\x9f\v\xf2\x1c\xdc\xddp2\xb7\xbb\x1b\xfev\xea\xed\xe0\xaa\xe8\xceR`\xbb\xf2\xed;pC\x19\xbfn\x16\xaa\x199\xfe.Q\xebvB\xd2\x19&l?\x87\x17H\x1f.\xdbA\x1b\xafz\xe3\xdc};*\xec\xfe\xfa\xfb/\x18g\x80y\xfe\x89', 0x26e1, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340))
write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffc61)

08:12:37 executing program 0:
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000180)=0x8)
write$cgroup_type(r0, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(r0, 0x3, 0x0, 0x10000408001)
write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="e7"], 0x1)

08:12:37 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0xa00000000000000]}, 0x3c)

08:12:37 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000002c0)=ANY=[@ANYBLOB="050000000000000000000040050000a90000000000fa00000000e23f0003000001000000000000002560b7"])
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000009004"])

08:12:37 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$eventfd(0xffffffffffffffff, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:12:37 executing program 0:
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000180)=0x8)
write$cgroup_type(r0, &(0x7f0000000100)='threaded\x00', 0xff34)
write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="e7"], 0x1)

08:12:37 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0xb00000000000000]}, 0x3c)

08:12:37 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000002c0)=ANY=[@ANYBLOB="050000000000000000000040050000a90000000000fa00000000e23f0003000001000000000000002560b7"])
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000009004"])

08:12:37 executing program 0:
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000180)=0x8)
write$cgroup_type(r0, &(0x7f0000000100)='threaded\x00', 0xff34)
write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="e7"], 0x1)

08:12:38 executing program 5:
mknod(&(0x7f0000000200)='./bus\x00', 0x100c, 0x0)
r0 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0)
r1 = memfd_create(&(0x7f0000000180)='^posix_acl_accessp\x04p1vk\xee\x05\xdaY\xd4\x8d\x13\x06\xce\\\x89\x18R\xa9{\x05#\a\xf6$\x0fcR\xc8\x15\a\x92]kL\xf5\x1f\x8b\xb9`0d1\x1aA\xc9\x16\n4:\x12\xf1\x82Z/\x02\xb0\x92w\xdd\xbfm\x1e\x12Gh\xbd\x8a\xcej\x19\n\x81\x86\xc9\xdb\xa3G\xa9\xa1W', 0x0)
write$P9_RATTACH(r0, &(0x7f0000000080)={0x14}, 0xfffffcde)
splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x1000000007ff, 0x0)
r2 = socket(0x2000000000000010, 0x3, 0x0)
ioctl(r2, 0x1000008912, &(0x7f0000000280)="c0dca5055e0bcfec7be070")

08:12:38 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0xc00000000000000]}, 0x3c)

08:12:38 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$eventfd(0xffffffffffffffff, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:12:38 executing program 4:
perf_event_open(&(0x7f000025c000)={0x8000000000000002, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmsg(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00\xc7\xec\xac\xd9&{\x0f\x96\xad\xd1\x8fl![\x8f\xb9\f\xca\x1d\xc2{\xee\xb7\x03K\x0f\xa6\xaa;\xf6\x89\xf7b^\xa5\xafI\r\xc4\x9f\v\xf2\x1c\xdc\xddp2\xb7\xbb\x1b\xfev\xea\xed\xe0\xaa\xe8\xceR`\xbb\xf2\xed;pC\x19\xbfn\x16\xaa\x199\xfe.Q\xebvB\xd2\x19&l?\x87\x17H\x1f.\xdbA\x1b\xafz\xe3\xdc};*\xec\xfe\xfa\xfb/\x18g\x80y\xfe\x89', 0x26e1, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340))
write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffc61)

08:12:38 executing program 0:
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000180)=0x8)
write$cgroup_type(r0, &(0x7f0000000100)='threaded\x00', 0xff34)
write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="e7"], 0x1)

08:12:38 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000002c0)=ANY=[@ANYBLOB="050000000000000000000040050000a90000000000fa00000000e23f0003000001000000000000002560b700"])
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000009004"])

08:12:38 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0xd00000000000000]}, 0x3c)

08:12:38 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:12:38 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000002c0)=ANY=[@ANYBLOB="050000000000000000000040050000a90000000000fa00000000e23f0003000001000000000000002560b700"])
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000009004"])

08:12:38 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0xe00000000000000]}, 0x3c)

08:12:38 executing program 0:
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000180)=0x8)
fallocate(r0, 0x3, 0x0, 0x10000408001)
write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="e7"], 0x1)

08:12:38 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0xf00000000000000]}, 0x3c)

08:12:39 executing program 5:
mknod(&(0x7f0000000200)='./bus\x00', 0x100c, 0x0)
r0 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0)
memfd_create(&(0x7f0000000180)='^posix_acl_accessp\x04p1vk\xee\x05\xdaY\xd4\x8d\x13\x06\xce\\\x89\x18R\xa9{\x05#\a\xf6$\x0fcR\xc8\x15\a\x92]kL\xf5\x1f\x8b\xb9`0d1\x1aA\xc9\x16\n4:\x12\xf1\x82Z/\x02\xb0\x92w\xdd\xbfm\x1e\x12Gh\xbd\x8a\xcej\x19\n\x81\x86\xc9\xdb\xa3G\xa9\xa1W', 0x0)
write$P9_RATTACH(r0, &(0x7f0000000080)={0x14}, 0xfffffcde)
splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x1000000007ff, 0x0)
r1 = socket(0x2000000000000010, 0x3, 0x0)
ioctl(r1, 0x1000008912, &(0x7f0000000280)="c0dca5055e0bcfec7be070")

08:12:39 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:12:39 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000002c0)=ANY=[@ANYBLOB="050000000000000000000040050000a90000000000fa00000000e23f0003000001000000000000002560b700"])
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000009004"])

08:12:39 executing program 4:
perf_event_open(&(0x7f000025c000)={0x8000000000000002, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmsg(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00\xc7\xec\xac\xd9&{\x0f\x96\xad\xd1\x8fl![\x8f\xb9\f\xca\x1d\xc2{\xee\xb7\x03K\x0f\xa6\xaa;\xf6\x89\xf7b^\xa5\xafI\r\xc4\x9f\v\xf2\x1c\xdc\xddp2\xb7\xbb\x1b\xfev\xea\xed\xe0\xaa\xe8\xceR`\xbb\xf2\xed;pC\x19\xbfn\x16\xaa\x199\xfe.Q\xebvB\xd2\x19&l?\x87\x17H\x1f.\xdbA\x1b\xafz\xe3\xdc};*\xec\xfe\xfa\xfb/\x18g\x80y\xfe\x89', 0x26e1, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340))
write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffc61)

08:12:39 executing program 0:
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000180)=0x8)
fallocate(r0, 0x3, 0x0, 0x10000408001)
write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="e7"], 0x1)

08:12:39 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x1000000000000000]}, 0x3c)

08:12:39 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000002c0)=ANY=[@ANYBLOB="050000000000000000000040050000a90000000000fa00000000e23f0003000001000000000000002560b700ff"])
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000009004"])

08:12:39 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:12:39 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x1100000000000000]}, 0x3c)

08:12:39 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000002c0)=ANY=[@ANYBLOB="050000000000000000000040050000a90000000000fa00000000e23f0003000001000000000000002560b700ff"])
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000009004"])

08:12:39 executing program 0:
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000180)=0x8)
fallocate(r0, 0x3, 0x0, 0x10000408001)
write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="e7"], 0x1)

08:12:39 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380), 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:12:39 executing program 5:
mknod(&(0x7f0000000200)='./bus\x00', 0x100c, 0x0)
r0 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0)
memfd_create(&(0x7f0000000180)='^posix_acl_accessp\x04p1vk\xee\x05\xdaY\xd4\x8d\x13\x06\xce\\\x89\x18R\xa9{\x05#\a\xf6$\x0fcR\xc8\x15\a\x92]kL\xf5\x1f\x8b\xb9`0d1\x1aA\xc9\x16\n4:\x12\xf1\x82Z/\x02\xb0\x92w\xdd\xbfm\x1e\x12Gh\xbd\x8a\xcej\x19\n\x81\x86\xc9\xdb\xa3G\xa9\xa1W', 0x0)
write$P9_RATTACH(r0, &(0x7f0000000080)={0x14}, 0xfffffcde)
splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x1000000007ff, 0x0)
r1 = socket(0x2000000000000010, 0x3, 0x0)
ioctl(r1, 0x1000008912, &(0x7f0000000280)="c0dca5055e0bcfec7be070")

08:12:39 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x1200000000000000]}, 0x3c)

08:12:39 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000002c0)=ANY=[@ANYBLOB="050000000000000000000040050000a90000000000fa00000000e23f0003000001000000000000002560b700ff"])
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000009004"])

08:12:40 executing program 4:
perf_event_open(&(0x7f000025c000)={0x8000000000000002, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmsg(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340))
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000080)='threaded\x00', 0xfffffc61)

08:12:40 executing program 0:
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
write$cgroup_type(r0, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(r0, 0x3, 0x0, 0x10000408001)
write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="e7"], 0x1)

08:12:40 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380), 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:12:40 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x1300000000000000]}, 0x3c)

08:12:40 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000002c0)=ANY=[@ANYBLOB="050000000000000000000040050000a90000000000fa00000000e23f0003000001000000000000002560b700ff"])
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, 0x0)

08:12:40 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x1400000000000000]}, 0x3c)

08:12:40 executing program 0:
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
write$cgroup_type(r0, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(r0, 0x3, 0x0, 0x10000408001)
write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="e7"], 0x1)

08:12:40 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380), 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:12:40 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000002c0)=ANY=[@ANYBLOB="050000000000000000000040050000a90000000000fa00000000e23f0003000001000000000000002560b700ff"])
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, 0x0)

08:12:40 executing program 5:
mknod(&(0x7f0000000200)='./bus\x00', 0x100c, 0x0)
r0 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0)
memfd_create(&(0x7f0000000180)='^posix_acl_accessp\x04p1vk\xee\x05\xdaY\xd4\x8d\x13\x06\xce\\\x89\x18R\xa9{\x05#\a\xf6$\x0fcR\xc8\x15\a\x92]kL\xf5\x1f\x8b\xb9`0d1\x1aA\xc9\x16\n4:\x12\xf1\x82Z/\x02\xb0\x92w\xdd\xbfm\x1e\x12Gh\xbd\x8a\xcej\x19\n\x81\x86\xc9\xdb\xa3G\xa9\xa1W', 0x0)
write$P9_RATTACH(r0, &(0x7f0000000080)={0x14}, 0xfffffcde)
splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x1000000007ff, 0x0)
r1 = socket(0x2000000000000010, 0x3, 0x0)
ioctl(r1, 0x1000008912, &(0x7f0000000280)="c0dca5055e0bcfec7be070")

08:12:40 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x1500000000000000]}, 0x3c)

08:12:40 executing program 0:
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
write$cgroup_type(r0, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(r0, 0x3, 0x0, 0x10000408001)
write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="e7"], 0x1)

08:12:41 executing program 4:
perf_event_open(&(0x7f000025c000)={0x8000000000000002, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmsg(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340))
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000080)='threaded\x00', 0xfffffc61)

08:12:41 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:12:41 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000002c0)=ANY=[@ANYBLOB="050000000000000000000040050000a90000000000fa00000000e23f0003000001000000000000002560b700ff"])
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, 0x0)

08:12:41 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x1600000000000000]}, 0x3c)

08:12:41 executing program 0:
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000180)=0x8)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(0xffffffffffffffff, 0x3, 0x0, 0x10000408001)
write$binfmt_script(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="e7"], 0x1)

08:12:41 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x1800000000000000]}, 0x3c)

08:12:41 executing program 0:
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000180)=0x8)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(0xffffffffffffffff, 0x3, 0x0, 0x10000408001)
write$binfmt_script(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="e7"], 0x1)

08:12:41 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000002c0)=ANY=[@ANYBLOB="050000000000000000000040050000a90000000000fa00000000e23f0003000001000000000000002560b700ff"])
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[])

08:12:41 executing program 4:
perf_event_open(&(0x7f000025c000)={0x8000000000000002, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmsg(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340))
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000080)='threaded\x00', 0xfffffc61)

08:12:41 executing program 5:
mknod(&(0x7f0000000200)='./bus\x00', 0x100c, 0x0)
r0 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0)
r1 = memfd_create(&(0x7f0000000180)='^posix_acl_accessp\x04p1vk\xee\x05\xdaY\xd4\x8d\x13\x06\xce\\\x89\x18R\xa9{\x05#\a\xf6$\x0fcR\xc8\x15\a\x92]kL\xf5\x1f\x8b\xb9`0d1\x1aA\xc9\x16\n4:\x12\xf1\x82Z/\x02\xb0\x92w\xdd\xbfm\x1e\x12Gh\xbd\x8a\xcej\x19\n\x81\x86\xc9\xdb\xa3G\xa9\xa1W', 0x0)
write$P9_RATTACH(r0, &(0x7f0000000080)={0x14}, 0xfffffcde)
splice(r0, 0x0, r1, 0x0, 0x0, 0x0)
r2 = socket(0x2000000000000010, 0x3, 0x0)
ioctl(r2, 0x1000008912, &(0x7f0000000280)="c0dca5055e0bcfec7be070")

08:12:41 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:12:41 executing program 0:
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000180)=0x8)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(0xffffffffffffffff, 0x3, 0x0, 0x10000408001)
write$binfmt_script(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="e7"], 0x1)

08:12:41 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}, 0x3c)

08:12:41 executing program 4:
perf_event_open(&(0x7f000025c000)={0x8000000000000002, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00\xc7\xec\xac\xd9&{\x0f\x96\xad\xd1\x8fl![\x8f\xb9\f\xca\x1d\xc2{\xee\xb7\x03K\x0f\xa6\xaa;\xf6\x89\xf7b^\xa5\xafI\r\xc4\x9f\v\xf2\x1c\xdc\xddp2\xb7\xbb\x1b\xfev\xea\xed\xe0\xaa\xe8\xceR`\xbb\xf2\xed;pC\x19\xbfn\x16\xaa\x199\xfe.Q\xebvB\xd2\x19&l?\x87\x17H\x1f.\xdbA\x1b\xafz\xe3\xdc};*\xec\xfe\xfa\xfb/\x18g\x80y\xfe\x89', 0x26e1, 0x0)
close(r0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340))
write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffc61)

08:12:41 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000002c0)=ANY=[@ANYBLOB="050000000000000000000040050000a90000000000fa00000000e23f0003000001000000000000002560b700ff"])
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[])

08:12:41 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x8001000000000000]}, 0x3c)

08:12:41 executing program 0:
r0 = creat(0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000180)=0x8)
write$cgroup_type(r0, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(r0, 0x3, 0x0, 0x10000408001)
write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="e7"], 0x1)

08:12:42 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:12:42 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000002c0)=ANY=[@ANYBLOB="050000000000000000000040050000a90000000000fa00000000e23f0003000001000000000000002560b700ff"])
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[])

08:12:42 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0xe4ffffff00000000]}, 0x3c)

08:12:42 executing program 0:
r0 = creat(0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000180)=0x8)
write$cgroup_type(r0, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(r0, 0x3, 0x0, 0x10000408001)
write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="e7"], 0x1)

08:12:42 executing program 5:
mknod(&(0x7f0000000200)='./bus\x00', 0x100c, 0x0)
r0 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0)
r1 = memfd_create(&(0x7f0000000180)='^posix_acl_accessp\x04p1vk\xee\x05\xdaY\xd4\x8d\x13\x06\xce\\\x89\x18R\xa9{\x05#\a\xf6$\x0fcR\xc8\x15\a\x92]kL\xf5\x1f\x8b\xb9`0d1\x1aA\xc9\x16\n4:\x12\xf1\x82Z/\x02\xb0\x92w\xdd\xbfm\x1e\x12Gh\xbd\x8a\xcej\x19\n\x81\x86\xc9\xdb\xa3G\xa9\xa1W', 0x0)
write$P9_RATTACH(r0, &(0x7f0000000080)={0x14}, 0xfffffcde)
splice(r0, 0x0, r1, 0x0, 0x0, 0x0)
r2 = socket(0x2000000000000010, 0x3, 0x0)
ioctl(r2, 0x1000008912, &(0x7f0000000280)="c0dca5055e0bcfec7be070")

08:12:42 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, 0x0, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:12:42 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x3c)

08:12:42 executing program 0:
r0 = creat(0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000180)=0x8)
write$cgroup_type(r0, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(r0, 0x3, 0x0, 0x10000408001)
write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="e7"], 0x1)

08:12:42 executing program 4:
perf_event_open(&(0x7f000025c000)={0x8000000000000002, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00\xc7\xec\xac\xd9&{\x0f\x96\xad\xd1\x8fl![\x8f\xb9\f\xca\x1d\xc2{\xee\xb7\x03K\x0f\xa6\xaa;\xf6\x89\xf7b^\xa5\xafI\r\xc4\x9f\v\xf2\x1c\xdc\xddp2\xb7\xbb\x1b\xfev\xea\xed\xe0\xaa\xe8\xceR`\xbb\xf2\xed;pC\x19\xbfn\x16\xaa\x199\xfe.Q\xebvB\xd2\x19&l?\x87\x17H\x1f.\xdbA\x1b\xafz\xe3\xdc};*\xec\xfe\xfa\xfb/\x18g\x80y\xfe\x89', 0x26e1, 0x0)
close(r0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340))
write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffc61)

08:12:42 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000002c0)=ANY=[@ANYBLOB="050000000000000000000040050000a90000000000fa00000000e23f0003000001000000000000002560b700ff"])
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB])

08:12:42 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x3c)

08:12:42 executing program 0:
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000180)=0x8)
write$cgroup_type(r0, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(r0, 0x3, 0x0, 0x10000408001)
write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="e7"], 0x1)

08:12:42 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, 0x0, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:12:43 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000002c0)=ANY=[@ANYBLOB="050000000000000000000040050000a90000000000fa00000000e23f0003000001000000000000002560b700ff"])
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB])

08:12:43 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x3c)

08:12:43 executing program 0:
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000180)=0x8)
write$cgroup_type(r0, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(r0, 0x3, 0x0, 0x10000408001)
write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="e7"], 0x1)

08:12:43 executing program 5:
mknod(&(0x7f0000000200)='./bus\x00', 0x100c, 0x0)
r0 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0)
r1 = memfd_create(&(0x7f0000000180)='^posix_acl_accessp\x04p1vk\xee\x05\xdaY\xd4\x8d\x13\x06\xce\\\x89\x18R\xa9{\x05#\a\xf6$\x0fcR\xc8\x15\a\x92]kL\xf5\x1f\x8b\xb9`0d1\x1aA\xc9\x16\n4:\x12\xf1\x82Z/\x02\xb0\x92w\xdd\xbfm\x1e\x12Gh\xbd\x8a\xcej\x19\n\x81\x86\xc9\xdb\xa3G\xa9\xa1W', 0x0)
write$P9_RATTACH(r0, &(0x7f0000000080)={0x14}, 0xfffffcde)
splice(r0, 0x0, r1, 0x0, 0x0, 0x0)
r2 = socket(0x2000000000000010, 0x3, 0x0)
ioctl(r2, 0x1000008912, &(0x7f0000000280)="c0dca5055e0bcfec7be070")

08:12:43 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x3c)

08:12:43 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000002c0)=ANY=[@ANYBLOB="050000000000000000000040050000a90000000000fa00000000e23f0003000001000000000000002560b700ff"])
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB])

08:12:43 executing program 0:
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000180)=0x8)
write$cgroup_type(r0, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(r0, 0x3, 0x0, 0x10000408001)
write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="e7"], 0x1)

08:12:43 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00\xc7\xec\xac\xd9&{\x0f\x96\xad\xd1\x8fl![\x8f\xb9\f\xca\x1d\xc2{\xee\xb7\x03K\x0f\xa6\xaa;\xf6\x89\xf7b^\xa5\xafI\r\xc4\x9f\v\xf2\x1c\xdc\xddp2\xb7\xbb\x1b\xfev\xea\xed\xe0\xaa\xe8\xceR`\xbb\xf2\xed;pC\x19\xbfn\x16\xaa\x199\xfe.Q\xebvB\xd2\x19&l?\x87\x17H\x1f.\xdbA\x1b\xafz\xe3\xdc};*\xec\xfe\xfa\xfb/\x18g\x80y\xfe\x89', 0x26e1, 0x0)
close(r0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340))
write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffc61)

08:12:43 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, 0x0, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:12:43 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x3c)

08:12:43 executing program 0:
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0)
write$cgroup_type(r0, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(r0, 0x3, 0x0, 0x10000408001)
write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="e7"], 0x1)

08:12:43 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000002c0)=ANY=[@ANYBLOB="050000000000000000000040050000a90000000000fa00000000e23f0003000001000000000000002560b700ff"])
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000"])

08:12:44 executing program 0:
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0)
write$cgroup_type(r0, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(r0, 0x3, 0x0, 0x10000408001)
write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="e7"], 0x1)

08:12:44 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:12:44 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x3c)

08:12:44 executing program 5:
mknod(&(0x7f0000000200)='./bus\x00', 0x100c, 0x0)
r0 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0)
r1 = memfd_create(&(0x7f0000000180)='^posix_acl_accessp\x04p1vk\xee\x05\xdaY\xd4\x8d\x13\x06\xce\\\x89\x18R\xa9{\x05#\a\xf6$\x0fcR\xc8\x15\a\x92]kL\xf5\x1f\x8b\xb9`0d1\x1aA\xc9\x16\n4:\x12\xf1\x82Z/\x02\xb0\x92w\xdd\xbfm\x1e\x12Gh\xbd\x8a\xcej\x19\n\x81\x86\xc9\xdb\xa3G\xa9\xa1W', 0x0)
write$P9_RATTACH(r0, &(0x7f0000000080)={0x14}, 0xfffffcde)
splice(r0, 0x0, r1, 0x0, 0x1000000007ff, 0x0)
r2 = socket(0x0, 0x3, 0x0)
ioctl(r2, 0x1000008912, &(0x7f0000000280)="c0dca5055e0bcfec7be070")

08:12:44 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, 0x3c)

08:12:44 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000002c0)=ANY=[@ANYBLOB="050000000000000000000040050000a90000000000fa00000000e23f0003000001000000000000002560b700ff"])
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000"])

08:12:44 executing program 0:
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0)
write$cgroup_type(r0, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(r0, 0x3, 0x0, 0x10000408001)
write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="e7"], 0x1)

08:12:44 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00\xc7\xec\xac\xd9&{\x0f\x96\xad\xd1\x8fl![\x8f\xb9\f\xca\x1d\xc2{\xee\xb7\x03K\x0f\xa6\xaa;\xf6\x89\xf7b^\xa5\xafI\r\xc4\x9f\v\xf2\x1c\xdc\xddp2\xb7\xbb\x1b\xfev\xea\xed\xe0\xaa\xe8\xceR`\xbb\xf2\xed;pC\x19\xbfn\x16\xaa\x199\xfe.Q\xebvB\xd2\x19&l?\x87\x17H\x1f.\xdbA\x1b\xafz\xe3\xdc};*\xec\xfe\xfa\xfb/\x18g\x80y\xfe\x89', 0x26e1, 0x0)
close(r0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340))
write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffc61)

08:12:44 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:12:44 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, 0x3c)

08:12:44 executing program 0:
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000180))
write$cgroup_type(r0, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(r0, 0x3, 0x0, 0x10000408001)
write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="e7"], 0x1)

08:12:44 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000002c0)=ANY=[@ANYBLOB="050000000000000000000040050000a90000000000fa00000000e23f0003000001000000000000002560b700ff"])
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000"])

08:12:44 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}, 0x3c)

08:12:45 executing program 0:
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000180))
write$cgroup_type(r0, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(r0, 0x3, 0x0, 0x10000408001)
write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="e7"], 0x1)

08:12:45 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:12:45 executing program 5:
mknod(&(0x7f0000000200)='./bus\x00', 0x100c, 0x0)
r0 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0)
r1 = memfd_create(&(0x7f0000000180)='^posix_acl_accessp\x04p1vk\xee\x05\xdaY\xd4\x8d\x13\x06\xce\\\x89\x18R\xa9{\x05#\a\xf6$\x0fcR\xc8\x15\a\x92]kL\xf5\x1f\x8b\xb9`0d1\x1aA\xc9\x16\n4:\x12\xf1\x82Z/\x02\xb0\x92w\xdd\xbfm\x1e\x12Gh\xbd\x8a\xcej\x19\n\x81\x86\xc9\xdb\xa3G\xa9\xa1W', 0x0)
write$P9_RATTACH(r0, &(0x7f0000000080)={0x14}, 0xfffffcde)
splice(r0, 0x0, r1, 0x0, 0x1000000007ff, 0x0)
r2 = socket(0x0, 0x3, 0x0)
ioctl(r2, 0x1000008912, &(0x7f0000000280)="c0dca5055e0bcfec7be070")

08:12:45 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, 0x3c)

08:12:45 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000002c0)=ANY=[@ANYBLOB="050000000000000000000040050000a90000000000fa00000000e23f0003000001000000000000002560b700ff"])
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000"])

08:12:45 executing program 0:
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000180))
write$cgroup_type(r0, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(r0, 0x3, 0x0, 0x10000408001)
write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="e7"], 0x1)

08:12:45 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00\xc7\xec\xac\xd9&{\x0f\x96\xad\xd1\x8fl![\x8f\xb9\f\xca\x1d\xc2{\xee\xb7\x03K\x0f\xa6\xaa;\xf6\x89\xf7b^\xa5\xafI\r\xc4\x9f\v\xf2\x1c\xdc\xddp2\xb7\xbb\x1b\xfev\xea\xed\xe0\xaa\xe8\xceR`\xbb\xf2\xed;pC\x19\xbfn\x16\xaa\x199\xfe.Q\xebvB\xd2\x19&l?\x87\x17H\x1f.\xdbA\x1b\xafz\xe3\xdc};*\xec\xfe\xfa\xfb/\x18g\x80y\xfe\x89', 0x26e1, 0x0)
close(r0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340))
write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffc61)

08:12:45 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, 0x0, &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:12:45 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}, 0x3c)

08:12:45 executing program 0:
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000180)=0x8)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(r0, 0x3, 0x0, 0x10000408001)
write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="e7"], 0x1)

08:12:45 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000002c0)=ANY=[@ANYBLOB="050000000000000000000040050000a90000000000fa00000000e23f0003000001000000000000002560b700ff"])
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000"])

08:12:45 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, 0x3c)

08:12:45 executing program 0:
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000180)=0x8)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(r0, 0x3, 0x0, 0x10000408001)
write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="e7"], 0x1)

08:12:45 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, 0x0, &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:12:46 executing program 5:
mknod(&(0x7f0000000200)='./bus\x00', 0x100c, 0x0)
r0 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0)
r1 = memfd_create(&(0x7f0000000180)='^posix_acl_accessp\x04p1vk\xee\x05\xdaY\xd4\x8d\x13\x06\xce\\\x89\x18R\xa9{\x05#\a\xf6$\x0fcR\xc8\x15\a\x92]kL\xf5\x1f\x8b\xb9`0d1\x1aA\xc9\x16\n4:\x12\xf1\x82Z/\x02\xb0\x92w\xdd\xbfm\x1e\x12Gh\xbd\x8a\xcej\x19\n\x81\x86\xc9\xdb\xa3G\xa9\xa1W', 0x0)
write$P9_RATTACH(r0, &(0x7f0000000080)={0x14}, 0xfffffcde)
splice(r0, 0x0, r1, 0x0, 0x1000000007ff, 0x0)
r2 = socket(0x0, 0x3, 0x0)
ioctl(r2, 0x1000008912, &(0x7f0000000280)="c0dca5055e0bcfec7be070")

08:12:46 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000002c0)=ANY=[@ANYBLOB="050000000000000000000040050000a90000000000fa00000000e23f0003000001000000000000002560b700ff"])
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000"])

08:12:46 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}, 0x3c)

08:12:46 executing program 0:
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000180)=0x8)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(r0, 0x3, 0x0, 0x10000408001)
write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="e7"], 0x1)

08:12:46 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00\xc7\xec\xac\xd9&{\x0f\x96\xad\xd1\x8fl![\x8f\xb9\f\xca\x1d\xc2{\xee\xb7\x03K\x0f\xa6\xaa;\xf6\x89\xf7b^\xa5\xafI\r\xc4\x9f\v\xf2\x1c\xdc\xddp2\xb7\xbb\x1b\xfev\xea\xed\xe0\xaa\xe8\xceR`\xbb\xf2\xed;pC\x19\xbfn\x16\xaa\x199\xfe.Q\xebvB\xd2\x19&l?\x87\x17H\x1f.\xdbA\x1b\xafz\xe3\xdc};*\xec\xfe\xfa\xfb/\x18g\x80y\xfe\x89', 0x26e1, 0x0)
close(r0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340))
write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffc61)

08:12:46 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000002c0)=ANY=[@ANYBLOB="050000000000000000000040050000a90000000000fa00000000e23f0003000001000000000000002560b700ff"])
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000000000090"])

08:12:46 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, 0x0, &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:12:46 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf]}, 0x3c)

08:12:46 executing program 0:
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000180)=0x8)
write$cgroup_type(r0, 0x0, 0x0)
fallocate(r0, 0x3, 0x0, 0x10000408001)
write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="e7"], 0x1)

08:12:46 executing program 5:
mknod(&(0x7f0000000200)='./bus\x00', 0x100c, 0x0)
r0 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0)
r1 = memfd_create(&(0x7f0000000180)='^posix_acl_accessp\x04p1vk\xee\x05\xdaY\xd4\x8d\x13\x06\xce\\\x89\x18R\xa9{\x05#\a\xf6$\x0fcR\xc8\x15\a\x92]kL\xf5\x1f\x8b\xb9`0d1\x1aA\xc9\x16\n4:\x12\xf1\x82Z/\x02\xb0\x92w\xdd\xbfm\x1e\x12Gh\xbd\x8a\xcej\x19\n\x81\x86\xc9\xdb\xa3G\xa9\xa1W', 0x0)
write$P9_RATTACH(r0, &(0x7f0000000080)={0x14}, 0xfffffcde)
splice(r0, 0x0, r1, 0x0, 0x1000000007ff, 0x0)
r2 = socket(0x2000000000000010, 0x0, 0x0)
ioctl(r2, 0x1000008912, &(0x7f0000000280)="c0dca5055e0bcfec7be070")

08:12:46 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x10]}, 0x3c)

08:12:46 executing program 0:
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000180)=0x8)
write$cgroup_type(r0, 0x0, 0x0)
fallocate(r0, 0x3, 0x0, 0x10000408001)
write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="e7"], 0x1)

08:12:46 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:12:46 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000002c0)=ANY=[@ANYBLOB="050000000000000000000040050000a90000000000fa00000000e23f0003000001000000000000002560b700ff"])
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000000000090"])

08:12:47 executing program 0:
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000180)=0x8)
write$cgroup_type(r0, 0x0, 0x0)
fallocate(r0, 0x3, 0x0, 0x10000408001)
write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="e7"], 0x1)

08:12:47 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x11]}, 0x3c)

08:12:47 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00\xc7\xec\xac\xd9&{\x0f\x96\xad\xd1\x8fl![\x8f\xb9\f\xca\x1d\xc2{\xee\xb7\x03K\x0f\xa6\xaa;\xf6\x89\xf7b^\xa5\xafI\r\xc4\x9f\v\xf2\x1c\xdc\xddp2\xb7\xbb\x1b\xfev\xea\xed\xe0\xaa\xe8\xceR`\xbb\xf2\xed;pC\x19\xbfn\x16\xaa\x199\xfe.Q\xebvB\xd2\x19&l?\x87\x17H\x1f.\xdbA\x1b\xafz\xe3\xdc};*\xec\xfe\xfa\xfb/\x18g\x80y\xfe\x89', 0x26e1, 0x0)
close(r0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340))
write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffc61)

08:12:47 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000002c0)=ANY=[@ANYBLOB="050000000000000000000040050000a90000000000fa00000000e23f0003000001000000000000002560b700ff"])
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000000000090"])

08:12:47 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:12:47 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x12]}, 0x3c)

08:12:47 executing program 0:
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000180)=0x8)
write$cgroup_type(r0, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(0xffffffffffffffff, 0x3, 0x0, 0x10000408001)
write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="e7"], 0x1)

08:12:47 executing program 5:
mknod(&(0x7f0000000200)='./bus\x00', 0x100c, 0x0)
r0 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0)
r1 = memfd_create(&(0x7f0000000180)='^posix_acl_accessp\x04p1vk\xee\x05\xdaY\xd4\x8d\x13\x06\xce\\\x89\x18R\xa9{\x05#\a\xf6$\x0fcR\xc8\x15\a\x92]kL\xf5\x1f\x8b\xb9`0d1\x1aA\xc9\x16\n4:\x12\xf1\x82Z/\x02\xb0\x92w\xdd\xbfm\x1e\x12Gh\xbd\x8a\xcej\x19\n\x81\x86\xc9\xdb\xa3G\xa9\xa1W', 0x0)
write$P9_RATTACH(r0, &(0x7f0000000080)={0x14}, 0xfffffcde)
splice(r0, 0x0, r1, 0x0, 0x1000000007ff, 0x0)
r2 = socket(0x2000000000000010, 0x0, 0x0)
ioctl(r2, 0x1000008912, &(0x7f0000000280)="c0dca5055e0bcfec7be070")

08:12:47 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x13]}, 0x3c)

08:12:47 executing program 0:
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000180)=0x8)
write$cgroup_type(r0, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(0xffffffffffffffff, 0x3, 0x0, 0x10000408001)
write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="e7"], 0x1)

08:12:47 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = creat(&(0x7f0000000300)='./file1\x00', 0x8)
write$P9_RREADLINK(r0, 0x0, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
pipe(&(0x7f00000002c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r4=>0x0})
ioprio_get$pid(0x1, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0)
vmsplice(r2, &(0x7f0000000000)=[{0x0}], 0x1, 0x0)
sendmsg$TIPC_NL_BEARER_ENABLE(r1, 0x0, 0x0)
ioperm(0x9, 0x2, 0x400)

08:12:47 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:12:47 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x14]}, 0x3c)

08:12:48 executing program 0:
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000180)=0x8)
write$cgroup_type(r0, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(0xffffffffffffffff, 0x3, 0x0, 0x10000408001)
write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="e7"], 0x1)

08:12:48 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00\xc7\xec\xac\xd9&{\x0f\x96\xad\xd1\x8fl![\x8f\xb9\f\xca\x1d\xc2{\xee\xb7\x03K\x0f\xa6\xaa;\xf6\x89\xf7b^\xa5\xafI\r\xc4\x9f\v\xf2\x1c\xdc\xddp2\xb7\xbb\x1b\xfev\xea\xed\xe0\xaa\xe8\xceR`\xbb\xf2\xed;pC\x19\xbfn\x16\xaa\x199\xfe.Q\xebvB\xd2\x19&l?\x87\x17H\x1f.\xdbA\x1b\xafz\xe3\xdc};*\xec\xfe\xfa\xfb/\x18g\x80y\xfe\x89', 0x26e1, 0x0)
close(r0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340))
write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffc61)

08:12:48 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x15]}, 0x3c)

08:12:48 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r1=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r1}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, 0x0)
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:12:48 executing program 0:
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000180)=0x8)
write$cgroup_type(r0, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(r0, 0x0, 0x0, 0x10000408001)
write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="e7"], 0x1)

08:12:48 executing program 5:
mknod(&(0x7f0000000200)='./bus\x00', 0x100c, 0x0)
r0 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0)
r1 = memfd_create(&(0x7f0000000180)='^posix_acl_accessp\x04p1vk\xee\x05\xdaY\xd4\x8d\x13\x06\xce\\\x89\x18R\xa9{\x05#\a\xf6$\x0fcR\xc8\x15\a\x92]kL\xf5\x1f\x8b\xb9`0d1\x1aA\xc9\x16\n4:\x12\xf1\x82Z/\x02\xb0\x92w\xdd\xbfm\x1e\x12Gh\xbd\x8a\xcej\x19\n\x81\x86\xc9\xdb\xa3G\xa9\xa1W', 0x0)
write$P9_RATTACH(r0, &(0x7f0000000080)={0x14}, 0xfffffcde)
splice(r0, 0x0, r1, 0x0, 0x1000000007ff, 0x0)
r2 = socket(0x2000000000000010, 0x0, 0x0)
ioctl(r2, 0x1000008912, &(0x7f0000000280)="c0dca5055e0bcfec7be070")

08:12:48 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x16]}, 0x3c)

08:12:48 executing program 0:
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000180)=0x8)
write$cgroup_type(r0, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(r0, 0x0, 0x0, 0x10000408001)
write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="e7"], 0x1)

08:12:48 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r1=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r1}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, 0x0)
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:12:48 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc018ae85, &(0x7f0000000140)={0x7b, 0x2, [], [0xc1]})

08:12:48 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x18]}, 0x3c)

08:12:48 executing program 0:
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000180)=0x8)
write$cgroup_type(r0, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(r0, 0x0, 0x0, 0x10000408001)
write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="e7"], 0x1)

08:12:49 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r1=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r1}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, 0x0)
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:12:49 executing program 4:
perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00\xc7\xec\xac\xd9&{\x0f\x96\xad\xd1\x8fl![\x8f\xb9\f\xca\x1d\xc2{\xee\xb7\x03K\x0f\xa6\xaa;\xf6\x89\xf7b^\xa5\xafI\r\xc4\x9f\v\xf2\x1c\xdc\xddp2\xb7\xbb\x1b\xfev\xea\xed\xe0\xaa\xe8\xceR`\xbb\xf2\xed;pC\x19\xbfn\x16\xaa\x199\xfe.Q\xebvB\xd2\x19&l?\x87\x17H\x1f.\xdbA\x1b\xafz\xe3\xdc};*\xec\xfe\xfa\xfb/\x18g\x80y\xfe\x89', 0x26e1, 0x0)
close(r0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340))
write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffc61)

08:12:49 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x180]}, 0x3c)

08:12:49 executing program 2:

08:12:49 executing program 0:
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000180)=0x8)
write$cgroup_type(r0, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(r0, 0x3, 0x0, 0x0)
write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="e7"], 0x1)

08:12:49 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r1=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r1}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:12:49 executing program 5:
mknod(&(0x7f0000000200)='./bus\x00', 0x100c, 0x0)
r0 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0)
r1 = memfd_create(&(0x7f0000000180)='^posix_acl_accessp\x04p1vk\xee\x05\xdaY\xd4\x8d\x13\x06\xce\\\x89\x18R\xa9{\x05#\a\xf6$\x0fcR\xc8\x15\a\x92]kL\xf5\x1f\x8b\xb9`0d1\x1aA\xc9\x16\n4:\x12\xf1\x82Z/\x02\xb0\x92w\xdd\xbfm\x1e\x12Gh\xbd\x8a\xcej\x19\n\x81\x86\xc9\xdb\xa3G\xa9\xa1W', 0x0)
write$P9_RATTACH(r0, &(0x7f0000000080)={0x14}, 0xfffffcde)
splice(r0, 0x0, r1, 0x0, 0x1000000007ff, 0x0)
socket(0x2000000000000010, 0x3, 0x0)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000280)="c0dca5055e0bcfec7be070")

08:12:49 executing program 2:

08:12:49 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}, 0x3c)

08:12:49 executing program 0:
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000180)=0x8)
write$cgroup_type(r0, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(r0, 0x3, 0x0, 0x0)
write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="e7"], 0x1)

08:12:49 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r1=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r1}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:12:49 executing program 2:
r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
read$eventfd(r0, 0x0, 0x0)

08:12:49 executing program 4:
perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00\xc7\xec\xac\xd9&{\x0f\x96\xad\xd1\x8fl![\x8f\xb9\f\xca\x1d\xc2{\xee\xb7\x03K\x0f\xa6\xaa;\xf6\x89\xf7b^\xa5\xafI\r\xc4\x9f\v\xf2\x1c\xdc\xddp2\xb7\xbb\x1b\xfev\xea\xed\xe0\xaa\xe8\xceR`\xbb\xf2\xed;pC\x19\xbfn\x16\xaa\x199\xfe.Q\xebvB\xd2\x19&l?\x87\x17H\x1f.\xdbA\x1b\xafz\xe3\xdc};*\xec\xfe\xfa\xfb/\x18g\x80y\xfe\x89', 0x26e1, 0x0)
close(r0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340))
write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffc61)

08:12:49 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x500]}, 0x3c)

08:12:49 executing program 0:
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000180)=0x8)
write$cgroup_type(r0, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(r0, 0x3, 0x0, 0x0)
write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="e7"], 0x1)

08:12:50 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r1=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r1}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:12:50 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}, 0x3c)

08:12:50 executing program 0:
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000180)=0x8)
write$cgroup_type(r0, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(r0, 0x3, 0x0, 0x10000408001)
write$binfmt_script(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="e7"], 0x1)

08:12:50 executing program 5:
mknod(&(0x7f0000000200)='./bus\x00', 0x100c, 0x0)
r0 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0)
r1 = memfd_create(&(0x7f0000000180)='^posix_acl_accessp\x04p1vk\xee\x05\xdaY\xd4\x8d\x13\x06\xce\\\x89\x18R\xa9{\x05#\a\xf6$\x0fcR\xc8\x15\a\x92]kL\xf5\x1f\x8b\xb9`0d1\x1aA\xc9\x16\n4:\x12\xf1\x82Z/\x02\xb0\x92w\xdd\xbfm\x1e\x12Gh\xbd\x8a\xcej\x19\n\x81\x86\xc9\xdb\xa3G\xa9\xa1W', 0x0)
write$P9_RATTACH(r0, &(0x7f0000000080)={0x14}, 0xfffffcde)
splice(r0, 0x0, r1, 0x0, 0x1000000007ff, 0x0)
socket(0x2000000000000010, 0x3, 0x0)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000280)="c0dca5055e0bcfec7be070")

08:12:50 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x700]}, 0x3c)

08:12:50 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:12:50 executing program 0:
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000180)=0x8)
write$cgroup_type(r0, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(r0, 0x3, 0x0, 0x10000408001)
write$binfmt_script(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="e7"], 0x1)

08:12:50 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x900]}, 0x3c)

08:12:50 executing program 2:
mknod(&(0x7f0000000100)='./bus\x00', 0x8000, 0x86128)
r0 = open(&(0x7f0000000180)='./bus\x00', 0x1, 0x0)
pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)="fa1204a49155ce1e00", 0x9}], 0x1, 0x0)
writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000200)='\r', 0x1}], 0x1)
writev(r0, &(0x7f0000001240)=[{&(0x7f0000000240)="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", 0x49a}], 0x1)

08:12:50 executing program 4:
perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00\xc7\xec\xac\xd9&{\x0f\x96\xad\xd1\x8fl![\x8f\xb9\f\xca\x1d\xc2{\xee\xb7\x03K\x0f\xa6\xaa;\xf6\x89\xf7b^\xa5\xafI\r\xc4\x9f\v\xf2\x1c\xdc\xddp2\xb7\xbb\x1b\xfev\xea\xed\xe0\xaa\xe8\xceR`\xbb\xf2\xed;pC\x19\xbfn\x16\xaa\x199\xfe.Q\xebvB\xd2\x19&l?\x87\x17H\x1f.\xdbA\x1b\xafz\xe3\xdc};*\xec\xfe\xfa\xfb/\x18g\x80y\xfe\x89', 0x26e1, 0x0)
close(r0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340))
write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffc61)

08:12:50 executing program 0:
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000180)=0x8)
write$cgroup_type(r0, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(r0, 0x3, 0x0, 0x10000408001)
write$binfmt_script(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="e7"], 0x1)

08:12:50 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:12:50 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xa00]}, 0x3c)

08:12:50 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xb00]}, 0x3c)

08:12:50 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070")
clone(0x2102005ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
clone(0x8000000b01ffff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
syz_open_procfs(0x0, 0x0)
exit_group(0x0)
ptrace(0x4206, r1)
wait4(0x0, 0x0, 0x0, 0x0)

08:12:51 executing program 5:
mknod(&(0x7f0000000200)='./bus\x00', 0x100c, 0x0)
r0 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0)
r1 = memfd_create(&(0x7f0000000180)='^posix_acl_accessp\x04p1vk\xee\x05\xdaY\xd4\x8d\x13\x06\xce\\\x89\x18R\xa9{\x05#\a\xf6$\x0fcR\xc8\x15\a\x92]kL\xf5\x1f\x8b\xb9`0d1\x1aA\xc9\x16\n4:\x12\xf1\x82Z/\x02\xb0\x92w\xdd\xbfm\x1e\x12Gh\xbd\x8a\xcej\x19\n\x81\x86\xc9\xdb\xa3G\xa9\xa1W', 0x0)
write$P9_RATTACH(r0, &(0x7f0000000080)={0x14}, 0xfffffcde)
splice(r0, 0x0, r1, 0x0, 0x1000000007ff, 0x0)
socket(0x2000000000000010, 0x3, 0x0)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000280)="c0dca5055e0bcfec7be070")

08:12:51 executing program 0:
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000180)=0x8)
write$cgroup_type(r0, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(r0, 0x3, 0x0, 0x10000408001)
write$binfmt_script(r0, 0x0, 0x0)

08:12:51 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:12:51 executing program 2:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)
getuid()

08:12:51 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xc00]}, 0x3c)

08:12:51 executing program 0:
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000180)=0x8)
write$cgroup_type(r0, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(r0, 0x3, 0x0, 0x10000408001)
write$binfmt_script(r0, 0x0, 0x0)

[  618.674256][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  618.680145][    C0] protocol 88fb is buggy, dev hsr_slave_1
08:12:51 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xd00]}, 0x3c)

08:12:51 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(0x0, 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:12:51 executing program 4:
perf_event_open(&(0x7f000025c000)={0x8000000000000002, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00\xc7\xec\xac\xd9&{\x0f\x96\xad\xd1\x8fl![\x8f\xb9\f\xca\x1d\xc2{\xee\xb7\x03K\x0f\xa6\xaa;\xf6\x89\xf7b^\xa5\xafI\r\xc4\x9f\v\xf2\x1c\xdc\xddp2\xb7\xbb\x1b\xfev\xea\xed\xe0\xaa\xe8\xceR`\xbb\xf2\xed;pC\x19\xbfn\x16\xaa\x199\xfe.Q\xebvB\xd2\x19&l?\x87\x17H\x1f.\xdbA\x1b\xafz\xe3\xdc};*\xec\xfe\xfa\xfb/\x18g\x80y\xfe\x89', 0x26e1, 0x0)
close(r0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340))
write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffc61)

08:12:51 executing program 0:
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000180)=0x8)
write$cgroup_type(r0, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(r0, 0x3, 0x0, 0x10000408001)
write$binfmt_script(r0, 0x0, 0x0)

08:12:51 executing program 0:
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000180)=0x8)
write$cgroup_type(r0, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(r0, 0x3, 0x0, 0x10000408001)
write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x0)

08:12:51 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xe00]}, 0x3c)

08:12:52 executing program 5:
mknod(&(0x7f0000000200)='./bus\x00', 0x100c, 0x0)
r0 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0)
r1 = memfd_create(&(0x7f0000000180)='^posix_acl_accessp\x04p1vk\xee\x05\xdaY\xd4\x8d\x13\x06\xce\\\x89\x18R\xa9{\x05#\a\xf6$\x0fcR\xc8\x15\a\x92]kL\xf5\x1f\x8b\xb9`0d1\x1aA\xc9\x16\n4:\x12\xf1\x82Z/\x02\xb0\x92w\xdd\xbfm\x1e\x12Gh\xbd\x8a\xcej\x19\n\x81\x86\xc9\xdb\xa3G\xa9\xa1W', 0x0)
write$P9_RATTACH(r0, &(0x7f0000000080)={0x14}, 0xfffffcde)
splice(r0, 0x0, r1, 0x0, 0x1000000007ff, 0x0)
r2 = socket(0x2000000000000010, 0x3, 0x0)
ioctl(r2, 0x0, &(0x7f0000000280)="c0dca5055e0bcfec7be070")

08:12:52 executing program 2:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)
getuid()

08:12:52 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(0x0, 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:12:52 executing program 0:
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000180)=0x8)
write$cgroup_type(r0, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(r0, 0x3, 0x0, 0x10000408001)
write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x0)

08:12:52 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf00]}, 0x3c)

08:12:52 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1100]}, 0x3c)

08:12:52 executing program 0:
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000180)=0x8)
write$cgroup_type(r0, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(r0, 0x3, 0x0, 0x10000408001)
write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x0)

08:12:52 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1200]}, 0x3c)

[  619.634293][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  619.640171][    C0] protocol 88fb is buggy, dev hsr_slave_1
08:12:52 executing program 4:
perf_event_open(&(0x7f000025c000)={0x8000000000000002, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00\xc7\xec\xac\xd9&{\x0f\x96\xad\xd1\x8fl![\x8f\xb9\f\xca\x1d\xc2{\xee\xb7\x03K\x0f\xa6\xaa;\xf6\x89\xf7b^\xa5\xafI\r\xc4\x9f\v\xf2\x1c\xdc\xddp2\xb7\xbb\x1b\xfev\xea\xed\xe0\xaa\xe8\xceR`\xbb\xf2\xed;pC\x19\xbfn\x16\xaa\x199\xfe.Q\xebvB\xd2\x19&l?\x87\x17H\x1f.\xdbA\x1b\xafz\xe3\xdc};*\xec\xfe\xfa\xfb/\x18g\x80y\xfe\x89', 0x26e1, 0x0)
close(r0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340))
write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffc61)

08:12:52 executing program 5:
mknod(&(0x7f0000000200)='./bus\x00', 0x100c, 0x0)
r0 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0)
r1 = memfd_create(&(0x7f0000000180)='^posix_acl_accessp\x04p1vk\xee\x05\xdaY\xd4\x8d\x13\x06\xce\\\x89\x18R\xa9{\x05#\a\xf6$\x0fcR\xc8\x15\a\x92]kL\xf5\x1f\x8b\xb9`0d1\x1aA\xc9\x16\n4:\x12\xf1\x82Z/\x02\xb0\x92w\xdd\xbfm\x1e\x12Gh\xbd\x8a\xcej\x19\n\x81\x86\xc9\xdb\xa3G\xa9\xa1W', 0x0)
write$P9_RATTACH(r0, &(0x7f0000000080)={0x14}, 0xfffffcde)
splice(r0, 0x0, r1, 0x0, 0x1000000007ff, 0x0)
r2 = socket(0x2000000000000010, 0x3, 0x0)
ioctl(r2, 0x0, &(0x7f0000000280)="c0dca5055e0bcfec7be070")

08:12:52 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(0x0, 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:12:52 executing program 0:
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000180)=0x8)
write$cgroup_type(r0, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(r0, 0x3, 0x0, 0x10000408001)
write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0)

08:12:52 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1300]}, 0x3c)

[  619.954302][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  619.960134][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  620.034602][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  620.040943][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  620.194417][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  620.200270][    C0] protocol 88fb is buggy, dev hsr_slave_1
08:12:53 executing program 2:
r0 = socket$packet(0x11, 0x2, 0x300)
geteuid()
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
sendmmsg(r0, &(0x7f00000002c0)=[{{&(0x7f0000000080)=@nfc={0x27, 0x2}, 0x80, 0x0}}], 0x1, 0x0)

08:12:53 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1400]}, 0x3c)

08:12:53 executing program 0:
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000180)=0x8)
write$cgroup_type(r0, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(r0, 0x3, 0x0, 0x10000408001)
write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0)

08:12:53 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x0)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:12:53 executing program 5:
mknod(&(0x7f0000000200)='./bus\x00', 0x100c, 0x0)
r0 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0)
r1 = memfd_create(&(0x7f0000000180)='^posix_acl_accessp\x04p1vk\xee\x05\xdaY\xd4\x8d\x13\x06\xce\\\x89\x18R\xa9{\x05#\a\xf6$\x0fcR\xc8\x15\a\x92]kL\xf5\x1f\x8b\xb9`0d1\x1aA\xc9\x16\n4:\x12\xf1\x82Z/\x02\xb0\x92w\xdd\xbfm\x1e\x12Gh\xbd\x8a\xcej\x19\n\x81\x86\xc9\xdb\xa3G\xa9\xa1W', 0x0)
write$P9_RATTACH(r0, &(0x7f0000000080)={0x14}, 0xfffffcde)
splice(r0, 0x0, r1, 0x0, 0x1000000007ff, 0x0)
r2 = socket(0x2000000000000010, 0x3, 0x0)
ioctl(r2, 0x0, &(0x7f0000000280)="c0dca5055e0bcfec7be070")

08:12:53 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1500]}, 0x3c)

08:12:53 executing program 0:
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000180)=0x8)
write$cgroup_type(r0, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(r0, 0x3, 0x0, 0x10000408001)
write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0)

08:12:53 executing program 4:
perf_event_open(&(0x7f000025c000)={0x8000000000000002, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00\xc7\xec\xac\xd9&{\x0f\x96\xad\xd1\x8fl![\x8f\xb9\f\xca\x1d\xc2{\xee\xb7\x03K\x0f\xa6\xaa;\xf6\x89\xf7b^\xa5\xafI\r\xc4\x9f\v\xf2\x1c\xdc\xddp2\xb7\xbb\x1b\xfev\xea\xed\xe0\xaa\xe8\xceR`\xbb\xf2\xed;pC\x19\xbfn\x16\xaa\x199\xfe.Q\xebvB\xd2\x19&l?\x87\x17H\x1f.\xdbA\x1b\xafz\xe3\xdc};*\xec\xfe\xfa\xfb/\x18g\x80y\xfe\x89', 0x26e1, 0x0)
close(r0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340))
write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffc61)

08:12:53 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x0)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:12:53 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1600]}, 0x3c)

08:12:53 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070")
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f0000000340)='memory.high\x00', 0x2, 0x0)
write$binfmt_aout(r2, &(0x7f0000000200)=ANY=[@ANYRESOCT, @ANYRESOCT=0x0], 0x2e)

08:12:53 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1800]}, 0x3c)

08:12:53 executing program 2:

08:12:54 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070")
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f0000000340)='memory.high\x00', 0x2, 0x0)
write$binfmt_aout(r2, &(0x7f0000000200)=ANY=[@ANYRESOCT, @ANYRESOCT=0x0], 0x2e)

08:12:54 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x0)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:12:54 executing program 2:

08:12:54 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070")
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f0000000340)='memory.high\x00', 0x2, 0x0)
write$binfmt_aout(r2, &(0x7f0000000200)=ANY=[@ANYRESOCT, @ANYRESOCT=0x0], 0x2e)

08:12:54 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}, 0x3c)

08:12:54 executing program 2:

08:12:54 executing program 4:
perf_event_open(&(0x7f000025c000)={0x8000000000000002, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
close(r0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340))
write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffc61)

08:12:54 executing program 5:
mknod(&(0x7f0000000200)='./bus\x00', 0x100c, 0x0)
r0 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0)
r1 = memfd_create(&(0x7f0000000180)='^posix_acl_accessp\x04p1vk\xee\x05\xdaY\xd4\x8d\x13\x06\xce\\\x89\x18R\xa9{\x05#\a\xf6$\x0fcR\xc8\x15\a\x92]kL\xf5\x1f\x8b\xb9`0d1\x1aA\xc9\x16\n4:\x12\xf1\x82Z/\x02\xb0\x92w\xdd\xbfm\x1e\x12Gh\xbd\x8a\xcej\x19\n\x81\x86\xc9\xdb\xa3G\xa9\xa1W', 0x0)
write$P9_RATTACH(r0, &(0x7f0000000080)={0x14}, 0xfffffcde)
splice(r0, 0x0, r1, 0x0, 0x1000000007ff, 0x0)
r2 = socket(0x2000000000000010, 0x3, 0x0)
ioctl(r2, 0x1000008912, 0x0)

08:12:54 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(0x0, &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:12:54 executing program 2:

08:12:54 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x400000]}, 0x3c)

08:12:54 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070")
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f0000000340)='memory.high\x00', 0x2, 0x0)
write$binfmt_aout(r2, &(0x7f0000000200)=ANY=[@ANYRESOCT, @ANYRESOCT=0x0], 0x2e)

08:12:54 executing program 2:

08:12:54 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff]}, 0x3c)

08:12:54 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(0x0, &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:12:55 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070")
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYRESOCT, @ANYRESOCT=0x0], 0x2e)

08:12:55 executing program 2:

08:12:55 executing program 4:
perf_event_open(&(0x7f000025c000)={0x8000000000000002, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
close(r0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340))
write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffc61)

08:12:55 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}, 0x3c)

08:12:55 executing program 5:
mknod(&(0x7f0000000200)='./bus\x00', 0x100c, 0x0)
r0 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0)
r1 = memfd_create(&(0x7f0000000180)='^posix_acl_accessp\x04p1vk\xee\x05\xdaY\xd4\x8d\x13\x06\xce\\\x89\x18R\xa9{\x05#\a\xf6$\x0fcR\xc8\x15\a\x92]kL\xf5\x1f\x8b\xb9`0d1\x1aA\xc9\x16\n4:\x12\xf1\x82Z/\x02\xb0\x92w\xdd\xbfm\x1e\x12Gh\xbd\x8a\xcej\x19\n\x81\x86\xc9\xdb\xa3G\xa9\xa1W', 0x0)
write$P9_RATTACH(r0, &(0x7f0000000080)={0x14}, 0xfffffcde)
splice(r0, 0x0, r1, 0x0, 0x1000000007ff, 0x0)
r2 = socket(0x2000000000000010, 0x3, 0x0)
ioctl(r2, 0x1000008912, 0x0)

08:12:55 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(0x0, &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:12:55 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070")
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYRESOCT, @ANYRESOCT=0x0], 0x2e)

08:12:55 executing program 2:

08:12:55 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x3c)

08:12:55 executing program 4:
perf_event_open(&(0x7f000025c000)={0x8000000000000002, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
close(r0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340))
write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffc61)

08:12:55 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000]}, 0x3c)

08:12:55 executing program 2:

08:12:55 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070")
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYRESOCT, @ANYRESOCT=0x0], 0x2e)

08:12:55 executing program 4:
perf_event_open(&(0x7f000025c000)={0x8000000000000002, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00\xc7\xec\xac\xd9&{\x0f\x96\xad\xd1\x8fl![\x8f\xb9\f\xca\x1d\xc2{\xee\xb7\x03K\x0f\xa6\xaa;\xf6\x89\xf7b^\xa5\xafI\r\xc4\x9f\v\xf2\x1c\xdc\xddp2\xb7\xbb\x1b\xfev\xea\xed\xe0\xaa\xe8\xceR`\xbb\xf2\xed;pC\x19\xbfn\x16\xaa\x199\xfe.Q\xebvB\xd2\x19&l?\x87\x17H\x1f.\xdbA\x1b\xafz\xe3\xdc};*\xec\xfe\xfa\xfb/\x18g\x80y\xfe\x89', 0x26e1, 0x0)
close(0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340))
write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffc61)

08:12:55 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', 0x0)
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:12:55 executing program 2:

08:12:56 executing program 5:
mknod(&(0x7f0000000200)='./bus\x00', 0x100c, 0x0)
r0 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0)
r1 = memfd_create(&(0x7f0000000180)='^posix_acl_accessp\x04p1vk\xee\x05\xdaY\xd4\x8d\x13\x06\xce\\\x89\x18R\xa9{\x05#\a\xf6$\x0fcR\xc8\x15\a\x92]kL\xf5\x1f\x8b\xb9`0d1\x1aA\xc9\x16\n4:\x12\xf1\x82Z/\x02\xb0\x92w\xdd\xbfm\x1e\x12Gh\xbd\x8a\xcej\x19\n\x81\x86\xc9\xdb\xa3G\xa9\xa1W', 0x0)
write$P9_RATTACH(r0, &(0x7f0000000080)={0x14}, 0xfffffcde)
splice(r0, 0x0, r1, 0x0, 0x1000000007ff, 0x0)
r2 = socket(0x2000000000000010, 0x3, 0x0)
ioctl(r2, 0x1000008912, 0x0)

08:12:56 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}, 0x3c)

08:12:56 executing program 2:

08:12:56 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', 0x0)
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:12:56 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070")
r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000340)='memory.high\x00', 0x2, 0x0)
write$binfmt_aout(r1, &(0x7f0000000200)=ANY=[@ANYRESOCT, @ANYRESOCT=0x0], 0x2e)

08:12:56 executing program 2:

08:12:56 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000]}, 0x3c)

08:12:56 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070")
r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000340)='memory.high\x00', 0x2, 0x0)
write$binfmt_aout(r1, &(0x7f0000000200)=ANY=[@ANYRESOCT, @ANYRESOCT=0x0], 0x2e)

08:12:56 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', 0x0)
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:12:56 executing program 4:
perf_event_open(&(0x7f000025c000)={0x8000000000000002, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00\xc7\xec\xac\xd9&{\x0f\x96\xad\xd1\x8fl![\x8f\xb9\f\xca\x1d\xc2{\xee\xb7\x03K\x0f\xa6\xaa;\xf6\x89\xf7b^\xa5\xafI\r\xc4\x9f\v\xf2\x1c\xdc\xddp2\xb7\xbb\x1b\xfev\xea\xed\xe0\xaa\xe8\xceR`\xbb\xf2\xed;pC\x19\xbfn\x16\xaa\x199\xfe.Q\xebvB\xd2\x19&l?\x87\x17H\x1f.\xdbA\x1b\xafz\xe3\xdc};*\xec\xfe\xfa\xfb/\x18g\x80y\xfe\x89', 0x26e1, 0x0)
close(0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340))
write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffc61)

08:12:56 executing program 2:

08:12:56 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000]}, 0x3c)

08:12:57 executing program 5:
mknod(&(0x7f0000000200)='./bus\x00', 0x100c, 0x0)
r0 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0)
r1 = memfd_create(&(0x7f0000000180)='^posix_acl_accessp\x04p1vk\xee\x05\xdaY\xd4\x8d\x13\x06\xce\\\x89\x18R\xa9{\x05#\a\xf6$\x0fcR\xc8\x15\a\x92]kL\xf5\x1f\x8b\xb9`0d1\x1aA\xc9\x16\n4:\x12\xf1\x82Z/\x02\xb0\x92w\xdd\xbfm\x1e\x12Gh\xbd\x8a\xcej\x19\n\x81\x86\xc9\xdb\xa3G\xa9\xa1W', 0x0)
write$P9_RATTACH(r0, &(0x7f0000000080)={0x14}, 0xfffffcde)
splice(r0, 0x0, r1, 0x0, 0x1000000007ff, 0x0)
r2 = socket(0x2000000000000010, 0x3, 0x0)
ioctl(r2, 0x1000008912, &(0x7f0000000280))

08:12:57 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070")
r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000340)='memory.high\x00', 0x2, 0x0)
write$binfmt_aout(r1, &(0x7f0000000200)=ANY=[@ANYRESOCT, @ANYRESOCT=0x0], 0x2e)

08:12:57 executing program 2:

08:12:57 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:12:57 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000]}, 0x3c)

08:12:57 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000]}, 0x3c)

08:12:57 executing program 2:

08:12:57 executing program 0:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000340)='memory.high\x00', 0x2, 0x0)
write$binfmt_aout(r1, &(0x7f0000000200)=ANY=[@ANYRESOCT, @ANYRESOCT=0x0], 0x2e)

08:12:57 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:12:57 executing program 4:
perf_event_open(&(0x7f000025c000)={0x8000000000000002, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00\xc7\xec\xac\xd9&{\x0f\x96\xad\xd1\x8fl![\x8f\xb9\f\xca\x1d\xc2{\xee\xb7\x03K\x0f\xa6\xaa;\xf6\x89\xf7b^\xa5\xafI\r\xc4\x9f\v\xf2\x1c\xdc\xddp2\xb7\xbb\x1b\xfev\xea\xed\xe0\xaa\xe8\xceR`\xbb\xf2\xed;pC\x19\xbfn\x16\xaa\x199\xfe.Q\xebvB\xd2\x19&l?\x87\x17H\x1f.\xdbA\x1b\xafz\xe3\xdc};*\xec\xfe\xfa\xfb/\x18g\x80y\xfe\x89', 0x26e1, 0x0)
close(0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340))
write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffc61)

08:12:57 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000]}, 0x3c)

08:12:57 executing program 0:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000340)='memory.high\x00', 0x2, 0x0)
write$binfmt_aout(r1, &(0x7f0000000200)=ANY=[@ANYRESOCT, @ANYRESOCT=0x0], 0x2e)

08:12:58 executing program 5:
mknod(&(0x7f0000000200)='./bus\x00', 0x100c, 0x0)
r0 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0)
r1 = memfd_create(&(0x7f0000000180)='^posix_acl_accessp\x04p1vk\xee\x05\xdaY\xd4\x8d\x13\x06\xce\\\x89\x18R\xa9{\x05#\a\xf6$\x0fcR\xc8\x15\a\x92]kL\xf5\x1f\x8b\xb9`0d1\x1aA\xc9\x16\n4:\x12\xf1\x82Z/\x02\xb0\x92w\xdd\xbfm\x1e\x12Gh\xbd\x8a\xcej\x19\n\x81\x86\xc9\xdb\xa3G\xa9\xa1W', 0x0)
write$P9_RATTACH(r0, &(0x7f0000000080)={0x14}, 0xfffffcde)
splice(r0, 0x0, r1, 0x0, 0x1000000007ff, 0x0)
r2 = socket(0x2000000000000010, 0x3, 0x0)
ioctl(r2, 0x1000008912, &(0x7f0000000280))

08:12:58 executing program 2:

08:12:58 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:12:58 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000]}, 0x3c)

08:12:58 executing program 0:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000340)='memory.high\x00', 0x2, 0x0)
write$binfmt_aout(r1, &(0x7f0000000200)=ANY=[@ANYRESOCT, @ANYRESOCT=0x0], 0x2e)

08:12:58 executing program 2:

08:12:58 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000]}, 0x3c)

08:12:58 executing program 0:
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070")
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000340)='memory.high\x00', 0x2, 0x0)
write$binfmt_aout(r1, &(0x7f0000000200)=ANY=[@ANYRESOCT, @ANYRESOCT=0x0], 0x2e)

08:12:58 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:12:59 executing program 4:
perf_event_open(&(0x7f000025c000)={0x8000000000000002, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00\xc7\xec\xac\xd9&{\x0f\x96\xad\xd1\x8fl![\x8f\xb9\f\xca\x1d\xc2{\xee\xb7\x03K\x0f\xa6\xaa;\xf6\x89\xf7b^\xa5\xafI\r\xc4\x9f\v\xf2\x1c\xdc\xddp2\xb7\xbb\x1b\xfev\xea\xed\xe0\xaa\xe8\xceR`\xbb\xf2\xed;pC\x19\xbfn\x16\xaa\x199\xfe.Q\xebvB\xd2\x19&l?\x87\x17H\x1f.\xdbA\x1b\xafz\xe3\xdc};*\xec\xfe\xfa\xfb/\x18g\x80y\xfe\x89', 0x26e1, 0x0)
close(r0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffc61)

08:12:59 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xc000000]}, 0x3c)

08:12:59 executing program 2:

08:12:59 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:12:59 executing program 0:
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070")
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000340)='memory.high\x00', 0x2, 0x0)
write$binfmt_aout(r1, &(0x7f0000000200)=ANY=[@ANYRESOCT, @ANYRESOCT=0x0], 0x2e)

08:12:59 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xd000000]}, 0x3c)

08:12:59 executing program 5:
mknod(&(0x7f0000000200)='./bus\x00', 0x100c, 0x0)
r0 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0)
r1 = memfd_create(&(0x7f0000000180)='^posix_acl_accessp\x04p1vk\xee\x05\xdaY\xd4\x8d\x13\x06\xce\\\x89\x18R\xa9{\x05#\a\xf6$\x0fcR\xc8\x15\a\x92]kL\xf5\x1f\x8b\xb9`0d1\x1aA\xc9\x16\n4:\x12\xf1\x82Z/\x02\xb0\x92w\xdd\xbfm\x1e\x12Gh\xbd\x8a\xcej\x19\n\x81\x86\xc9\xdb\xa3G\xa9\xa1W', 0x0)
write$P9_RATTACH(r0, &(0x7f0000000080)={0x14}, 0xfffffcde)
splice(r0, 0x0, r1, 0x0, 0x1000000007ff, 0x0)
r2 = socket(0x2000000000000010, 0x3, 0x0)
ioctl(r2, 0x1000008912, &(0x7f0000000280))

08:12:59 executing program 2:

08:12:59 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000]}, 0x3c)

08:12:59 executing program 2:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000180)=""/246)
inotify_init()
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x38)
ptrace$cont(0x18, r1, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x10})
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r1, 0x0, 0x0)

08:12:59 executing program 0:
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070")
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000340)='memory.high\x00', 0x2, 0x0)
write$binfmt_aout(r1, &(0x7f0000000200)=ANY=[@ANYRESOCT, @ANYRESOCT=0x0], 0x2e)

08:12:59 executing program 4:
perf_event_open(&(0x7f000025c000)={0x8000000000000002, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00\xc7\xec\xac\xd9&{\x0f\x96\xad\xd1\x8fl![\x8f\xb9\f\xca\x1d\xc2{\xee\xb7\x03K\x0f\xa6\xaa;\xf6\x89\xf7b^\xa5\xafI\r\xc4\x9f\v\xf2\x1c\xdc\xddp2\xb7\xbb\x1b\xfev\xea\xed\xe0\xaa\xe8\xceR`\xbb\xf2\xed;pC\x19\xbfn\x16\xaa\x199\xfe.Q\xebvB\xd2\x19&l?\x87\x17H\x1f.\xdbA\x1b\xafz\xe3\xdc};*\xec\xfe\xfa\xfb/\x18g\x80y\xfe\x89', 0x26e1, 0x0)
close(r0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffc61)

08:12:59 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:12:59 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000]}, 0x3c)

08:12:59 executing program 2:
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
write$binfmt_aout(r1, 0x0, 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
fallocate(r0, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1})
read(r0, &(0x7f0000000100)=""/104, 0x68)

08:12:59 executing program 0:
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070")
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000340)='memory.high\x00', 0x2, 0x0)
write$binfmt_aout(r1, &(0x7f0000000200)=ANY=[@ANYRESOCT, @ANYRESOCT=0x0], 0x2e)

08:12:59 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000]}, 0x3c)

08:12:59 executing program 4:
perf_event_open(&(0x7f000025c000)={0x8000000000000002, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00\xc7\xec\xac\xd9&{\x0f\x96\xad\xd1\x8fl![\x8f\xb9\f\xca\x1d\xc2{\xee\xb7\x03K\x0f\xa6\xaa;\xf6\x89\xf7b^\xa5\xafI\r\xc4\x9f\v\xf2\x1c\xdc\xddp2\xb7\xbb\x1b\xfev\xea\xed\xe0\xaa\xe8\xceR`\xbb\xf2\xed;pC\x19\xbfn\x16\xaa\x199\xfe.Q\xebvB\xd2\x19&l?\x87\x17H\x1f.\xdbA\x1b\xafz\xe3\xdc};*\xec\xfe\xfa\xfb/\x18g\x80y\xfe\x89', 0x26e1, 0x0)
close(r0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffc61)

08:13:00 executing program 5:
mknod(&(0x7f0000000200)='./bus\x00', 0x100c, 0x0)
r0 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0)
r1 = memfd_create(&(0x7f0000000180)='^posix_acl_accessp\x04p1vk\xee\x05\xdaY\xd4\x8d\x13\x06\xce\\\x89\x18R\xa9{\x05#\a\xf6$\x0fcR\xc8\x15\a\x92]kL\xf5\x1f\x8b\xb9`0d1\x1aA\xc9\x16\n4:\x12\xf1\x82Z/\x02\xb0\x92w\xdd\xbfm\x1e\x12Gh\xbd\x8a\xcej\x19\n\x81\x86\xc9\xdb\xa3G\xa9\xa1W', 0x0)
write$P9_RATTACH(r0, &(0x7f0000000080)={0x14}, 0xfffffcde)
splice(r0, 0x0, r1, 0x0, 0x1000000007ff, 0x0)
r2 = socket(0x2000000000000010, 0x3, 0x0)
ioctl(r2, 0x1000008912, &(0x7f0000000280)="c0dca5055e0b")

08:13:00 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:13:00 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x11000000]}, 0x3c)

08:13:00 executing program 0:
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070")
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000340)='memory.high\x00', 0x2, 0x0)
write$binfmt_aout(r1, &(0x7f0000000200)=ANY=[@ANYRESOCT, @ANYRESOCT=0x0], 0x2e)

08:13:00 executing program 4:
perf_event_open(&(0x7f000025c000)={0x8000000000000002, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00\xc7\xec\xac\xd9&{\x0f\x96\xad\xd1\x8fl![\x8f\xb9\f\xca\x1d\xc2{\xee\xb7\x03K\x0f\xa6\xaa;\xf6\x89\xf7b^\xa5\xafI\r\xc4\x9f\v\xf2\x1c\xdc\xddp2\xb7\xbb\x1b\xfev\xea\xed\xe0\xaa\xe8\xceR`\xbb\xf2\xed;pC\x19\xbfn\x16\xaa\x199\xfe.Q\xebvB\xd2\x19&l?\x87\x17H\x1f.\xdbA\x1b\xafz\xe3\xdc};*\xec\xfe\xfa\xfb/\x18g\x80y\xfe\x89', 0x26e1, 0x0)
close(r0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340))
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000080)='threaded\x00', 0xfffffc61)

08:13:00 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
creat(&(0x7f0000000340)='./file0\x00', 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="646566636f6e746578743d7374869b614856a01787d079da65101f1f1a6bdbd038fe115b448311fb503a6adf0f26ccdec71a240fb8f69f439e0697d25311b0f0ec0dd43f4287bba6514ae86af18b04a15f7e99c778523b2c02"])

08:13:00 executing program 0:
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070")
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000340)='memory.high\x00', 0x2, 0x0)
write$binfmt_aout(r1, &(0x7f0000000200)=ANY=[@ANYRESOCT, @ANYRESOCT=0x0], 0x2e)

08:13:00 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x12000000]}, 0x3c)

08:13:00 executing program 4:
perf_event_open(&(0x7f000025c000)={0x8000000000000002, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00\xc7\xec\xac\xd9&{\x0f\x96\xad\xd1\x8fl![\x8f\xb9\f\xca\x1d\xc2{\xee\xb7\x03K\x0f\xa6\xaa;\xf6\x89\xf7b^\xa5\xafI\r\xc4\x9f\v\xf2\x1c\xdc\xddp2\xb7\xbb\x1b\xfev\xea\xed\xe0\xaa\xe8\xceR`\xbb\xf2\xed;pC\x19\xbfn\x16\xaa\x199\xfe.Q\xebvB\xd2\x19&l?\x87\x17H\x1f.\xdbA\x1b\xafz\xe3\xdc};*\xec\xfe\xfa\xfb/\x18g\x80y\xfe\x89', 0x26e1, 0x0)
close(r0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340))
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000080)='threaded\x00', 0xfffffc61)

08:13:00 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:13:00 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x13000000]}, 0x3c)

08:13:00 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x0, &(0x7f0000000040)="c0dca5055e0bcfec7be070")
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f0000000340)='memory.high\x00', 0x2, 0x0)
write$binfmt_aout(r2, &(0x7f0000000200)=ANY=[@ANYRESOCT, @ANYRESOCT=0x0], 0x2e)

08:13:00 executing program 5:
mknod(&(0x7f0000000200)='./bus\x00', 0x100c, 0x0)
r0 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0)
r1 = memfd_create(&(0x7f0000000180)='^posix_acl_accessp\x04p1vk\xee\x05\xdaY\xd4\x8d\x13\x06\xce\\\x89\x18R\xa9{\x05#\a\xf6$\x0fcR\xc8\x15\a\x92]kL\xf5\x1f\x8b\xb9`0d1\x1aA\xc9\x16\n4:\x12\xf1\x82Z/\x02\xb0\x92w\xdd\xbfm\x1e\x12Gh\xbd\x8a\xcej\x19\n\x81\x86\xc9\xdb\xa3G\xa9\xa1W', 0x0)
write$P9_RATTACH(r0, &(0x7f0000000080)={0x14}, 0xfffffcde)
splice(r0, 0x0, r1, 0x0, 0x1000000007ff, 0x0)
r2 = socket(0x2000000000000010, 0x3, 0x0)
ioctl(r2, 0x1000008912, &(0x7f0000000280)="c0dca5055e0b")

08:13:00 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
ioperm(0x0, 0x7fff, 0x3)

08:13:00 executing program 4:
perf_event_open(&(0x7f000025c000)={0x8000000000000002, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00\xc7\xec\xac\xd9&{\x0f\x96\xad\xd1\x8fl![\x8f\xb9\f\xca\x1d\xc2{\xee\xb7\x03K\x0f\xa6\xaa;\xf6\x89\xf7b^\xa5\xafI\r\xc4\x9f\v\xf2\x1c\xdc\xddp2\xb7\xbb\x1b\xfev\xea\xed\xe0\xaa\xe8\xceR`\xbb\xf2\xed;pC\x19\xbfn\x16\xaa\x199\xfe.Q\xebvB\xd2\x19&l?\x87\x17H\x1f.\xdbA\x1b\xafz\xe3\xdc};*\xec\xfe\xfa\xfb/\x18g\x80y\xfe\x89', 0x26e1, 0x0)
close(r0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340))
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000080)='threaded\x00', 0xfffffc61)

08:13:00 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x14000000]}, 0x3c)

08:13:00 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:13:00 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x0, &(0x7f0000000040)="c0dca5055e0bcfec7be070")
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f0000000340)='memory.high\x00', 0x2, 0x0)
write$binfmt_aout(r2, &(0x7f0000000200)=ANY=[@ANYRESOCT, @ANYRESOCT=0x0], 0x2e)

08:13:01 executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-net\x00', 0x2, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)=""/115, 0x73}], 0x1, 0x0)

08:13:01 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x15000000]}, 0x3c)

08:13:01 executing program 4:
perf_event_open(&(0x7f000025c000)={0x8000000000000002, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00\xc7\xec\xac\xd9&{\x0f\x96\xad\xd1\x8fl![\x8f\xb9\f\xca\x1d\xc2{\xee\xb7\x03K\x0f\xa6\xaa;\xf6\x89\xf7b^\xa5\xafI\r\xc4\x9f\v\xf2\x1c\xdc\xddp2\xb7\xbb\x1b\xfev\xea\xed\xe0\xaa\xe8\xceR`\xbb\xf2\xed;pC\x19\xbfn\x16\xaa\x199\xfe.Q\xebvB\xd2\x19&l?\x87\x17H\x1f.\xdbA\x1b\xafz\xe3\xdc};*\xec\xfe\xfa\xfb/\x18g\x80y\xfe\x89', 0x26e1, 0x0)
close(r0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340))
write$cgroup_type(r0, 0x0, 0x0)

08:13:01 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x0, &(0x7f0000000040)="c0dca5055e0bcfec7be070")
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f0000000340)='memory.high\x00', 0x2, 0x0)
write$binfmt_aout(r2, &(0x7f0000000200)=ANY=[@ANYRESOCT, @ANYRESOCT=0x0], 0x2e)

08:13:01 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x16000000]}, 0x3c)

08:13:01 executing program 2:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:13:01 executing program 5:
mknod(&(0x7f0000000200)='./bus\x00', 0x100c, 0x0)
r0 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0)
r1 = memfd_create(&(0x7f0000000180)='^posix_acl_accessp\x04p1vk\xee\x05\xdaY\xd4\x8d\x13\x06\xce\\\x89\x18R\xa9{\x05#\a\xf6$\x0fcR\xc8\x15\a\x92]kL\xf5\x1f\x8b\xb9`0d1\x1aA\xc9\x16\n4:\x12\xf1\x82Z/\x02\xb0\x92w\xdd\xbfm\x1e\x12Gh\xbd\x8a\xcej\x19\n\x81\x86\xc9\xdb\xa3G\xa9\xa1W', 0x0)
write$P9_RATTACH(r0, &(0x7f0000000080)={0x14}, 0xfffffcde)
splice(r0, 0x0, r1, 0x0, 0x1000000007ff, 0x0)
r2 = socket(0x2000000000000010, 0x3, 0x0)
ioctl(r2, 0x1000008912, &(0x7f0000000280)="c0dca5055e0b")

08:13:01 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:13:01 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x18000000]}, 0x3c)

08:13:01 executing program 4:
perf_event_open(&(0x7f000025c000)={0x8000000000000002, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00\xc7\xec\xac\xd9&{\x0f\x96\xad\xd1\x8fl![\x8f\xb9\f\xca\x1d\xc2{\xee\xb7\x03K\x0f\xa6\xaa;\xf6\x89\xf7b^\xa5\xafI\r\xc4\x9f\v\xf2\x1c\xdc\xddp2\xb7\xbb\x1b\xfev\xea\xed\xe0\xaa\xe8\xceR`\xbb\xf2\xed;pC\x19\xbfn\x16\xaa\x199\xfe.Q\xebvB\xd2\x19&l?\x87\x17H\x1f.\xdbA\x1b\xafz\xe3\xdc};*\xec\xfe\xfa\xfb/\x18g\x80y\xfe\x89', 0x26e1, 0x0)
close(r0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340))
write$cgroup_type(r0, 0x0, 0x0)

08:13:01 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f0000000340)='memory.high\x00', 0x2, 0x0)
write$binfmt_aout(r2, &(0x7f0000000200)=ANY=[@ANYRESOCT, @ANYRESOCT=0x0], 0x2e)

08:13:01 executing program 2:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:13:01 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f0000000340)='memory.high\x00', 0x2, 0x0)
write$binfmt_aout(r2, &(0x7f0000000200)=ANY=[@ANYRESOCT, @ANYRESOCT=0x0], 0x2e)

08:13:01 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000]}, 0x3c)

08:13:01 executing program 4:
perf_event_open(&(0x7f000025c000)={0x8000000000000002, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00\xc7\xec\xac\xd9&{\x0f\x96\xad\xd1\x8fl![\x8f\xb9\f\xca\x1d\xc2{\xee\xb7\x03K\x0f\xa6\xaa;\xf6\x89\xf7b^\xa5\xafI\r\xc4\x9f\v\xf2\x1c\xdc\xddp2\xb7\xbb\x1b\xfev\xea\xed\xe0\xaa\xe8\xceR`\xbb\xf2\xed;pC\x19\xbfn\x16\xaa\x199\xfe.Q\xebvB\xd2\x19&l?\x87\x17H\x1f.\xdbA\x1b\xafz\xe3\xdc};*\xec\xfe\xfa\xfb/\x18g\x80y\xfe\x89', 0x26e1, 0x0)
close(r0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340))
write$cgroup_type(r0, 0x0, 0x0)

08:13:02 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:13:02 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x80010000]}, 0x3c)

08:13:02 executing program 2:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:13:02 executing program 5:
mknod(&(0x7f0000000200)='./bus\x00', 0x100c, 0x0)
r0 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0)
r1 = memfd_create(&(0x7f0000000180)='^posix_acl_accessp\x04p1vk\xee\x05\xdaY\xd4\x8d\x13\x06\xce\\\x89\x18R\xa9{\x05#\a\xf6$\x0fcR\xc8\x15\a\x92]kL\xf5\x1f\x8b\xb9`0d1\x1aA\xc9\x16\n4:\x12\xf1\x82Z/\x02\xb0\x92w\xdd\xbfm\x1e\x12Gh\xbd\x8a\xcej\x19\n\x81\x86\xc9\xdb\xa3G\xa9\xa1W', 0x0)
write$P9_RATTACH(r0, &(0x7f0000000080)={0x14}, 0xfffffcde)
splice(r0, 0x0, r1, 0x0, 0x1000000007ff, 0x0)
r2 = socket(0x2000000000000010, 0x3, 0x0)
ioctl(r2, 0x1000008912, &(0x7f0000000280)="c0dca5055e0bcfec7b")

08:13:02 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f0000000340)='memory.high\x00', 0x2, 0x0)
write$binfmt_aout(r2, &(0x7f0000000200)=ANY=[@ANYRESOCT, @ANYRESOCT=0x0], 0x2e)

08:13:02 executing program 4:
perf_event_open(&(0x7f000025c000)={0x8000000000000002, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00\xc7\xec\xac\xd9&{\x0f\x96\xad\xd1\x8fl![\x8f\xb9\f\xca\x1d\xc2{\xee\xb7\x03K\x0f\xa6\xaa;\xf6\x89\xf7b^\xa5\xafI\r\xc4\x9f\v\xf2\x1c\xdc\xddp2\xb7\xbb\x1b\xfev\xea\xed\xe0\xaa\xe8\xceR`\xbb\xf2\xed;pC\x19\xbfn\x16\xaa\x199\xfe.Q\xebvB\xd2\x19&l?\x87\x17H\x1f.\xdbA\x1b\xafz\xe3\xdc};*\xec\xfe\xfa\xfb/\x18g\x80y\xfe\x89', 0x26e1, 0x0)
close(r0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340))
write$cgroup_type(r0, 0x0, 0x0)

08:13:02 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xe4ffffff]}, 0x3c)

08:13:02 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:13:02 executing program 2:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', 0x0)
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:13:02 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8000]}, 0x3c)

08:13:02 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040))
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f0000000340)='memory.high\x00', 0x2, 0x0)
write$binfmt_aout(r2, &(0x7f0000000200)=ANY=[@ANYRESOCT, @ANYRESOCT=0x0], 0x2e)

08:13:02 executing program 4:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r1=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r1}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, 0x0)
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:13:02 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r1=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r1}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, 0x0)
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:13:03 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffe4]}, 0x3c)

08:13:03 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040))
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f0000000340)='memory.high\x00', 0x2, 0x0)
write$binfmt_aout(r2, &(0x7f0000000200)=ANY=[@ANYRESOCT, @ANYRESOCT=0x0], 0x2e)

08:13:03 executing program 5:
mknod(&(0x7f0000000200)='./bus\x00', 0x100c, 0x0)
r0 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0)
r1 = memfd_create(&(0x7f0000000180)='^posix_acl_accessp\x04p1vk\xee\x05\xdaY\xd4\x8d\x13\x06\xce\\\x89\x18R\xa9{\x05#\a\xf6$\x0fcR\xc8\x15\a\x92]kL\xf5\x1f\x8b\xb9`0d1\x1aA\xc9\x16\n4:\x12\xf1\x82Z/\x02\xb0\x92w\xdd\xbfm\x1e\x12Gh\xbd\x8a\xcej\x19\n\x81\x86\xc9\xdb\xa3G\xa9\xa1W', 0x0)
write$P9_RATTACH(r0, &(0x7f0000000080)={0x14}, 0xfffffcde)
splice(r0, 0x0, r1, 0x0, 0x1000000007ff, 0x0)
r2 = socket(0x2000000000000010, 0x3, 0x0)
ioctl(r2, 0x1000008912, &(0x7f0000000280)="c0dca5055e0bcfec7b")

08:13:03 executing program 2:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r1=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r1}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, 0x0)
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:13:03 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000]}, 0x3c)

08:13:03 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:13:03 executing program 4:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:13:03 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040))
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f0000000340)='memory.high\x00', 0x2, 0x0)
write$binfmt_aout(r2, &(0x7f0000000200)=ANY=[@ANYRESOCT, @ANYRESOCT=0x0], 0x2e)

08:13:03 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000]}, 0x3c)

08:13:03 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0b")
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f0000000340)='memory.high\x00', 0x2, 0x0)
write$binfmt_aout(r2, &(0x7f0000000200)=ANY=[@ANYRESOCT, @ANYRESOCT=0x0], 0x2e)

08:13:03 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000002c0)=ANY=[@ANYBLOB="050000000000000000000040050000a90000000000fa00000000e23f0003000001000000000000002560b700ff"])
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, 0x0)

08:13:03 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff00000000]}, 0x3c)

08:13:03 executing program 4:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380), 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:13:04 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0b")
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f0000000340)='memory.high\x00', 0x2, 0x0)
write$binfmt_aout(r2, &(0x7f0000000200)=ANY=[@ANYRESOCT, @ANYRESOCT=0x0], 0x2e)

08:13:04 executing program 5:
mknod(&(0x7f0000000200)='./bus\x00', 0x100c, 0x0)
r0 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0)
r1 = memfd_create(&(0x7f0000000180)='^posix_acl_accessp\x04p1vk\xee\x05\xdaY\xd4\x8d\x13\x06\xce\\\x89\x18R\xa9{\x05#\a\xf6$\x0fcR\xc8\x15\a\x92]kL\xf5\x1f\x8b\xb9`0d1\x1aA\xc9\x16\n4:\x12\xf1\x82Z/\x02\xb0\x92w\xdd\xbfm\x1e\x12Gh\xbd\x8a\xcej\x19\n\x81\x86\xc9\xdb\xa3G\xa9\xa1W', 0x0)
write$P9_RATTACH(r0, &(0x7f0000000080)={0x14}, 0xfffffcde)
splice(r0, 0x0, r1, 0x0, 0x1000000007ff, 0x0)
r2 = socket(0x2000000000000010, 0x3, 0x0)
ioctl(r2, 0x1000008912, &(0x7f0000000280)="c0dca5055e0bcfec7b")

08:13:04 executing program 2:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:13:04 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}, 0x3c)

08:13:04 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0b")
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f0000000340)='memory.high\x00', 0x2, 0x0)
write$binfmt_aout(r2, &(0x7f0000000200)=ANY=[@ANYRESOCT, @ANYRESOCT=0x0], 0x2e)

08:13:04 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000002c0)=ANY=[@ANYBLOB="050000000000000000000040050000a90000000000fa00000000e23f0003000001000000000000002560b700ff"])
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, 0x0)

08:13:04 executing program 4:
perf_event_open(&(0x7f000025c000)={0x8000000000000002, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmsg(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00\xc7\xec\xac\xd9&{\x0f\x96\xad\xd1\x8fl![\x8f\xb9\f\xca\x1d\xc2{\xee\xb7\x03K\x0f\xa6\xaa;\xf6\x89\xf7b^\xa5\xafI\r\xc4\x9f\v\xf2\x1c\xdc\xddp2\xb7\xbb\x1b\xfev\xea\xed\xe0\xaa\xe8\xceR`\xbb\xf2\xed;pC\x19\xbfn\x16\xaa\x199\xfe.Q\xebvB\xd2\x19&l?\x87\x17H\x1f.\xdbA\x1b\xafz\xe3\xdc};*\xec\xfe\xfa\xfb/\x18g\x80y\xfe\x89', 0x26e1, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340))
write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffc61)

08:13:04 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000002c0)=ANY=[@ANYBLOB="050000000000000000000040050000a90000000000fa00000000e23f0003000001000000000000002560b700ff"])
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, 0x0)

08:13:04 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}, 0x3c)

08:13:04 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7b")
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f0000000340)='memory.high\x00', 0x2, 0x0)
write$binfmt_aout(r2, &(0x7f0000000200)=ANY=[@ANYRESOCT, @ANYRESOCT=0x0], 0x2e)

08:13:04 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000]}, 0x3c)

08:13:04 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:13:04 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7b")
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f0000000340)='memory.high\x00', 0x2, 0x0)
write$binfmt_aout(r2, &(0x7f0000000200)=ANY=[@ANYRESOCT, @ANYRESOCT=0x0], 0x2e)

08:13:05 executing program 5:
mknod(&(0x7f0000000200)='./bus\x00', 0x100c, 0x0)
r0 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0)
r1 = memfd_create(&(0x7f0000000180)='^posix_acl_accessp\x04p1vk\xee\x05\xdaY\xd4\x8d\x13\x06\xce\\\x89\x18R\xa9{\x05#\a\xf6$\x0fcR\xc8\x15\a\x92]kL\xf5\x1f\x8b\xb9`0d1\x1aA\xc9\x16\n4:\x12\xf1\x82Z/\x02\xb0\x92w\xdd\xbfm\x1e\x12Gh\xbd\x8a\xcej\x19\n\x81\x86\xc9\xdb\xa3G\xa9\xa1W', 0x0)
write$P9_RATTACH(r0, &(0x7f0000000080)={0x14}, 0xfffffcde)
splice(r0, 0x0, r1, 0x0, 0x1000000007ff, 0x0)
r2 = socket(0x2000000000000010, 0x3, 0x0)
ioctl(r2, 0x1000008912, &(0x7f0000000280)="c0dca5055e0bcfec7be0")

08:13:05 executing program 2:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:13:05 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7b")
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f0000000340)='memory.high\x00', 0x2, 0x0)
write$binfmt_aout(r2, &(0x7f0000000200)=ANY=[@ANYRESOCT, @ANYRESOCT=0x0], 0x2e)

08:13:05 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x3c)

08:13:05 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:13:05 executing program 4:
perf_event_open(&(0x7f000025c000)={0x8000000000000002, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmsg(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00\xc7\xec\xac\xd9&{\x0f\x96\xad\xd1\x8fl![\x8f\xb9\f\xca\x1d\xc2{\xee\xb7\x03K\x0f\xa6\xaa;\xf6\x89\xf7b^\xa5\xafI\r\xc4\x9f\v\xf2\x1c\xdc\xddp2\xb7\xbb\x1b\xfev\xea\xed\xe0\xaa\xe8\xceR`\xbb\xf2\xed;pC\x19\xbfn\x16\xaa\x199\xfe.Q\xebvB\xd2\x19&l?\x87\x17H\x1f.\xdbA\x1b\xafz\xe3\xdc};*\xec\xfe\xfa\xfb/\x18g\x80y\xfe\x89', 0x26e1, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340))
write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffc61)

08:13:05 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000]}, 0x3c)

08:13:05 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be0")
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f0000000340)='memory.high\x00', 0x2, 0x0)
write$binfmt_aout(r2, &(0x7f0000000200)=ANY=[@ANYRESOCT, @ANYRESOCT=0x0], 0x2e)

08:13:05 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, 0x0}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:13:05 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000]}, 0x3c)

08:13:05 executing program 2:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, 0x0}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:13:05 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be0")
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f0000000340)='memory.high\x00', 0x2, 0x0)
write$binfmt_aout(r2, &(0x7f0000000200)=ANY=[@ANYRESOCT, @ANYRESOCT=0x0], 0x2e)

08:13:06 executing program 5:
mknod(&(0x7f0000000200)='./bus\x00', 0x100c, 0x0)
r0 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0)
r1 = memfd_create(&(0x7f0000000180)='^posix_acl_accessp\x04p1vk\xee\x05\xdaY\xd4\x8d\x13\x06\xce\\\x89\x18R\xa9{\x05#\a\xf6$\x0fcR\xc8\x15\a\x92]kL\xf5\x1f\x8b\xb9`0d1\x1aA\xc9\x16\n4:\x12\xf1\x82Z/\x02\xb0\x92w\xdd\xbfm\x1e\x12Gh\xbd\x8a\xcej\x19\n\x81\x86\xc9\xdb\xa3G\xa9\xa1W', 0x0)
write$P9_RATTACH(r0, &(0x7f0000000080)={0x14}, 0xfffffcde)
splice(r0, 0x0, r1, 0x0, 0x1000000007ff, 0x0)
r2 = socket(0x2000000000000010, 0x3, 0x0)
ioctl(r2, 0x1000008912, &(0x7f0000000280)="c0dca5055e0bcfec7be0")

08:13:06 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000]}, 0x3c)

08:13:06 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:13:06 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be0")
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f0000000340)='memory.high\x00', 0x2, 0x0)
write$binfmt_aout(r2, &(0x7f0000000200)=ANY=[@ANYRESOCT, @ANYRESOCT=0x0], 0x2e)

08:13:06 executing program 2:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:13:06 executing program 4:
perf_event_open(&(0x7f000025c000)={0x8000000000000002, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmsg(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00\xc7\xec\xac\xd9&{\x0f\x96\xad\xd1\x8fl![\x8f\xb9\f\xca\x1d\xc2{\xee\xb7\x03K\x0f\xa6\xaa;\xf6\x89\xf7b^\xa5\xafI\r\xc4\x9f\v\xf2\x1c\xdc\xddp2\xb7\xbb\x1b\xfev\xea\xed\xe0\xaa\xe8\xceR`\xbb\xf2\xed;pC\x19\xbfn\x16\xaa\x199\xfe.Q\xebvB\xd2\x19&l?\x87\x17H\x1f.\xdbA\x1b\xafz\xe3\xdc};*\xec\xfe\xfa\xfb/\x18g\x80y\xfe\x89', 0x26e1, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340))
write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffc61)

08:13:06 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000]}, 0x3c)

08:13:06 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070")
r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f0000000340)='memory.high\x00', 0x2, 0x0)
write$binfmt_aout(r2, &(0x7f0000000200)=ANY=[@ANYRESOCT, @ANYRESOCT=0x0], 0x2e)

08:13:06 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:13:06 executing program 2:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:13:07 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x900000000000000]}, 0x3c)

08:13:07 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070")
r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f0000000340)='memory.high\x00', 0x2, 0x0)
write$binfmt_aout(r2, &(0x7f0000000200)=ANY=[@ANYRESOCT, @ANYRESOCT=0x0], 0x2e)

08:13:07 executing program 5:
mknod(&(0x7f0000000200)='./bus\x00', 0x100c, 0x0)
r0 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0)
r1 = memfd_create(&(0x7f0000000180)='^posix_acl_accessp\x04p1vk\xee\x05\xdaY\xd4\x8d\x13\x06\xce\\\x89\x18R\xa9{\x05#\a\xf6$\x0fcR\xc8\x15\a\x92]kL\xf5\x1f\x8b\xb9`0d1\x1aA\xc9\x16\n4:\x12\xf1\x82Z/\x02\xb0\x92w\xdd\xbfm\x1e\x12Gh\xbd\x8a\xcej\x19\n\x81\x86\xc9\xdb\xa3G\xa9\xa1W', 0x0)
write$P9_RATTACH(r0, &(0x7f0000000080)={0x14}, 0xfffffcde)
splice(r0, 0x0, r1, 0x0, 0x1000000007ff, 0x0)
r2 = socket(0x2000000000000010, 0x3, 0x0)
ioctl(r2, 0x1000008912, &(0x7f0000000280)="c0dca5055e0bcfec7be0")

08:13:07 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xa00000000000000]}, 0x3c)

08:13:07 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:13:07 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070")
r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f0000000340)='memory.high\x00', 0x2, 0x0)
write$binfmt_aout(r2, &(0x7f0000000200)=ANY=[@ANYRESOCT, @ANYRESOCT=0x0], 0x2e)

08:13:07 executing program 2:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:13:08 executing program 4:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:13:08 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xb00000000000000]}, 0x3c)

08:13:08 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070")
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000340)='memory.high\x00', 0x2, 0x0)
write$binfmt_aout(r1, &(0x7f0000000200)=ANY=[@ANYRESOCT, @ANYRESOCT=0x0], 0x2e)

08:13:08 executing program 2:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:13:08 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:13:08 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xc00000000000000]}, 0x3c)

08:13:08 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070")
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000340)='memory.high\x00', 0x2, 0x0)
write$binfmt_aout(r1, &(0x7f0000000200)=ANY=[@ANYRESOCT, @ANYRESOCT=0x0], 0x2e)

08:13:08 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xd00000000000000]}, 0x3c)

08:13:08 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:13:08 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:13:08 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070")
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000340)='memory.high\x00', 0x2, 0x0)
write$binfmt_aout(r1, &(0x7f0000000200)=ANY=[@ANYRESOCT, @ANYRESOCT=0x0], 0x2e)

08:13:08 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xe00000000000000]}, 0x3c)

08:13:08 executing program 4:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:13:08 executing program 2:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:13:08 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf00000000000000]}, 0x3c)

08:13:08 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:13:08 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070")
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r2 = openat$cgroup_int(r1, 0x0, 0x2, 0x0)
write$binfmt_aout(r2, &(0x7f0000000200)=ANY=[@ANYRESOCT, @ANYRESOCT=0x0], 0x2e)

08:13:08 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:13:09 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000]}, 0x3c)

08:13:09 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070")
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r2 = openat$cgroup_int(r1, 0x0, 0x2, 0x0)
write$binfmt_aout(r2, &(0x7f0000000200)=ANY=[@ANYRESOCT, @ANYRESOCT=0x0], 0x2e)

08:13:09 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1100000000000000]}, 0x3c)

08:13:09 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:13:09 executing program 2:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:13:09 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070")
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r2 = openat$cgroup_int(r1, 0x0, 0x2, 0x0)
write$binfmt_aout(r2, &(0x7f0000000200)=ANY=[@ANYRESOCT, @ANYRESOCT=0x0], 0x2e)

08:13:09 executing program 4:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:13:09 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:13:09 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1200000000000000]}, 0x3c)

08:13:09 executing program 2:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:13:09 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070")
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
openat$cgroup_int(r1, &(0x7f0000000340)='memory.high\x00', 0x2, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYRESOCT, @ANYRESOCT=0x0], 0x2e)

08:13:09 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1300000000000000]}, 0x3c)

08:13:09 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:13:09 executing program 4:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:13:09 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1400000000000000]}, 0x3c)

08:13:09 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070")
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
openat$cgroup_int(r1, &(0x7f0000000340)='memory.high\x00', 0x2, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYRESOCT, @ANYRESOCT=0x0], 0x2e)

08:13:10 executing program 2:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:13:10 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:13:10 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1500000000000000]}, 0x3c)

08:13:10 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:13:10 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070")
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
openat$cgroup_int(r1, &(0x7f0000000340)='memory.high\x00', 0x2, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYRESOCT, @ANYRESOCT=0x0], 0x2e)

08:13:10 executing program 4:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:13:10 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1600000000000000]}, 0x3c)

08:13:10 executing program 2:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:13:10 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1800000000000000]}, 0x3c)

08:13:10 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070")
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f0000000340)='memory.high\x00', 0x2, 0x0)
write$binfmt_aout(r2, 0x0, 0x0)

08:13:10 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:13:10 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}, 0x3c)

08:13:10 executing program 4:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:13:10 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:13:10 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070")
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f0000000340)='memory.high\x00', 0x2, 0x0)
write$binfmt_aout(r2, 0x0, 0x0)

08:13:10 executing program 2:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:13:11 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x8001000000000000]}, 0x3c)

08:13:11 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070")
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f0000000340)='memory.high\x00', 0x2, 0x0)
write$binfmt_aout(r2, 0x0, 0x0)

08:13:11 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:13:11 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xe4ffffff00000000]}, 0x3c)

08:13:11 executing program 4:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:13:11 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070")
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f0000000340)='memory.high\x00', 0x2, 0x0)
write$binfmt_aout(r2, &(0x7f0000000200)=ANY=[@ANYRESOCT], 0x17)

08:13:11 executing program 2:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)

08:13:11 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x3c)

08:13:11 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:13:11 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:13:11 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070")
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f0000000340)='memory.high\x00', 0x2, 0x0)
write$binfmt_aout(r2, &(0x7f0000000200)=ANY=[@ANYRESOCT], 0x17)

08:13:11 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x3c)

08:13:11 executing program 2:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)

08:13:11 executing program 4:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:13:11 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x3c)

08:13:11 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070")
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f0000000340)='memory.high\x00', 0x2, 0x0)
write$binfmt_aout(r2, &(0x7f0000000200)=ANY=[@ANYRESOCT], 0x17)

08:13:11 executing program 2:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)

08:13:11 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:13:11 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x3c)

08:13:12 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r1=>0xffffffffffffffff}}}, 0x20)
write$eventfd(0xffffffffffffffff, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r1}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:13:12 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070")
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f0000000340)='memory.high\x00', 0x2, 0x0)
write$binfmt_aout(r2, &(0x7f0000000200)=ANY=[@ANYRESOCT=0x0], 0x17)

08:13:12 executing program 2:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r1=>0xffffffffffffffff}}}, 0x20)
write$eventfd(0xffffffffffffffff, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r1}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:13:12 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x3c)

08:13:12 executing program 4:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:13:12 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x3c)

08:13:12 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, 0x3c)

08:13:12 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r1=>0xffffffffffffffff}}}, 0x20)
write$eventfd(0xffffffffffffffff, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r1}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:13:12 executing program 2:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r1=>0xffffffffffffffff}}}, 0x20)
write$eventfd(0xffffffffffffffff, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r1}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:13:12 executing program 4:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:13:12 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:13:12 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, 0x3c)

08:13:12 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070")
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f0000000340)='memory.high\x00', 0x2, 0x0)
write$binfmt_aout(r2, &(0x7f0000000200)=ANY=[@ANYRESOCT=0x0], 0x17)

08:13:12 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}, 0x3c)

08:13:12 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:13:12 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, 0x3c)

08:13:13 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}, 0x3c)

08:13:13 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, 0x3c)

08:13:13 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}, 0x3c)

08:13:13 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r1=>0xffffffffffffffff}}}, 0x20)
write$eventfd(0xffffffffffffffff, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r1}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:13:13 executing program 2:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r1=>0xffffffffffffffff}}}, 0x20)
write$eventfd(0xffffffffffffffff, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r1}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:13:13 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf]}, 0x3c)

08:13:13 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070")
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f0000000340)='memory.high\x00', 0x2, 0x0)
write$binfmt_aout(r2, &(0x7f0000000200)=ANY=[@ANYRESOCT=0x0], 0x17)

08:13:13 executing program 4:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:13:14 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10]}, 0x3c)

08:13:14 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)

[  641.676299][T26597] IPVS: ftp: loaded support on port[0] = 21
[  641.853476][T26597] chnl_net:caif_netlink_parms(): no params data found
[  641.939604][T26597] bridge0: port 1(bridge_slave_0) entered blocking state
[  641.946890][T26597] bridge0: port 1(bridge_slave_0) entered disabled state
[  641.954900][T26597] device bridge_slave_0 entered promiscuous mode
[  641.962602][T26597] bridge0: port 2(bridge_slave_1) entered blocking state
[  641.969936][T26597] bridge0: port 2(bridge_slave_1) entered disabled state
[  641.978297][T26597] device bridge_slave_1 entered promiscuous mode
[  641.991971][ T8857] device bridge_slave_1 left promiscuous mode
[  641.999934][ T8857] bridge0: port 2(bridge_slave_1) entered disabled state
[  642.055160][ T8857] device bridge_slave_0 left promiscuous mode
[  642.061369][ T8857] bridge0: port 1(bridge_slave_0) entered disabled state
[  643.687280][ T8857] device hsr_slave_1 left promiscuous mode
[  643.749845][ T8857] device hsr_slave_0 left promiscuous mode
[  643.809369][ T8857] team0 (unregistering): Port device team_slave_1 removed
[  643.821251][ T8857] team0 (unregistering): Port device team_slave_0 removed
[  643.833465][ T8857] bond0 (unregistering): Releasing backup interface bond_slave_1
[  643.871210][ T8857] bond0 (unregistering): Releasing backup interface bond_slave_0
[  643.950721][ T8857] bond0 (unregistering): Released all slaves
[  644.066116][T26597] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  644.076168][T26597] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  644.097403][T26597] team0: Port device team_slave_0 added
[  644.104597][T26597] team0: Port device team_slave_1 added
[  644.158242][T26597] device hsr_slave_0 entered promiscuous mode
[  644.224522][T26597] device hsr_slave_1 entered promiscuous mode
[  644.313053][T26597] 8021q: adding VLAN 0 to HW filter on device bond0
[  644.327350][ T2808] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[  644.339095][ T2808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  644.347027][ T2808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  644.403212][T26597] 8021q: adding VLAN 0 to HW filter on device team0
[  644.423120][ T3486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  644.432459][ T3486] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  644.447447][ T3486] bridge0: port 1(bridge_slave_0) entered blocking state
[  644.454604][ T3486] bridge0: port 1(bridge_slave_0) entered forwarding state
[  644.482139][ T8815] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  644.490655][ T8815] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  644.499721][ T8815] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  644.510683][ T8815] bridge0: port 2(bridge_slave_1) entered blocking state
[  644.517909][ T8815] bridge0: port 2(bridge_slave_1) entered forwarding state
[  644.533760][ T8815] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  644.543144][ T8815] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  644.558460][ T8815] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  644.583143][ T3486] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  644.593601][ T3486] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  644.610028][ T3486] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  644.628533][T26597] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  644.641999][T26597] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  644.657868][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  644.693895][T26597] 8021q: adding VLAN 0 to HW filter on device batadv0
08:13:18 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r1=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r1}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)

08:13:18 executing program 2:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)

08:13:18 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r1=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r1}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)

08:13:18 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11]}, 0x3c)

08:13:18 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r1=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r1}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)

08:13:18 executing program 4:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:13:18 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12]}, 0x3c)

08:13:18 executing program 0:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11]}, 0x3c)

08:13:18 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13]}, 0x3c)

08:13:18 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:13:18 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14]}, 0x3c)

08:13:18 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15]}, 0x3c)

08:13:19 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r1=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r1}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)

[  646.792998][ T8760] syz-executor.0 (8760) used greatest stack depth: 23184 bytes left
[  646.929873][T26632] IPVS: ftp: loaded support on port[0] = 21
[  647.003943][T26632] chnl_net:caif_netlink_parms(): no params data found
[  647.973316][T26632] bridge0: port 1(bridge_slave_0) entered blocking state
[  647.981952][T26632] bridge0: port 1(bridge_slave_0) entered disabled state
[  647.990271][T26632] device bridge_slave_0 entered promiscuous mode
[  647.998531][T26632] bridge0: port 2(bridge_slave_1) entered blocking state
[  648.006979][T26632] bridge0: port 2(bridge_slave_1) entered disabled state
[  648.015138][T26632] device bridge_slave_1 entered promiscuous mode
[  648.028135][T26636] IPVS: ftp: loaded support on port[0] = 21
[  648.336826][T26632] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  648.346031][T26637] IPVS: ftp: loaded support on port[0] = 21
[  648.352383][T26632] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  648.672272][T26632] team0: Port device team_slave_0 added
[  648.700102][T26632] team0: Port device team_slave_1 added
[  649.076415][T26632] device hsr_slave_0 entered promiscuous mode
[  649.124767][T26632] device hsr_slave_1 entered promiscuous mode
[  649.901968][T26632] 8021q: adding VLAN 0 to HW filter on device bond0
[  649.909795][T26636] chnl_net:caif_netlink_parms(): no params data found
[  649.919576][T26637] chnl_net:caif_netlink_parms(): no params data found
[  650.393534][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  650.401756][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  650.732906][T26632] 8021q: adding VLAN 0 to HW filter on device team0
[  650.755267][T26636] bridge0: port 1(bridge_slave_0) entered blocking state
[  650.762445][T26636] bridge0: port 1(bridge_slave_0) entered disabled state
[  650.770408][T26636] device bridge_slave_0 entered promiscuous mode
[  650.779640][T26636] bridge0: port 2(bridge_slave_1) entered blocking state
[  650.788174][T26636] bridge0: port 2(bridge_slave_1) entered disabled state
[  650.796511][T26636] device bridge_slave_1 entered promiscuous mode
[  650.820380][ T8857] device bridge_slave_1 left promiscuous mode
[  650.827133][ T8857] bridge0: port 2(bridge_slave_1) entered disabled state
[  650.885279][ T8857] device bridge_slave_0 left promiscuous mode
[  650.891455][ T8857] bridge0: port 1(bridge_slave_0) entered disabled state
[  650.946107][ T8857] device bridge_slave_1 left promiscuous mode
[  650.952286][ T8857] bridge0: port 2(bridge_slave_1) entered disabled state
[  651.014948][ T8857] device bridge_slave_0 left promiscuous mode
[  651.021113][ T8857] bridge0: port 1(bridge_slave_0) entered disabled state
[  651.068166][ T8857] device bridge_slave_1 left promiscuous mode
[  651.074606][ T8857] bridge0: port 2(bridge_slave_1) entered disabled state
[  651.125883][ T8857] device bridge_slave_0 left promiscuous mode
[  651.132080][ T8857] bridge0: port 1(bridge_slave_0) entered disabled state
[  651.186225][ T8857] device bridge_slave_1 left promiscuous mode
[  651.192386][ T8857] bridge0: port 2(bridge_slave_1) entered disabled state
[  651.236076][ T8857] device bridge_slave_0 left promiscuous mode
[  651.242366][ T8857] bridge0: port 1(bridge_slave_0) entered disabled state
[  651.296868][ T8857] device bridge_slave_1 left promiscuous mode
[  651.303037][ T8857] bridge0: port 2(bridge_slave_1) entered disabled state
[  651.375389][ T8857] device bridge_slave_0 left promiscuous mode
[  651.381697][ T8857] bridge0: port 1(bridge_slave_0) entered disabled state
[  659.497322][ T8857] device hsr_slave_1 left promiscuous mode
[  659.579922][ T8857] device hsr_slave_0 left promiscuous mode
[  659.687308][ T8857] team0 (unregistering): Port device team_slave_1 removed
[  659.698801][ T8857] team0 (unregistering): Port device team_slave_0 removed
[  659.711372][ T8857] bond0 (unregistering): Releasing backup interface bond_slave_1
[  659.757875][ T8857] bond0 (unregistering): Releasing backup interface bond_slave_0
[  659.841234][ T8857] bond0 (unregistering): Released all slaves
[  660.026433][ T8857] device hsr_slave_1 left promiscuous mode
[  660.079717][ T8857] device hsr_slave_0 left promiscuous mode
[  660.120565][ T8857] team0 (unregistering): Port device team_slave_1 removed
[  660.132075][ T8857] team0 (unregistering): Port device team_slave_0 removed
[  660.143454][ T8857] bond0 (unregistering): Releasing backup interface bond_slave_1
[  660.181460][ T8857] bond0 (unregistering): Releasing backup interface bond_slave_0
[  660.280922][ T8857] bond0 (unregistering): Released all slaves
[  660.447845][ T8857] device hsr_slave_1 left promiscuous mode
[  660.517549][ T8857] device hsr_slave_0 left promiscuous mode
[  660.549712][ T8857] team0 (unregistering): Port device team_slave_1 removed
[  660.561270][ T8857] team0 (unregistering): Port device team_slave_0 removed
[  660.573130][ T8857] bond0 (unregistering): Releasing backup interface bond_slave_1
[  660.627854][ T8857] bond0 (unregistering): Releasing backup interface bond_slave_0
[  660.722208][ T8857] bond0 (unregistering): Released all slaves
[  660.867366][ T8857] device hsr_slave_1 left promiscuous mode
[  660.910197][ T8857] device hsr_slave_0 left promiscuous mode
[  660.969185][ T8857] team0 (unregistering): Port device team_slave_1 removed
[  660.980666][ T8857] team0 (unregistering): Port device team_slave_0 removed
[  660.991970][ T8857] bond0 (unregistering): Releasing backup interface bond_slave_1
[  661.033138][ T8857] bond0 (unregistering): Releasing backup interface bond_slave_0
[  661.132363][ T8857] bond0 (unregistering): Released all slaves
[  661.376761][ T8857] device hsr_slave_1 left promiscuous mode
[  661.429754][ T8857] device hsr_slave_0 left promiscuous mode
[  661.489145][ T8857] team0 (unregistering): Port device team_slave_1 removed
[  661.501879][ T8857] team0 (unregistering): Port device team_slave_0 removed
[  661.513851][ T8857] bond0 (unregistering): Releasing backup interface bond_slave_1
[  661.551134][ T8857] bond0 (unregistering): Releasing backup interface bond_slave_0
[  661.642603][ T8857] bond0 (unregistering): Released all slaves
[  661.755587][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  661.764299][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  661.772577][   T22] bridge0: port 1(bridge_slave_0) entered blocking state
[  661.779681][   T22] bridge0: port 1(bridge_slave_0) entered forwarding state
[  661.787891][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  661.798723][T26637] bridge0: port 1(bridge_slave_0) entered blocking state
[  661.806590][T26637] bridge0: port 1(bridge_slave_0) entered disabled state
[  661.815070][T26637] device bridge_slave_0 entered promiscuous mode
[  661.826602][T26637] bridge0: port 2(bridge_slave_1) entered blocking state
[  661.833671][T26637] bridge0: port 2(bridge_slave_1) entered disabled state
[  661.847373][T26637] device bridge_slave_1 entered promiscuous mode
[  661.856756][T26636] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  661.867175][T26636] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  661.876629][ T3486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  661.885697][ T3486] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  661.894092][ T3486] bridge0: port 2(bridge_slave_1) entered blocking state
[  661.901197][ T3486] bridge0: port 2(bridge_slave_1) entered forwarding state
[  661.916520][ T8819] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  661.939951][T26636] team0: Port device team_slave_0 added
[  661.948975][T26636] team0: Port device team_slave_1 added
[  661.979685][ T8769] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  661.994608][T26637] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  662.057628][T26636] device hsr_slave_0 entered promiscuous mode
[  662.124647][T26636] device hsr_slave_1 entered promiscuous mode
[  662.166055][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  662.175173][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  662.183541][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  662.192289][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  662.201615][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  662.210166][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  662.219041][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  662.227519][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  662.237929][T26637] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  662.248251][T26632] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  662.258965][ T8819] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  662.295148][T26637] team0: Port device team_slave_0 added
[  662.302621][T26637] team0: Port device team_slave_1 added
[  662.366228][T26637] device hsr_slave_0 entered promiscuous mode
[  662.414733][T26637] device hsr_slave_1 entered promiscuous mode
[  662.463522][T26632] 8021q: adding VLAN 0 to HW filter on device batadv0
[  662.553787][T26636] 8021q: adding VLAN 0 to HW filter on device bond0
[  662.616164][T26636] 8021q: adding VLAN 0 to HW filter on device team0
[  662.624894][ T3486] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[  662.638099][ T3486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  662.647486][ T3486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  662.679022][ T8819] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  662.688100][ T8819] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  662.697511][ T8819] bridge0: port 1(bridge_slave_0) entered blocking state
[  662.704674][ T8819] bridge0: port 1(bridge_slave_0) entered forwarding state
[  662.712989][ T8819] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  662.722229][ T8819] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  662.731189][ T8819] bridge0: port 2(bridge_slave_1) entered blocking state
[  662.738376][ T8819] bridge0: port 2(bridge_slave_1) entered forwarding state
[  662.746211][ T8819] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  662.767691][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  662.775977][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  662.786315][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  662.813011][ T8773] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  662.821217][ T8773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  662.832278][ T8773] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  662.841802][ T8773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  662.853810][ T8773] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  662.867500][T26636] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  662.879325][T26636] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  662.893046][ T2808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  662.901515][ T2808] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  662.913823][T26637] 8021q: adding VLAN 0 to HW filter on device bond0
[  662.932802][ T8773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  662.941203][ T8773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  662.954076][T26636] 8021q: adding VLAN 0 to HW filter on device batadv0
[  662.970487][T26637] 8021q: adding VLAN 0 to HW filter on device team0
[  662.981067][ T3486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  662.991531][ T3486] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  663.000581][ T3486] bridge0: port 1(bridge_slave_0) entered blocking state
[  663.007711][ T3486] bridge0: port 1(bridge_slave_0) entered forwarding state
[  663.017111][ T3486] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  663.029569][ T8819] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  663.040858][ T8819] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  663.052109][ T8819] bridge0: port 2(bridge_slave_1) entered blocking state
[  663.059257][ T8819] bridge0: port 2(bridge_slave_1) entered forwarding state
[  663.124410][ T2808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  663.133625][ T2808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  663.142814][ T2808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  663.155869][ T2808] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  663.233291][T26637] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  663.249986][T26637] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  663.262382][ T2808] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  663.278572][ T2808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  663.290241][ T2808] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  663.299622][ T2808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  663.309123][ T2808] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  663.318910][ T2808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  663.329566][ T2808] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  663.339099][ T2808] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  663.439462][T26637] 8021q: adding VLAN 0 to HW filter on device batadv0
08:13:37 executing program 2:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0)
r0 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000001780)={&(0x7f0000000000)=@in6={0xa, 0x4e22, 0x0, @remote}, 0x80, 0x0, 0x0, &(0x7f0000000200)=[{0x28, 0x29, 0x2, "fe8000000000000000000000a40a000000"}], 0x28}, 0x0)

08:13:37 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:13:37 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r1=>0xffffffffffffffff}}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r1}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)

08:13:37 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16]}, 0x3c)

08:13:37 executing program 5:

08:13:37 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000002c0)=ANY=[@ANYBLOB="050000000000000000000040050000a90000000000fa00000000e23f0003000001000000000000002560b700ff"])
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000008e04"])

08:13:37 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x600, [0xf0ffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc]}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x703d}}}, 0xb8}}, 0x0)

08:13:37 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18]}, 0x3c)

08:13:37 executing program 2:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x3}, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10)
connect(r1, &(0x7f0000000080)=@l2={0x1f, 0x1, {0x8000, 0x400, 0x74fb6b5a, 0xbb, 0x1, 0x8001}, 0x0, 0x8}, 0x80)
sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)
getuid()

08:13:37 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180]}, 0x3c)

08:13:37 executing program 5:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
bind(r0, &(0x7f0000000040)=@un=@abs, 0x8)
recvfrom$inet(r0, 0x0, 0x0, 0x2, 0x0, 0x800e00569)

08:13:37 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}, 0x3c)

08:13:37 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500]}, 0x3c)

[  664.754866][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  664.760727][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  665.154460][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  665.160309][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  666.267047][T26700] IPVS: ftp: loaded support on port[0] = 21
[  666.383437][T26700] chnl_net:caif_netlink_parms(): no params data found
[  666.416244][T26700] bridge0: port 1(bridge_slave_0) entered blocking state
[  666.423417][T26700] bridge0: port 1(bridge_slave_0) entered disabled state
[  666.431333][T26700] device bridge_slave_0 entered promiscuous mode
[  666.441254][T26700] bridge0: port 2(bridge_slave_1) entered blocking state
[  666.449120][T26700] bridge0: port 2(bridge_slave_1) entered disabled state
[  666.458394][T26700] device bridge_slave_1 entered promiscuous mode
[  666.479432][T26700] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  666.492115][T26700] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  666.526733][T26700] team0: Port device team_slave_0 added
[  666.534655][T26700] team0: Port device team_slave_1 added
[  666.597257][T26700] device hsr_slave_0 entered promiscuous mode
[  666.644763][T26700] device hsr_slave_1 entered promiscuous mode
[  666.711695][T26700] bridge0: port 2(bridge_slave_1) entered blocking state
[  666.718875][T26700] bridge0: port 2(bridge_slave_1) entered forwarding state
[  666.726333][T26700] bridge0: port 1(bridge_slave_0) entered blocking state
[  666.733427][T26700] bridge0: port 1(bridge_slave_0) entered forwarding state
[  666.827419][T26704] IPVS: ftp: loaded support on port[0] = 21
[  666.970561][T26705] IPVS: ftp: loaded support on port[0] = 21
[  667.122183][T26704] chnl_net:caif_netlink_parms(): no params data found
[  667.202080][T26700] 8021q: adding VLAN 0 to HW filter on device bond0
[  667.237950][ T3486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  667.246632][ T3486] bridge0: port 1(bridge_slave_0) entered disabled state
[  667.254809][ T3486] bridge0: port 2(bridge_slave_1) entered disabled state
[  667.263021][ T3486] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[  667.369145][T26704] bridge0: port 1(bridge_slave_0) entered blocking state
[  667.376738][T26704] bridge0: port 1(bridge_slave_0) entered disabled state
[  667.384714][T26704] device bridge_slave_0 entered promiscuous mode
[  667.410264][T26700] 8021q: adding VLAN 0 to HW filter on device team0
[  667.419024][T26704] bridge0: port 2(bridge_slave_1) entered blocking state
[  667.426552][T26704] bridge0: port 2(bridge_slave_1) entered disabled state
[  667.434728][T26704] device bridge_slave_1 entered promiscuous mode
[  667.522146][T26705] chnl_net:caif_netlink_parms(): no params data found
[  667.532613][ T8769] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  667.543086][ T8769] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  667.553890][ T8769] bridge0: port 1(bridge_slave_0) entered blocking state
[  667.561043][ T8769] bridge0: port 1(bridge_slave_0) entered forwarding state
[  667.568910][ T8769] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  667.577607][ T8769] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  667.586087][ T8769] bridge0: port 2(bridge_slave_1) entered blocking state
[  667.593179][ T8769] bridge0: port 2(bridge_slave_1) entered forwarding state
[  667.600903][ T8769] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  667.609776][ T8769] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  667.618472][ T8769] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  667.627309][ T8769] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  667.646488][T26704] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  667.728033][ T8769] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  667.738897][T26704] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  667.782006][ T3486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  667.792020][ T3486] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  667.871773][T26705] bridge0: port 1(bridge_slave_0) entered blocking state
[  667.879315][T26705] bridge0: port 1(bridge_slave_0) entered disabled state
[  667.890610][T26705] device bridge_slave_0 entered promiscuous mode
[  667.899476][T26704] team0: Port device team_slave_0 added
[  667.907930][T26704] team0: Port device team_slave_1 added
[  667.915961][ T8819] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  667.924533][ T8819] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  667.933289][T26705] bridge0: port 2(bridge_slave_1) entered blocking state
[  667.940569][T26705] bridge0: port 2(bridge_slave_1) entered disabled state
[  667.948370][T26705] device bridge_slave_1 entered promiscuous mode
[  668.026561][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  668.035878][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  668.060660][T26705] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  668.117800][T26704] device hsr_slave_0 entered promiscuous mode
[  668.165000][T26704] device hsr_slave_1 entered promiscuous mode
[  668.206365][T26700] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  668.216557][T26705] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  668.302359][T26705] team0: Port device team_slave_0 added
[  668.316017][T26705] team0: Port device team_slave_1 added
[  668.397341][T26705] device hsr_slave_0 entered promiscuous mode
[  668.444765][T26705] device hsr_slave_1 entered promiscuous mode
[  668.495178][ T8857] device bridge_slave_1 left promiscuous mode
[  668.501460][ T8857] bridge0: port 2(bridge_slave_1) entered disabled state
[  668.545165][ T8857] device bridge_slave_0 left promiscuous mode
[  668.551377][ T8857] bridge0: port 1(bridge_slave_0) entered disabled state
[  670.187531][ T8857] device hsr_slave_1 left promiscuous mode
[  670.247614][ T8857] device hsr_slave_0 left promiscuous mode
[  670.299767][ T8857] team0 (unregistering): Port device team_slave_1 removed
[  670.311390][ T8857] team0 (unregistering): Port device team_slave_0 removed
[  670.322795][ T8857] bond0 (unregistering): Releasing backup interface bond_slave_1
[  670.388309][ T8857] bond0 (unregistering): Releasing backup interface bond_slave_0
[  670.492815][ T8857] bond0 (unregistering): Released all slaves
[  670.592570][T26700] 8021q: adding VLAN 0 to HW filter on device batadv0
[  670.746608][T26704] 8021q: adding VLAN 0 to HW filter on device bond0
[  670.792814][ T3486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  670.804577][ T3486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  670.830708][T26704] 8021q: adding VLAN 0 to HW filter on device team0
[  670.862090][T26705] 8021q: adding VLAN 0 to HW filter on device bond0
[  670.869474][ T8769] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  670.880354][ T8769] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  670.889296][ T8769] bridge0: port 1(bridge_slave_0) entered blocking state
[  670.896424][ T8769] bridge0: port 1(bridge_slave_0) entered forwarding state
08:13:43 executing program 0:
r0 = getpid()
sched_setattr(r0, &(0x7f0000000180)={0x30, 0x2, 0x0, 0x0, 0x1, 0x800}, 0x0)
socket$alg(0x26, 0x5, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x7, &(0x7f0000000200)=""/222, &(0x7f0000000140)=0xde)
getsockopt$inet6_tcp_int(r1, 0x6, 0x8000000000018, &(0x7f00000000c0), &(0x7f00000003c0)=0x4)
syncfs(r1)
sched_setparam(r0, &(0x7f0000000100)=0x1ff)
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000340)='/proc/self/attr/current\x00', 0x2, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x6)
ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000300)=0x1)
add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff9)
keyctl$update(0x2, 0x0, 0x0, 0x0)

[  670.925892][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  670.948747][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  670.958218][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  670.975823][    T5] bridge0: port 2(bridge_slave_1) entered blocking state
[  670.982887][    T5] bridge0: port 2(bridge_slave_1) entered forwarding state
[  670.994132][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  671.003098][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  671.012196][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  671.020376][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  671.032118][T26705] 8021q: adding VLAN 0 to HW filter on device team0
[  671.046807][ T3486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  671.057455][ T3486] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  671.069242][ T3486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  671.082474][ T3486] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  671.368725][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  671.376796][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  671.385292][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  671.393587][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  671.415141][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  671.423441][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  671.432524][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  671.441330][    T5] bridge0: port 1(bridge_slave_0) entered blocking state
[  671.448438][    T5] bridge0: port 1(bridge_slave_0) entered forwarding state
[  671.456864][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  671.465784][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  671.474961][    T5] bridge0: port 2(bridge_slave_1) entered blocking state
[  671.482056][    T5] bridge0: port 2(bridge_slave_1) entered forwarding state
[  671.491943][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  671.502415][T26704] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  671.528230][ T8769] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  671.536856][ T8769] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  671.554884][ T8769] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  671.563570][ T8769] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  671.616670][ T8815] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  671.630913][ T8815] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  671.652521][ T8815] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  671.662241][ T8815] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  671.676952][ T8815] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  671.689778][ T8815] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  671.700368][ T8815] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  671.717966][T26704] 8021q: adding VLAN 0 to HW filter on device batadv0
[  671.735339][T26705] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  671.795813][T26705] 8021q: adding VLAN 0 to HW filter on device batadv0
08:13:45 executing program 1:
r0 = socket(0x11, 0x800000003, 0x0)
setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffffffffffe}, 0x4)
bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x41)
sendto$inet6(r0, &(0x7f0000000840)="ce03100001000100ff901efc9fb35c22cc6dc37916237d8599b512eceb92bd30961166bf00000000070000e19b40b4288ba4e852e8876e977ac94186835a03d045871d80e8e485cf34c98a22c7d0694893a7821d1c6c8689f4ac12c50cc25534655ee7b237c7a5ba6dcc954c10bd50c4ea9709367ee58afd37f6f9b1292decda7d3e5dabe32ba34964ae3278f4c1c443f951b36c79c5c15a5a", 0x99, 0x0, 0x0, 0x0)

08:13:45 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}, 0x3c)

08:13:45 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070")
bind$alg(0xffffffffffffffff, 0x0, 0x0)
r1 = socket(0x10, 0x802, 0x0)
write(r1, &(0x7f0000000240)="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", 0xfc)

08:13:45 executing program 5:

08:13:45 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070")
r1 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x48, &(0x7f0000000040)={@ipv4={[0x0, 0xa4ffffff, 0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}}, 0xff74)

08:13:45 executing program 4:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_emit_ethernet(0x3e, &(0x7f0000000280)={@broadcast, @empty=[0xffffffff00000006, 0xf000, 0x0, 0x500, 0x0, 0xe0], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}}, @icmp=@parameter_prob={0x5, 0x0, 0x0, 0x0, 0x0, 0x6, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}}}}}}, 0x0)
setsockopt$inet_opts(r0, 0x0, 0x1, 0x0, 0x0)
recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x800e0082e)

08:13:45 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0)
ioctl$sock_proto_private(0xffffffffffffffff, 0x89e5, &(0x7f0000000140))
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000400))
getuid()
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0)
getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x0)
r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000a00), &(0x7f0000000a40)=0xc)
stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000380))
r1 = memfd_create(&(0x7f0000000040)='-vboxnet0\x00', 0x4)
getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000340), 0x2)
ftruncate(r1, 0x1000000)
sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

08:13:45 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700]}, 0x3c)

[  672.318878][T26742] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.2'.
08:13:45 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900]}, 0x3c)

[  672.413514][T26748] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.2'.
08:13:45 executing program 2:

08:13:45 executing program 1:

08:13:45 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00]}, 0x3c)

08:13:45 executing program 2:

08:13:45 executing program 1:

08:13:45 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00]}, 0x3c)

08:13:46 executing program 1:

[  674.423410][T26783] IPVS: ftp: loaded support on port[0] = 21
[  674.556236][ T8857] device bridge_slave_1 left promiscuous mode
[  674.562536][ T8857] bridge0: port 2(bridge_slave_1) entered disabled state
[  674.615321][ T8857] device bridge_slave_0 left promiscuous mode
[  674.621489][ T8857] bridge0: port 1(bridge_slave_0) entered disabled state
[  676.177526][ T8857] device hsr_slave_1 left promiscuous mode
[  676.240007][ T8857] device hsr_slave_0 left promiscuous mode
[  676.299493][ T8857] team0 (unregistering): Port device team_slave_1 removed
[  676.311333][ T8857] team0 (unregistering): Port device team_slave_0 removed
[  676.322887][ T8857] bond0 (unregistering): Releasing backup interface bond_slave_1
[  676.380740][ T8857] bond0 (unregistering): Releasing backup interface bond_slave_0
[  676.460761][ T8857] bond0 (unregistering): Released all slaves
[  676.568943][T26783] chnl_net:caif_netlink_parms(): no params data found
[  676.602578][T26783] bridge0: port 1(bridge_slave_0) entered blocking state
[  676.610039][T26783] bridge0: port 1(bridge_slave_0) entered disabled state
[  676.618136][T26783] device bridge_slave_0 entered promiscuous mode
[  676.626881][T26783] bridge0: port 2(bridge_slave_1) entered blocking state
[  676.633952][T26783] bridge0: port 2(bridge_slave_1) entered disabled state
[  676.641742][T26783] device bridge_slave_1 entered promiscuous mode
[  676.658873][T26783] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  676.668837][T26783] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  676.690477][T26783] team0: Port device team_slave_0 added
[  676.697828][T26783] team0: Port device team_slave_1 added
[  676.757401][T26783] device hsr_slave_0 entered promiscuous mode
[  676.794590][T26783] device hsr_slave_1 entered promiscuous mode
[  676.887252][T26783] bridge0: port 2(bridge_slave_1) entered blocking state
[  676.894351][T26783] bridge0: port 2(bridge_slave_1) entered forwarding state
[  676.901638][T26783] bridge0: port 1(bridge_slave_0) entered blocking state
[  676.908748][T26783] bridge0: port 1(bridge_slave_0) entered forwarding state
[  676.986953][T26783] 8021q: adding VLAN 0 to HW filter on device bond0
[  677.000671][ T8773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  677.009673][ T8773] bridge0: port 1(bridge_slave_0) entered disabled state
[  677.018632][ T8773] bridge0: port 2(bridge_slave_1) entered disabled state
[  677.035356][ T8773] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[  677.049091][T26783] 8021q: adding VLAN 0 to HW filter on device team0
[  677.061372][ T8773] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  677.070265][ T8773] bridge0: port 1(bridge_slave_0) entered blocking state
[  677.077385][ T8773] bridge0: port 1(bridge_slave_0) entered forwarding state
[  677.095527][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  677.103984][   T22] bridge0: port 2(bridge_slave_1) entered blocking state
[  677.111121][   T22] bridge0: port 2(bridge_slave_1) entered forwarding state
[  677.135481][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  677.145593][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  677.154336][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  677.168100][T26783] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  677.179828][T26783] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  677.189128][ T8773] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  677.197552][ T8773] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  677.222132][T26783] 8021q: adding VLAN 0 to HW filter on device batadv0
08:13:50 executing program 0:

08:13:50 executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[])
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x0, r1})

08:13:50 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00]}, 0x3c)

08:13:50 executing program 4:

08:13:50 executing program 1:

08:13:50 executing program 5:

08:13:50 executing program 5:

08:13:50 executing program 1:

08:13:50 executing program 0:
setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8)
dup(0xffffffffffffffff)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0x117)

08:13:50 executing program 4:

08:13:50 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00]}, 0x3c)

08:13:50 executing program 2:

08:13:50 executing program 5:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0}, 0x10)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000001540)="c0dca5055e0bcfec7be070")
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r4 = eventfd(0x0)
ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000140)={0x0, 0x0, 0x0, r4})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000039000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x31e)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

08:13:50 executing program 4:
r0 = socket(0x11, 0x800000003, 0x0)
setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x41)
sendto$inet6(r0, &(0x7f0000000840)="ce03100001000100ff901efc9fb35c22cc6dc37916237d8599b512eceb92bd30961166bf00000000070000e19b40b4288ba4e852e8876e977ac94186835a03d045871d80e8e485cf34c98a22c7d0694893a7821d1c6c8689f4ac12c50cc25534655ee7b237c7a5ba6dcc954c10bd50c4ea9709367ee58afd37f6f9b1292decda7d3e5dabe32ba34964ae3278f4c1c443f951b36c79c5c15a5a8ce8adc106614305ed7d7830d7d254dca77c2c748ec0df9b55f5b7f59468d71748888348640aea040ec724061a7ea5765ec09d8cab360528d90ff3816a87b1424c262c5f13daf8e523602021b498d611020000000000000002da18d5ccfa3e9a76acfa8cb0d2574f5335", 0x103, 0x0, 0x0, 0x0)

08:13:50 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:13:50 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00]}, 0x3c)

08:13:50 executing program 2:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)

08:13:51 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf00]}, 0x3c)

08:13:51 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)

08:13:51 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)

08:13:51 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100]}, 0x3c)

08:13:51 executing program 4:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)

08:13:51 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200]}, 0x3c)

08:13:51 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:13:51 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:13:51 executing program 2:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:13:51 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1300]}, 0x3c)

08:13:51 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:13:52 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1400]}, 0x3c)

08:13:52 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:13:52 executing program 4:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)

08:13:52 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)

08:13:52 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1500]}, 0x3c)

08:13:52 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1600]}, 0x3c)

08:13:52 executing program 2:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:13:52 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)

08:13:52 executing program 4:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)

08:13:52 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1800]}, 0x3c)

08:13:52 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}, 0x3c)

08:13:52 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000]}, 0x3c)

08:13:53 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff]}, 0x3c)

08:13:53 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)

08:13:53 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}, 0x3c)

08:13:53 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)

08:13:53 executing program 4:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:13:53 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)

08:13:53 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x3c)

08:13:53 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)

08:13:53 executing program 2:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:13:53 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000]}, 0x3c)

08:13:53 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)

08:13:53 executing program 2:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)

08:13:53 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}, 0x3c)

08:13:53 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)

08:13:53 executing program 4:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:13:54 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000]}, 0x3c)

08:13:54 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000]}, 0x3c)

[  682.724644][T26934] IPVS: ftp: loaded support on port[0] = 21
[  683.192118][T26938] IPVS: ftp: loaded support on port[0] = 21
[  683.241807][T26939] IPVS: ftp: loaded support on port[0] = 21
[  683.533795][T26934] chnl_net:caif_netlink_parms(): no params data found
[  683.543452][T26940] IPVS: ftp: loaded support on port[0] = 21
[  683.948452][T26934] bridge0: port 1(bridge_slave_0) entered blocking state
[  683.955807][T26934] bridge0: port 1(bridge_slave_0) entered disabled state
[  683.963475][T26934] device bridge_slave_0 entered promiscuous mode
[  684.273755][T26934] bridge0: port 2(bridge_slave_1) entered blocking state
[  684.282945][T26934] bridge0: port 2(bridge_slave_1) entered disabled state
[  684.290875][T26934] device bridge_slave_1 entered promiscuous mode
[  684.383345][T26934] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  684.686750][T26938] chnl_net:caif_netlink_parms(): no params data found
[  684.709696][T26934] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  684.740183][T26939] chnl_net:caif_netlink_parms(): no params data found
[  684.771482][T26934] team0: Port device team_slave_0 added
[  684.781420][T26934] team0: Port device team_slave_1 added
[  685.156656][T26938] bridge0: port 1(bridge_slave_0) entered blocking state
[  685.163742][T26938] bridge0: port 1(bridge_slave_0) entered disabled state
[  685.172038][T26938] device bridge_slave_0 entered promiscuous mode
[  685.537092][T26934] device hsr_slave_0 entered promiscuous mode
[  685.574755][T26934] device hsr_slave_1 entered promiscuous mode
[  685.631148][T26940] chnl_net:caif_netlink_parms(): no params data found
[  685.641467][T26938] bridge0: port 2(bridge_slave_1) entered blocking state
[  685.651258][T26938] bridge0: port 2(bridge_slave_1) entered disabled state
[  685.659407][T26938] device bridge_slave_1 entered promiscuous mode
[  685.690340][T26939] bridge0: port 1(bridge_slave_0) entered blocking state
[  685.698780][T26939] bridge0: port 1(bridge_slave_0) entered disabled state
[  685.706763][T26939] device bridge_slave_0 entered promiscuous mode
[  685.734300][T26938] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  685.751533][T26938] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  685.760636][T26939] bridge0: port 2(bridge_slave_1) entered blocking state
[  685.767933][T26939] bridge0: port 2(bridge_slave_1) entered disabled state
[  685.777204][T26939] device bridge_slave_1 entered promiscuous mode
[  685.784679][ T8857] device bridge_slave_1 left promiscuous mode
[  685.790890][ T8857] bridge0: port 2(bridge_slave_1) entered disabled state
[  685.845445][ T8857] device bridge_slave_0 left promiscuous mode
[  685.851673][ T8857] bridge0: port 1(bridge_slave_0) entered disabled state
[  685.896363][ T8857] device bridge_slave_1 left promiscuous mode
[  685.902674][ T8857] bridge0: port 2(bridge_slave_1) entered disabled state
[  685.946384][ T8857] device bridge_slave_0 left promiscuous mode
[  685.952591][ T8857] bridge0: port 1(bridge_slave_0) entered disabled state
[  685.996421][ T8857] device bridge_slave_1 left promiscuous mode
[  686.003803][ T8857] bridge0: port 2(bridge_slave_1) entered disabled state
[  686.065350][ T8857] device bridge_slave_0 left promiscuous mode
[  686.071545][ T8857] bridge0: port 1(bridge_slave_0) entered disabled state
[  686.126383][ T8857] device bridge_slave_1 left promiscuous mode
[  686.132630][ T8857] bridge0: port 2(bridge_slave_1) entered disabled state
[  686.175066][ T8857] device bridge_slave_0 left promiscuous mode
[  686.181261][ T8857] bridge0: port 1(bridge_slave_0) entered disabled state
[  686.236301][ T8857] device bridge_slave_1 left promiscuous mode
[  686.242555][ T8857] bridge0: port 2(bridge_slave_1) entered disabled state
[  686.275486][ T8857] device bridge_slave_0 left promiscuous mode
[  686.281766][ T8857] bridge0: port 1(bridge_slave_0) entered disabled state
[  694.697461][ T8857] device hsr_slave_1 left promiscuous mode
[  694.739720][ T8857] device hsr_slave_0 left promiscuous mode
[  694.787341][ T8857] team0 (unregistering): Port device team_slave_1 removed
[  694.800562][ T8857] team0 (unregistering): Port device team_slave_0 removed
[  694.812264][ T8857] bond0 (unregistering): Releasing backup interface bond_slave_1
[  694.868522][ T8857] bond0 (unregistering): Releasing backup interface bond_slave_0
[  694.961112][ T8857] bond0 (unregistering): Released all slaves
[  695.086455][ T8857] device hsr_slave_1 left promiscuous mode
[  695.139464][ T8857] device hsr_slave_0 left promiscuous mode
[  695.207685][ T8857] team0 (unregistering): Port device team_slave_1 removed
[  695.221083][ T8857] team0 (unregistering): Port device team_slave_0 removed
[  695.232431][ T8857] bond0 (unregistering): Releasing backup interface bond_slave_1
[  695.258955][ T8857] bond0 (unregistering): Releasing backup interface bond_slave_0
[  695.355381][ T8857] bond0 (unregistering): Released all slaves
[  695.517813][ T8857] device hsr_slave_1 left promiscuous mode
[  695.587537][ T8857] device hsr_slave_0 left promiscuous mode
[  695.639969][ T8857] team0 (unregistering): Port device team_slave_1 removed
[  695.651478][ T8857] team0 (unregistering): Port device team_slave_0 removed
[  695.662755][ T8857] bond0 (unregistering): Releasing backup interface bond_slave_1
[  695.730331][ T8857] bond0 (unregistering): Releasing backup interface bond_slave_0
[  695.805917][ T8857] bond0 (unregistering): Released all slaves
[  695.986715][ T8857] device hsr_slave_1 left promiscuous mode
[  696.039488][ T8857] device hsr_slave_0 left promiscuous mode
[  696.079885][ T8857] team0 (unregistering): Port device team_slave_1 removed
[  696.092123][ T8857] team0 (unregistering): Port device team_slave_0 removed
[  696.104337][ T8857] bond0 (unregistering): Releasing backup interface bond_slave_1
[  696.151259][ T8857] bond0 (unregistering): Releasing backup interface bond_slave_0
[  696.242114][ T8857] bond0 (unregistering): Released all slaves
[  696.377598][ T8857] device hsr_slave_1 left promiscuous mode
[  696.432440][ T8857] device hsr_slave_0 left promiscuous mode
[  696.490724][ T8857] team0 (unregistering): Port device team_slave_1 removed
[  696.502178][ T8857] team0 (unregistering): Port device team_slave_0 removed
[  696.513446][ T8857] bond0 (unregistering): Releasing backup interface bond_slave_1
[  696.570889][ T8857] bond0 (unregistering): Releasing backup interface bond_slave_0
[  696.662195][ T8857] bond0 (unregistering): Released all slaves
[  696.821444][T26938] team0: Port device team_slave_0 added
[  696.830090][T26939] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  696.840522][T26940] bridge0: port 1(bridge_slave_0) entered blocking state
[  696.847979][T26940] bridge0: port 1(bridge_slave_0) entered disabled state
[  696.856567][T26940] device bridge_slave_0 entered promiscuous mode
[  696.866645][T26940] bridge0: port 2(bridge_slave_1) entered blocking state
[  696.873733][T26940] bridge0: port 2(bridge_slave_1) entered disabled state
[  696.882340][T26940] device bridge_slave_1 entered promiscuous mode
[  696.891010][T26938] team0: Port device team_slave_1 added
[  696.899889][T26939] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  696.927157][T26940] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  696.938509][T26940] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  696.962818][T26939] team0: Port device team_slave_0 added
[  696.972371][T26939] team0: Port device team_slave_1 added
[  697.008522][T26940] team0: Port device team_slave_0 added
[  697.077396][T26938] device hsr_slave_0 entered promiscuous mode
[  697.144534][T26938] device hsr_slave_1 entered promiscuous mode
[  697.206703][T26940] team0: Port device team_slave_1 added
[  697.298018][T26940] device hsr_slave_0 entered promiscuous mode
[  697.394587][T26940] device hsr_slave_1 entered promiscuous mode
[  697.496044][T26939] device hsr_slave_0 entered promiscuous mode
[  697.564719][T26939] device hsr_slave_1 entered promiscuous mode
[  697.649197][T26934] 8021q: adding VLAN 0 to HW filter on device bond0
[  697.691607][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  697.699636][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  697.716953][T26934] 8021q: adding VLAN 0 to HW filter on device team0
[  697.751986][ T8815] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  697.763545][ T8815] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  697.772593][ T8815] bridge0: port 1(bridge_slave_0) entered blocking state
[  697.779823][ T8815] bridge0: port 1(bridge_slave_0) entered forwarding state
[  697.812147][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  697.821050][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  697.830014][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  697.838764][    T5] bridge0: port 2(bridge_slave_1) entered blocking state
[  697.845876][    T5] bridge0: port 2(bridge_slave_1) entered forwarding state
[  697.856125][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  697.864864][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  697.873272][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  697.882171][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  697.907097][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  697.918038][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  697.926958][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  697.955456][T26939] 8021q: adding VLAN 0 to HW filter on device bond0
[  697.966592][T26938] 8021q: adding VLAN 0 to HW filter on device bond0
[  697.974853][T26934] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  697.985371][T26934] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  697.996856][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  698.005932][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  698.014748][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  698.023026][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  698.031806][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  698.050975][T26940] 8021q: adding VLAN 0 to HW filter on device bond0
[  698.074829][T26656] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  698.083324][T26656] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  698.092586][T26656] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  698.100974][T26656] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  698.112823][T26938] 8021q: adding VLAN 0 to HW filter on device team0
[  698.125981][T26939] 8021q: adding VLAN 0 to HW filter on device team0
[  698.141773][T26940] 8021q: adding VLAN 0 to HW filter on device team0
[  698.155784][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  698.165827][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  698.175021][    T5] bridge0: port 1(bridge_slave_0) entered blocking state
[  698.182073][    T5] bridge0: port 1(bridge_slave_0) entered forwarding state
[  698.190210][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  698.198316][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  698.216378][T26934] 8021q: adding VLAN 0 to HW filter on device batadv0
[  698.237533][ T8769] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  698.250289][ T8769] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  698.260482][ T8769] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  698.269083][ T8769] bridge0: port 2(bridge_slave_1) entered blocking state
[  698.276211][ T8769] bridge0: port 2(bridge_slave_1) entered forwarding state
[  698.285126][ T8769] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  698.293811][ T8769] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  698.302926][ T8769] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  698.311439][ T8769] bridge0: port 1(bridge_slave_0) entered blocking state
[  698.318539][ T8769] bridge0: port 1(bridge_slave_0) entered forwarding state
[  698.326578][ T8769] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  698.335357][ T8769] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  698.343715][ T8769] bridge0: port 2(bridge_slave_1) entered blocking state
[  698.350827][ T8769] bridge0: port 2(bridge_slave_1) entered forwarding state
[  698.358870][ T8769] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  698.367787][ T8769] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  698.376515][ T8769] bridge0: port 1(bridge_slave_0) entered blocking state
[  698.383570][ T8769] bridge0: port 1(bridge_slave_0) entered forwarding state
[  698.393464][ T8769] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  698.402235][ T8769] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  698.410312][ T8769] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  698.428833][T26656] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  698.444896][T26656] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  698.453872][T26656] bridge0: port 2(bridge_slave_1) entered blocking state
[  698.461042][T26656] bridge0: port 2(bridge_slave_1) entered forwarding state
[  698.469392][T26656] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  698.478189][T26656] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  698.492800][ T8815] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  698.504888][ T8815] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  698.513662][ T8815] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  698.572677][ T8769] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  698.589142][ T8769] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  698.603237][ T8769] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  698.613198][ T8769] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  698.624612][ T8769] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  698.632941][ T8769] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  698.641839][ T8769] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  698.650526][ T8769] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  698.659421][ T8769] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  698.668867][ T8769] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  698.711756][T26938] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  698.723845][T26938] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  698.735323][ T8815] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  698.743448][ T8815] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  698.752479][ T8815] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
08:14:11 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)

08:14:11 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000]}, 0x3c)

08:14:11 executing program 4:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

[  698.764062][ T8815] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  698.780552][ T8815] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  698.790190][ T8815] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
08:14:11 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000]}, 0x3c)

[  698.827033][ T8815] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  698.844974][ T8815] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  698.853852][ T8815] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  698.862420][ T8815] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  698.871265][ T8815] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  698.881065][ T8815] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  698.901766][ T8815] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  698.924947][ T8815] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  698.933371][ T8815] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  698.965169][ T8815] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
08:14:12 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000]}, 0x3c)

[  698.976188][T26939] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  698.991177][T26940] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  699.415717][T26938] 8021q: adding VLAN 0 to HW filter on device batadv0
[  699.473800][T26939] 8021q: adding VLAN 0 to HW filter on device batadv0
[  699.509917][T26940] 8021q: adding VLAN 0 to HW filter on device batadv0
08:14:12 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)

08:14:12 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000]}, 0x3c)

08:14:12 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:14:13 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)

08:14:13 executing program 2:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')

08:14:13 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000]}, 0x3c)

08:14:13 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000000]}, 0x3c)

08:14:13 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd000000]}, 0x3c)

08:14:13 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)

[  700.760595][T27006] IPVS: ftp: loaded support on port[0] = 21
[  701.296929][T27006] chnl_net:caif_netlink_parms(): no params data found
[  701.339265][T27006] bridge0: port 1(bridge_slave_0) entered blocking state
[  701.348102][T27006] bridge0: port 1(bridge_slave_0) entered disabled state
[  701.356831][T27006] device bridge_slave_0 entered promiscuous mode
[  701.365597][T27006] bridge0: port 2(bridge_slave_1) entered blocking state
[  701.372769][T27006] bridge0: port 2(bridge_slave_1) entered disabled state
[  701.381471][T27006] device bridge_slave_1 entered promiscuous mode
[  701.407212][T27006] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  701.419147][T27006] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  701.443574][T27006] team0: Port device team_slave_0 added
[  701.452046][T27006] team0: Port device team_slave_1 added
[  701.523099][T27006] device hsr_slave_0 entered promiscuous mode
[  701.580308][T27006] device hsr_slave_1 entered promiscuous mode
[  701.653598][T27006] bridge0: port 2(bridge_slave_1) entered blocking state
[  701.660761][T27006] bridge0: port 2(bridge_slave_1) entered forwarding state
[  701.668228][T27006] bridge0: port 1(bridge_slave_0) entered blocking state
[  701.675401][T27006] bridge0: port 1(bridge_slave_0) entered forwarding state
[  701.753118][T27006] 8021q: adding VLAN 0 to HW filter on device bond0
[  701.770868][ T8815] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  701.779383][ T8815] bridge0: port 1(bridge_slave_0) entered disabled state
[  701.787709][ T8815] bridge0: port 2(bridge_slave_1) entered disabled state
[  701.808804][T27006] 8021q: adding VLAN 0 to HW filter on device team0
[  701.819776][T26983] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  701.829432][T26983] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  701.838329][T26983] bridge0: port 1(bridge_slave_0) entered blocking state
[  701.845464][T26983] bridge0: port 1(bridge_slave_0) entered forwarding state
[  701.858391][T26656] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  701.868503][T26656] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  701.877220][T26656] bridge0: port 2(bridge_slave_1) entered blocking state
[  701.884353][T26656] bridge0: port 2(bridge_slave_1) entered forwarding state
[  701.909526][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  701.921649][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  701.937579][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  701.950466][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  701.961693][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  701.974531][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  702.010823][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  702.032398][T27006] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  702.057162][T27006] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  702.083157][ T2808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  702.112151][ T2808] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  702.120947][ T2808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  702.143352][ T2808] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  702.169928][ T2808] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  702.193685][T27006] 8021q: adding VLAN 0 to HW filter on device batadv0
[  702.193821][T27014] IPVS: ftp: loaded support on port[0] = 21
[  702.462744][T27014] chnl_net:caif_netlink_parms(): no params data found
08:14:15 executing program 4:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)

08:14:15 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000]}, 0x3c)

08:14:15 executing program 2:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')

08:14:15 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)

08:14:15 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)

[  702.561285][T27014] bridge0: port 1(bridge_slave_0) entered blocking state
[  702.572705][T27014] bridge0: port 1(bridge_slave_0) entered disabled state
[  702.625202][T27014] device bridge_slave_0 entered promiscuous mode
[  702.648317][T27014] bridge0: port 2(bridge_slave_1) entered blocking state
[  702.660511][T27014] bridge0: port 2(bridge_slave_1) entered disabled state
[  702.669394][T27014] device bridge_slave_1 entered promiscuous mode
[  702.696250][T27014] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  703.302879][T27014] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  703.350403][T27014] team0: Port device team_slave_0 added
[  703.388848][T27014] team0: Port device team_slave_1 added
[  703.497044][T27014] device hsr_slave_0 entered promiscuous mode
[  703.574599][T27014] device hsr_slave_1 entered promiscuous mode
[  703.690216][T27014] 8021q: adding VLAN 0 to HW filter on device bond0
[  703.711767][T26659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  703.729412][T26659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  703.749512][T27014] 8021q: adding VLAN 0 to HW filter on device team0
[  703.764815][T26659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  703.773563][T26659] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  703.785787][T26659] bridge0: port 1(bridge_slave_0) entered blocking state
[  703.792833][T26659] bridge0: port 1(bridge_slave_0) entered forwarding state
[  703.802531][T26659] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  703.824290][ T8815] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  703.833060][ T8815] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  703.847908][ T8815] bridge0: port 2(bridge_slave_1) entered blocking state
[  703.855056][ T8815] bridge0: port 2(bridge_slave_1) entered forwarding state
[  703.863082][ T8815] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  703.872405][ T8815] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  703.881486][ T8815] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  703.890382][ T8815] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  703.901230][ T8815] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  703.909496][ T8815] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  703.923701][T27014] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  703.934889][T27014] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  703.947544][T26659] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  703.961660][T26659] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  703.971050][T26659] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  703.993496][T27014] 8021q: adding VLAN 0 to HW filter on device batadv0
08:14:17 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:14:17 executing program 4:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)

08:14:17 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000]}, 0x3c)

08:14:17 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)}}, 0x20)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})

08:14:17 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000]}, 0x3c)

08:14:17 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11000000]}, 0x3c)

08:14:17 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)}}, 0x20)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})

08:14:17 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12000000]}, 0x3c)

08:14:17 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13000000]}, 0x3c)

[  705.500763][T27060] IPVS: ftp: loaded support on port[0] = 21
[  705.509524][T27047] IPVS: ftp: loaded support on port[0] = 21
[  706.361371][T27062] IPVS: ftp: loaded support on port[0] = 21
[  706.937729][T27060] chnl_net:caif_netlink_parms(): no params data found
[  706.953195][T27047] chnl_net:caif_netlink_parms(): no params data found
[  707.279024][T27060] bridge0: port 1(bridge_slave_0) entered blocking state
[  707.286242][T27060] bridge0: port 1(bridge_slave_0) entered disabled state
[  707.293871][T27060] device bridge_slave_0 entered promiscuous mode
[  707.551404][T27060] bridge0: port 2(bridge_slave_1) entered blocking state
[  707.559088][T27060] bridge0: port 2(bridge_slave_1) entered disabled state
[  707.567315][T27060] device bridge_slave_1 entered promiscuous mode
[  707.581120][T27047] bridge0: port 1(bridge_slave_0) entered blocking state
[  707.588753][T27047] bridge0: port 1(bridge_slave_0) entered disabled state
[  707.596953][T27047] device bridge_slave_0 entered promiscuous mode
[  707.860969][T27047] bridge0: port 2(bridge_slave_1) entered blocking state
[  707.868239][T27047] bridge0: port 2(bridge_slave_1) entered disabled state
[  707.876344][T27047] device bridge_slave_1 entered promiscuous mode
[  707.886000][T27060] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  707.935689][T27060] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  707.946437][T27047] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  707.957045][T27047] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  707.996985][T27062] chnl_net:caif_netlink_parms(): no params data found
[  708.008212][T27060] team0: Port device team_slave_0 added
[  708.032282][ T8857] device bridge_slave_1 left promiscuous mode
[  708.039323][ T8857] bridge0: port 2(bridge_slave_1) entered disabled state
[  708.095391][ T8857] device bridge_slave_0 left promiscuous mode
[  708.101603][ T8857] bridge0: port 1(bridge_slave_0) entered disabled state
[  708.157370][ T8857] device bridge_slave_1 left promiscuous mode
[  708.163540][ T8857] bridge0: port 2(bridge_slave_1) entered disabled state
[  708.195373][ T8857] device bridge_slave_0 left promiscuous mode
[  708.201581][ T8857] bridge0: port 1(bridge_slave_0) entered disabled state
[  708.265423][ T8857] device bridge_slave_1 left promiscuous mode
[  708.271602][ T8857] bridge0: port 2(bridge_slave_1) entered disabled state
[  708.315061][ T8857] device bridge_slave_0 left promiscuous mode
[  708.321216][ T8857] bridge0: port 1(bridge_slave_0) entered disabled state
[  708.385563][ T8857] device bridge_slave_1 left promiscuous mode
[  708.391724][ T8857] bridge0: port 2(bridge_slave_1) entered disabled state
[  708.435560][ T8857] device bridge_slave_0 left promiscuous mode
[  708.441788][ T8857] bridge0: port 1(bridge_slave_0) entered disabled state
[  715.257587][ T8857] device hsr_slave_1 left promiscuous mode
[  715.327773][ T8857] device hsr_slave_0 left promiscuous mode
[  715.380168][ T8857] team0 (unregistering): Port device team_slave_1 removed
[  715.392657][ T8857] team0 (unregistering): Port device team_slave_0 removed
[  715.406413][ T8857] bond0 (unregistering): Releasing backup interface bond_slave_1
[  715.442980][ T8857] bond0 (unregistering): Releasing backup interface bond_slave_0
[  715.534915][ T8857] bond0 (unregistering): Released all slaves
[  715.696650][ T8857] device hsr_slave_1 left promiscuous mode
[  715.739320][ T8857] device hsr_slave_0 left promiscuous mode
[  715.772548][ T8857] team0 (unregistering): Port device team_slave_1 removed
[  715.784706][ T8857] team0 (unregistering): Port device team_slave_0 removed
[  715.798777][ T8857] bond0 (unregistering): Releasing backup interface bond_slave_1
[  715.861331][ T8857] bond0 (unregistering): Releasing backup interface bond_slave_0
[  715.933238][ T8857] bond0 (unregistering): Released all slaves
[  716.096628][ T8857] device hsr_slave_1 left promiscuous mode
[  716.150037][ T8857] device hsr_slave_0 left promiscuous mode
[  716.207710][ T8857] team0 (unregistering): Port device team_slave_1 removed
[  716.222317][ T8857] team0 (unregistering): Port device team_slave_0 removed
[  716.234016][ T8857] bond0 (unregistering): Releasing backup interface bond_slave_1
[  716.262206][ T8857] bond0 (unregistering): Releasing backup interface bond_slave_0
[  716.354066][ T8857] bond0 (unregistering): Released all slaves
[  716.497926][ T8857] device hsr_slave_1 left promiscuous mode
[  716.540392][ T8857] device hsr_slave_0 left promiscuous mode
[  716.580287][ T8857] team0 (unregistering): Port device team_slave_1 removed
[  716.592802][ T8857] team0 (unregistering): Port device team_slave_0 removed
[  716.604564][ T8857] bond0 (unregistering): Releasing backup interface bond_slave_1
[  716.658586][ T8857] bond0 (unregistering): Releasing backup interface bond_slave_0
[  716.743911][ T8857] bond0 (unregistering): Released all slaves
[  716.839875][T27060] team0: Port device team_slave_1 added
[  716.853034][T27047] team0: Port device team_slave_0 added
[  716.875000][T27047] team0: Port device team_slave_1 added
[  716.927413][T27060] device hsr_slave_0 entered promiscuous mode
[  716.984794][T27060] device hsr_slave_1 entered promiscuous mode
[  717.092279][T27062] bridge0: port 1(bridge_slave_0) entered blocking state
[  717.101426][T27062] bridge0: port 1(bridge_slave_0) entered disabled state
[  717.109649][T27062] device bridge_slave_0 entered promiscuous mode
[  717.120201][T27062] bridge0: port 2(bridge_slave_1) entered blocking state
[  717.127389][T27062] bridge0: port 2(bridge_slave_1) entered disabled state
[  717.135535][T27062] device bridge_slave_1 entered promiscuous mode
[  717.208324][T27047] device hsr_slave_0 entered promiscuous mode
[  717.274560][T27047] device hsr_slave_1 entered promiscuous mode
[  717.361726][T27062] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  717.373658][T27062] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  717.403559][T27062] team0: Port device team_slave_0 added
[  717.411571][T27062] team0: Port device team_slave_1 added
[  717.496276][T27062] device hsr_slave_0 entered promiscuous mode
[  717.544740][T27062] device hsr_slave_1 entered promiscuous mode
[  717.629248][T27060] 8021q: adding VLAN 0 to HW filter on device bond0
[  717.642397][T27062] bridge0: port 2(bridge_slave_1) entered blocking state
[  717.650606][T27062] bridge0: port 2(bridge_slave_1) entered forwarding state
[  717.658043][T27062] bridge0: port 1(bridge_slave_0) entered blocking state
[  717.665456][T27062] bridge0: port 1(bridge_slave_0) entered forwarding state
[  717.694059][T27060] 8021q: adding VLAN 0 to HW filter on device team0
[  717.712224][T26659] bridge0: port 1(bridge_slave_0) entered disabled state
[  717.720574][T26659] bridge0: port 2(bridge_slave_1) entered disabled state
[  717.731498][T26659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  717.739908][T26659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  717.767601][T27047] 8021q: adding VLAN 0 to HW filter on device bond0
[  717.776429][T26986] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  717.786093][T26986] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  717.794771][T26986] bridge0: port 1(bridge_slave_0) entered blocking state
[  717.801829][T26986] bridge0: port 1(bridge_slave_0) entered forwarding state
[  717.810186][T26986] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  717.819723][T26986] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  717.828450][T26986] bridge0: port 2(bridge_slave_1) entered blocking state
[  717.835580][T26986] bridge0: port 2(bridge_slave_1) entered forwarding state
[  717.843113][T26986] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  717.857085][T26981] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  717.878925][T26656] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  717.889088][T26656] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  717.899459][T26656] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  717.908582][T26656] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  717.917650][T26656] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  717.926468][T26656] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  717.934978][T26656] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  717.943355][T26656] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  717.958359][T27047] 8021q: adding VLAN 0 to HW filter on device team0
[  717.975787][T26659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  717.983651][T26659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  717.991620][T26659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  718.000658][T26659] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  718.015446][T27060] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  718.028206][T27062] 8021q: adding VLAN 0 to HW filter on device bond0
[  718.048902][T26659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  718.059324][T26659] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  718.068505][T26659] bridge0: port 1(bridge_slave_0) entered blocking state
[  718.075625][T26659] bridge0: port 1(bridge_slave_0) entered forwarding state
[  718.083188][T26659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  718.092070][T26659] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  718.100443][T26659] bridge0: port 2(bridge_slave_1) entered blocking state
[  718.107552][T26659] bridge0: port 2(bridge_slave_1) entered forwarding state
[  718.115586][T26659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  718.164651][T26656] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  718.172585][T26656] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  718.181602][T26656] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  718.190361][T26656] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  718.199892][T26656] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  718.208125][T26656] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  718.216361][T26656] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  718.225061][T26656] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  718.235593][T27062] 8021q: adding VLAN 0 to HW filter on device team0
[  718.242564][T26656] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  718.365263][ T8815] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  718.374068][ T8815] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  718.385825][ T8815] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  718.395124][ T8815] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  718.403627][ T8815] bridge0: port 1(bridge_slave_0) entered blocking state
[  718.410750][ T8815] bridge0: port 1(bridge_slave_0) entered forwarding state
[  718.418742][ T8815] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  718.427529][ T8815] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  718.436234][ T8815] bridge0: port 2(bridge_slave_1) entered blocking state
[  718.443291][ T8815] bridge0: port 2(bridge_slave_1) entered forwarding state
[  718.451027][ T8815] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  718.530814][T27047] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  718.547698][T27047] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  718.560278][ T8815] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  718.569586][ T8815] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  718.578200][ T8815] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  718.592710][T27060] 8021q: adding VLAN 0 to HW filter on device batadv0
[  718.616068][ T8815] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  718.632190][ T8815] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  718.641588][ T8815] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  718.650862][ T8815] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  718.660925][ T8815] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  718.678973][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  718.690594][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  718.699401][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  718.708337][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  718.721861][T27062] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  718.749230][T27047] 8021q: adding VLAN 0 to HW filter on device batadv0
[  718.797669][T27062] 8021q: adding VLAN 0 to HW filter on device batadv0
08:14:32 executing program 2:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')

08:14:32 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14000000]}, 0x3c)

08:14:32 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)

08:14:32 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})

08:14:32 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:14:32 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15000000]}, 0x3c)

08:14:32 executing program 4:
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_ifreq(r0, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16@\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'})

08:14:32 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16000000]}, 0x3c)

08:14:32 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})

08:14:32 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000000]}, 0x3c)

08:14:32 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000]}, 0x3c)

08:14:33 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80010000]}, 0x3c)

08:14:33 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe4ffffff]}, 0x3c)

08:14:33 executing program 2:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
chdir(0x0)

08:14:33 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')

08:14:33 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})

[  721.371613][T27121] IPVS: ftp: loaded support on port[0] = 21
[  721.519794][T27121] chnl_net:caif_netlink_parms(): no params data found
[  721.565619][T27121] bridge0: port 1(bridge_slave_0) entered blocking state
[  721.572809][T27121] bridge0: port 1(bridge_slave_0) entered disabled state
[  721.581386][T27121] device bridge_slave_0 entered promiscuous mode
[  721.591707][T27121] bridge0: port 2(bridge_slave_1) entered blocking state
[  721.599405][T27121] bridge0: port 2(bridge_slave_1) entered disabled state
[  721.608009][T27121] device bridge_slave_1 entered promiscuous mode
[  721.633126][T27121] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  721.651091][T27121] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  721.683728][T27121] team0: Port device team_slave_0 added
[  721.692833][T27121] team0: Port device team_slave_1 added
[  721.767236][T27121] device hsr_slave_0 entered promiscuous mode
[  721.804579][T27121] device hsr_slave_1 entered promiscuous mode
[  721.863682][T27121] bridge0: port 2(bridge_slave_1) entered blocking state
[  721.870866][T27121] bridge0: port 2(bridge_slave_1) entered forwarding state
[  721.878325][T27121] bridge0: port 1(bridge_slave_0) entered blocking state
[  721.885451][T27121] bridge0: port 1(bridge_slave_0) entered forwarding state
[  721.939630][T27121] 8021q: adding VLAN 0 to HW filter on device bond0
[  721.956939][ T8778] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  721.966512][ T8778] bridge0: port 1(bridge_slave_0) entered disabled state
[  721.975179][ T8778] bridge0: port 2(bridge_slave_1) entered disabled state
[  721.989242][T27121] 8021q: adding VLAN 0 to HW filter on device team0
[  722.003299][ T8778] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  722.011801][ T8778] bridge0: port 1(bridge_slave_0) entered blocking state
[  722.018913][ T8778] bridge0: port 1(bridge_slave_0) entered forwarding state
[  722.043258][T27121] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  722.055918][T27121] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  722.070912][ T8778] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  722.080176][ T8778] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  722.088721][ T8778] bridge0: port 2(bridge_slave_1) entered blocking state
[  722.095784][ T8778] bridge0: port 2(bridge_slave_1) entered forwarding state
[  722.103557][ T8778] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  722.112198][ T8778] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  722.120936][ T8778] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  722.129668][ T8778] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  722.137956][ T8778] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  722.146691][ T8778] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  722.155013][ T8778] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  722.163192][ T8778] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  722.171585][ T8778] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  722.179895][ T8778] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  722.188492][ T8778] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  722.196737][ T8778] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  722.216390][T27121] 8021q: adding VLAN 0 to HW filter on device batadv0
08:14:35 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:14:35 executing program 4:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)

08:14:35 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8000]}, 0x3c)

08:14:35 executing program 2:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
chdir(0x0)

08:14:35 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})

08:14:35 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')

08:14:35 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffe4]}, 0x3c)

08:14:35 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})

08:14:35 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:14:35 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000]}, 0x3c)

08:14:36 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000]}, 0x3c)

08:14:36 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})

08:14:36 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

[  724.811201][T27165] IPVS: ftp: loaded support on port[0] = 21
[  725.456571][T27170] IPVS: ftp: loaded support on port[0] = 21
[  725.467793][T27169] IPVS: ftp: loaded support on port[0] = 21
[  725.709072][T27165] chnl_net:caif_netlink_parms(): no params data found
[  726.021903][T27165] bridge0: port 1(bridge_slave_0) entered blocking state
[  726.029090][T27165] bridge0: port 1(bridge_slave_0) entered disabled state
[  726.037944][T27165] device bridge_slave_0 entered promiscuous mode
[  726.281707][T27165] bridge0: port 2(bridge_slave_1) entered blocking state
[  726.289770][T27165] bridge0: port 2(bridge_slave_1) entered disabled state
[  726.297609][T27165] device bridge_slave_1 entered promiscuous mode
[  726.338378][ T8857] device bridge_slave_1 left promiscuous mode
[  726.345655][ T8857] bridge0: port 2(bridge_slave_1) entered disabled state
[  726.374900][ T8857] device bridge_slave_0 left promiscuous mode
[  726.381051][ T8857] bridge0: port 1(bridge_slave_0) entered disabled state
[  726.447541][ T8857] device bridge_slave_1 left promiscuous mode
[  726.453767][ T8857] bridge0: port 2(bridge_slave_1) entered disabled state
[  726.495071][ T8857] device bridge_slave_0 left promiscuous mode
[  726.501227][ T8857] bridge0: port 1(bridge_slave_0) entered disabled state
[  726.565549][ T8857] device bridge_slave_1 left promiscuous mode
[  726.571696][ T8857] bridge0: port 2(bridge_slave_1) entered disabled state
[  726.624902][ T8857] device bridge_slave_0 left promiscuous mode
[  726.631068][ T8857] bridge0: port 1(bridge_slave_0) entered disabled state
[  726.676853][ T8857] device bridge_slave_1 left promiscuous mode
[  726.683070][ T8857] bridge0: port 2(bridge_slave_1) entered disabled state
[  726.715448][ T8857] device bridge_slave_0 left promiscuous mode
[  726.721639][ T8857] bridge0: port 1(bridge_slave_0) entered disabled state
[  733.068520][ T8857] device hsr_slave_1 left promiscuous mode
[  733.129875][ T8857] device hsr_slave_0 left promiscuous mode
[  733.170723][ T8857] team0 (unregistering): Port device team_slave_1 removed
[  733.182192][ T8857] team0 (unregistering): Port device team_slave_0 removed
[  733.194385][ T8857] bond0 (unregistering): Releasing backup interface bond_slave_1
[  733.251072][ T8857] bond0 (unregistering): Releasing backup interface bond_slave_0
[  733.361140][ T8857] bond0 (unregistering): Released all slaves
[  733.517888][ T8857] device hsr_slave_1 left promiscuous mode
[  733.567696][ T8857] device hsr_slave_0 left promiscuous mode
[  733.627821][ T8857] team0 (unregistering): Port device team_slave_1 removed
[  733.641236][ T8857] team0 (unregistering): Port device team_slave_0 removed
[  733.652439][ T8857] bond0 (unregistering): Releasing backup interface bond_slave_1
[  733.710744][ T8857] bond0 (unregistering): Releasing backup interface bond_slave_0
[  733.780816][ T8857] bond0 (unregistering): Released all slaves
[  733.949201][ T8857] device hsr_slave_1 left promiscuous mode
[  734.009629][ T8857] device hsr_slave_0 left promiscuous mode
[  734.067940][ T8857] team0 (unregistering): Port device team_slave_1 removed
[  734.081633][ T8857] team0 (unregistering): Port device team_slave_0 removed
[  734.093136][ T8857] bond0 (unregistering): Releasing backup interface bond_slave_1
[  734.148969][ T8857] bond0 (unregistering): Releasing backup interface bond_slave_0
[  734.242033][ T8857] bond0 (unregistering): Released all slaves
[  734.436498][ T8857] device hsr_slave_1 left promiscuous mode
[  734.490085][ T8857] device hsr_slave_0 left promiscuous mode
[  734.540060][ T8857] team0 (unregistering): Port device team_slave_1 removed
[  734.551685][ T8857] team0 (unregistering): Port device team_slave_0 removed
[  734.563198][ T8857] bond0 (unregistering): Releasing backup interface bond_slave_1
[  734.621714][ T8857] bond0 (unregistering): Releasing backup interface bond_slave_0
[  734.702012][ T8857] bond0 (unregistering): Released all slaves
[  734.852311][T27165] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  734.877073][T27165] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  734.901625][T27165] team0: Port device team_slave_0 added
[  734.909078][T27165] team0: Port device team_slave_1 added
[  735.038232][T27165] device hsr_slave_0 entered promiscuous mode
[  735.074665][T27165] device hsr_slave_1 entered promiscuous mode
[  735.117458][T27170] chnl_net:caif_netlink_parms(): no params data found
[  735.130312][T27169] chnl_net:caif_netlink_parms(): no params data found
[  735.190146][T27169] bridge0: port 1(bridge_slave_0) entered blocking state
[  735.197380][T27169] bridge0: port 1(bridge_slave_0) entered disabled state
[  735.205588][T27169] device bridge_slave_0 entered promiscuous mode
[  735.219331][T27169] bridge0: port 2(bridge_slave_1) entered blocking state
[  735.226464][T27169] bridge0: port 2(bridge_slave_1) entered disabled state
[  735.234586][T27169] device bridge_slave_1 entered promiscuous mode
[  735.272262][T27170] bridge0: port 1(bridge_slave_0) entered blocking state
[  735.280366][T27170] bridge0: port 1(bridge_slave_0) entered disabled state
[  735.290492][T27170] device bridge_slave_0 entered promiscuous mode
[  735.299416][T27170] bridge0: port 2(bridge_slave_1) entered blocking state
[  735.306764][T27170] bridge0: port 2(bridge_slave_1) entered disabled state
[  735.314882][T27170] device bridge_slave_1 entered promiscuous mode
[  735.323879][T27169] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  735.340482][T27169] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  735.380028][T27169] team0: Port device team_slave_0 added
[  735.389434][T27170] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  735.404516][T27170] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  735.414110][T27169] team0: Port device team_slave_1 added
[  735.441738][T27170] team0: Port device team_slave_0 added
[  735.459514][T27170] team0: Port device team_slave_1 added
[  735.527571][T27169] device hsr_slave_0 entered promiscuous mode
[  735.574643][T27169] device hsr_slave_1 entered promiscuous mode
[  735.706214][T27170] device hsr_slave_0 entered promiscuous mode
[  735.754599][T27170] device hsr_slave_1 entered promiscuous mode
[  735.820821][T27169] bridge0: port 2(bridge_slave_1) entered blocking state
[  735.827980][T27169] bridge0: port 2(bridge_slave_1) entered forwarding state
[  735.835434][T27169] bridge0: port 1(bridge_slave_0) entered blocking state
[  735.842533][T27169] bridge0: port 1(bridge_slave_0) entered forwarding state
[  735.862049][T27170] bridge0: port 2(bridge_slave_1) entered blocking state
[  735.869217][T27170] bridge0: port 2(bridge_slave_1) entered forwarding state
[  735.876650][T27170] bridge0: port 1(bridge_slave_0) entered blocking state
[  735.883747][T27170] bridge0: port 1(bridge_slave_0) entered forwarding state
[  735.910303][T27165] 8021q: adding VLAN 0 to HW filter on device bond0
[  735.929576][ T8778] bridge0: port 1(bridge_slave_0) entered disabled state
[  735.937610][ T8778] bridge0: port 2(bridge_slave_1) entered disabled state
[  735.947142][ T8778] bridge0: port 1(bridge_slave_0) entered disabled state
[  735.956598][ T8778] bridge0: port 2(bridge_slave_1) entered disabled state
[  735.969691][ T8778] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  735.977542][ T8778] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  735.989030][T27165] 8021q: adding VLAN 0 to HW filter on device team0
[  736.016871][ T8815] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  736.025759][ T8815] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  736.034786][ T8815] bridge0: port 1(bridge_slave_0) entered blocking state
[  736.041848][ T8815] bridge0: port 1(bridge_slave_0) entered forwarding state
[  736.094711][ T3486] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  736.102748][ T3486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  736.111719][ T3486] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  736.120420][ T3486] bridge0: port 2(bridge_slave_1) entered blocking state
[  736.127586][ T3486] bridge0: port 2(bridge_slave_1) entered forwarding state
[  736.136889][ T3486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  736.145694][ T3486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  736.154651][ T3486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  736.163164][ T3486] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  736.172746][ T3486] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  736.184428][T26659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  736.193131][T26659] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  736.364568][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  736.373099][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  736.390734][T27165] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  736.408330][T27165] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  736.430367][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  736.439799][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  736.474903][T27170] 8021q: adding VLAN 0 to HW filter on device bond0
[  736.499882][T27165] 8021q: adding VLAN 0 to HW filter on device batadv0
[  736.531175][T26983] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  736.550696][T26983] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  736.566636][T27169] 8021q: adding VLAN 0 to HW filter on device bond0
[  736.577581][T27170] 8021q: adding VLAN 0 to HW filter on device team0
[  736.591235][ T8778] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  736.601094][ T8778] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  736.629389][ T8778] bridge0: port 1(bridge_slave_0) entered blocking state
[  736.636560][ T8778] bridge0: port 1(bridge_slave_0) entered forwarding state
[  736.663319][T27169] 8021q: adding VLAN 0 to HW filter on device team0
[  736.684796][T26659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  736.692736][T26659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  736.701845][T26659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  736.711693][T26659] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  736.721569][T26659] bridge0: port 2(bridge_slave_1) entered blocking state
[  736.728720][T26659] bridge0: port 2(bridge_slave_1) entered forwarding state
[  736.737350][T26659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  736.746372][T26659] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  736.755604][T26659] bridge0: port 1(bridge_slave_0) entered blocking state
[  736.762701][T26659] bridge0: port 1(bridge_slave_0) entered forwarding state
[  736.771204][T26659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  736.780136][T26659] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  736.789137][T26659] bridge0: port 2(bridge_slave_1) entered blocking state
[  736.796282][T26659] bridge0: port 2(bridge_slave_1) entered forwarding state
[  736.804650][T26659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  736.842788][ T8778] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  736.864264][ T8778] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  736.882108][ T8778] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  736.925210][ T8778] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  736.937364][ T8778] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  736.946166][ T8778] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  736.955544][ T8778] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  736.965108][ T8778] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  736.973746][ T8778] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  737.010918][ T8778] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  737.043616][ T8778] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  737.076231][ T8778] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  737.146932][T23140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  737.155291][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  737.155352][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  737.232666][T23140] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  737.265343][T23140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  737.304386][T23140] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  737.313127][T23140] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  737.380041][T27169] 8021q: adding VLAN 0 to HW filter on device batadv0
[  737.418975][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  737.445686][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  737.454104][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  737.477244][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  737.519121][T27170] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  737.593954][T27170] 8021q: adding VLAN 0 to HW filter on device batadv0
[  737.654408][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  737.660309][    C1] protocol 88fb is buggy, dev hsr_slave_1
08:14:50 executing program 4:
r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0xfffffffffffffffe, 0x0, 0xff, 0xb}, 0x0)
ioctl$sock_proto_private(r0, 0x89e5, &(0x7f0000000140)="53baa8f16da5309ed5383a44567b916675274143")
r1 = getuid()
ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000440)={0x9, 0x6, 0x0, 0x0, r1, 0x0, 0x6, 0x100})
getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @remote}}}, 0x0)
getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0)
r2 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2)
write$P9_RCLUNK(r0, &(0x7f0000000100)={0x7, 0x79, 0x1}, 0x7)
getegid()
r3 = memfd_create(&(0x7f0000000040)='-vboxnet0\x00', 0x4)
alarm(0x0)
ftruncate(r3, 0x1000000)
fcntl$getflags(0xffffffffffffffff, 0x0)
sendfile(r2, r3, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

08:14:50 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff00000000]}, 0x3c)

08:14:51 executing program 2:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
chdir(0x0)

08:14:51 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})

08:14:51 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:14:51 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}, 0x3c)

08:14:51 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')

08:14:51 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}, 0x3c)

08:14:51 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})

08:14:51 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$eventfd(r0, &(0x7f0000000380)=0xbf, 0x8)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:14:51 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000]}, 0x3c)

08:14:51 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
chdir(0x0)

08:14:51 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000002c0)=ANY=[@ANYBLOB="050000000000000000000040050000a90000000000fa00000000e23f0003000001000000000000002560b700ff"])
ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000008b04"])

08:14:51 executing program 2:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)

08:14:51 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x3c)

08:14:51 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})

08:14:52 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:14:52 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000]}, 0x3c)

08:14:52 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})

08:14:52 executing program 2:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)

08:14:52 executing program 4:
r0 = socket$inet6(0xa, 0x3, 0x3e0000000000001)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dc860d0f8eceec7be070")
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec", 0x4)
r2 = accept$alg(r1, 0x0, 0x0)
write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0xf8a0466)
socket$inet_udplite(0x2, 0x2, 0x88)
r3 = socket$rds(0x15, 0x5, 0x0)
setsockopt$RDS_CONG_MONITOR(r3, 0x114, 0x6, &(0x7f00000000c0), 0x4)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x4, 0x5c832, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x2, 0x4)
setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='lp\x00', 0x3)
r5 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x80800)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, &(0x7f0000000200)="b0001ed4a34f498b3a8bcca78709ce7d", 0x10)
ioctl(r4, 0x4000000000009, &(0x7f0000000400)='\x00\x00\x00\x00\x00\x00\x00\x00')
r6 = socket$inet6(0xa, 0x2000000802, 0x0)
setsockopt$RDS_GET_MR(r3, 0x114, 0x2, &(0x7f00000003c0)={{&(0x7f0000000440)=""/212, 0xd4}, &(0x7f0000000340), 0x10}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x800, 0x0, 0xff, 0x1}, 0x20)
setsockopt$inet6_int(r6, 0x29, 0x21, &(0x7f000089b000), 0xfffffffffffffea4)
unshare(0x40000000)
r7 = socket$inet6(0xa, 0x3, 0x3a)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000380)={0x200, 0x3, 0x9, 0x6, 0x8}, 0x14)
getsockopt$inet6_tcp_buf(r7, 0x6, 0x0, &(0x7f0000000000)=""/46, &(0x7f0000000240)=0x2e)
ioctl$FIGETBSZ(r1, 0x2, &(0x7f0000000280))
setsockopt$inet6_int(r7, 0x29, 0xc8, &(0x7f00000007c0)=0x401, 0x1dd)
setsockopt$inet6_MRT6_ADD_MFC(r7, 0x29, 0xcc, &(0x7f0000000040)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x8001]}, 0x5c)
setsockopt$inet6_MRT6_ADD_MFC(r7, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, {0xa, 0x0, 0x0, @remote}}, 0xb)

08:14:52 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000]}, 0x3c)

08:14:52 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:14:52 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
chdir(0x0)

08:14:52 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000]}, 0x3c)

[  739.706119][T27270] IPVS: ftp: loaded support on port[0] = 21
08:14:52 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000]}, 0x3c)

08:14:52 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
chdir(0x0)

08:14:52 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})

08:14:53 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900000000000000]}, 0x3c)

08:14:53 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:14:53 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00000000000000]}, 0x3c)

08:14:53 executing program 2:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)

08:14:55 executing program 4:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x2, 0x1, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_spirange={0x2}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x38}}, 0x0)

08:14:55 executing program 2:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r1=>0xffffffffffffffff}}}, 0x20)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r1}}, 0xc)
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)

08:14:55 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

[  742.097553][T27309] IPVS: ftp: loaded support on port[0] = 21
08:14:55 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})

08:14:55 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00000000000000]}, 0x3c)

08:14:55 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00000000000000]}, 0x3c)

[  742.932328][T27309] chnl_net:caif_netlink_parms(): no params data found
[  742.959789][T27309] bridge0: port 1(bridge_slave_0) entered blocking state
[  742.966997][T27309] bridge0: port 1(bridge_slave_0) entered disabled state
[  742.975107][T27309] device bridge_slave_0 entered promiscuous mode
[  742.982810][T27309] bridge0: port 2(bridge_slave_1) entered blocking state
[  742.990069][T27309] bridge0: port 2(bridge_slave_1) entered disabled state
[  742.998844][T27309] device bridge_slave_1 entered promiscuous mode
[  743.129736][T27309] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  743.140449][T27309] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  743.158600][T27309] team0: Port device team_slave_0 added
[  743.166402][T27309] team0: Port device team_slave_1 added
[  743.216111][T27309] device hsr_slave_0 entered promiscuous mode
[  743.254701][T27309] device hsr_slave_1 entered promiscuous mode
[  743.421287][T27309] bridge0: port 2(bridge_slave_1) entered blocking state
[  743.428407][T27309] bridge0: port 2(bridge_slave_1) entered forwarding state
[  743.435851][T27309] bridge0: port 1(bridge_slave_0) entered blocking state
[  743.442912][T27309] bridge0: port 1(bridge_slave_0) entered forwarding state
[  743.597254][T27309] 8021q: adding VLAN 0 to HW filter on device bond0
[  743.612935][T26659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  743.622188][T26659] bridge0: port 1(bridge_slave_0) entered disabled state
[  743.630585][T26659] bridge0: port 2(bridge_slave_1) entered disabled state
[  743.639049][T26659] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[  743.771127][T27309] 8021q: adding VLAN 0 to HW filter on device team0
[  743.784500][T26659] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  743.792902][T26659] bridge0: port 1(bridge_slave_0) entered blocking state
[  743.800063][T26659] bridge0: port 1(bridge_slave_0) entered forwarding state
[  743.980688][T23140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  743.989669][T23140] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  743.998468][T23140] bridge0: port 2(bridge_slave_1) entered blocking state
[  744.005601][T23140] bridge0: port 2(bridge_slave_1) entered forwarding state
[  744.013183][T23140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  744.026224][ T8857] device bridge_slave_1 left promiscuous mode
[  744.032455][ T8857] bridge0: port 2(bridge_slave_1) entered disabled state
[  744.095109][ T8857] device bridge_slave_0 left promiscuous mode
[  744.101292][ T8857] bridge0: port 1(bridge_slave_0) entered disabled state
[  744.166307][ T8857] device bridge_slave_1 left promiscuous mode
[  744.172480][ T8857] bridge0: port 2(bridge_slave_1) entered disabled state
[  744.205409][ T8857] device bridge_slave_0 left promiscuous mode
[  744.211600][ T8857] bridge0: port 1(bridge_slave_0) entered disabled state
[  747.356277][ T8857] device hsr_slave_1 left promiscuous mode
[  747.409853][ T8857] device hsr_slave_0 left promiscuous mode
[  747.469562][ T8857] team0 (unregistering): Port device team_slave_1 removed
[  747.481851][ T8857] team0 (unregistering): Port device team_slave_0 removed
[  747.493235][ T8857] bond0 (unregistering): Releasing backup interface bond_slave_1
[  747.531449][ T8857] bond0 (unregistering): Releasing backup interface bond_slave_0
[  747.632998][ T8857] bond0 (unregistering): Released all slaves
[  747.817991][ T8857] device hsr_slave_1 left promiscuous mode
[  747.880270][ T8857] device hsr_slave_0 left promiscuous mode
[  747.948887][ T8857] team0 (unregistering): Port device team_slave_1 removed
[  747.962848][ T8857] team0 (unregistering): Port device team_slave_0 removed
[  747.974551][ T8857] bond0 (unregistering): Releasing backup interface bond_slave_1
[  748.040861][ T8857] bond0 (unregistering): Releasing backup interface bond_slave_0
[  748.131375][ T8857] bond0 (unregistering): Released all slaves
[  748.257583][T26983] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  748.273209][T27329] IPVS: ftp: loaded support on port[0] = 21
[  748.279223][T27309] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  748.291078][T27309] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  748.303344][T26983] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  748.312262][T26983] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  748.320801][T26983] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  748.329571][T26983] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  748.338571][T26983] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  748.347100][T26983] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  748.356017][T26983] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  748.364347][T26983] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  748.372587][T26983] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  748.380548][T26983] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  748.428457][T27309] 8021q: adding VLAN 0 to HW filter on device batadv0
[  748.558283][T27329] chnl_net:caif_netlink_parms(): no params data found
[  748.602567][T27329] bridge0: port 1(bridge_slave_0) entered blocking state
[  748.616692][T27329] bridge0: port 1(bridge_slave_0) entered disabled state
[  748.629457][T27329] device bridge_slave_0 entered promiscuous mode
[  748.640780][T27329] bridge0: port 2(bridge_slave_1) entered blocking state
[  748.651697][T27329] bridge0: port 2(bridge_slave_1) entered disabled state
[  748.663420][T27329] device bridge_slave_1 entered promiscuous mode
08:15:01 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)

08:15:01 executing program 4:
socket$inet6(0xa, 0x1, 0x0)
r0 = creat(&(0x7f0000000000)='./file1\x00', 0x0)
write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd)
clone(0x1000108, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
mount$fuseblk(&(0x7f0000000180)='/dev/loop0\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x1001, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x100000000000003b)
ftruncate(r0, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40106614, 0x0)

08:15:01 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})

08:15:01 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:15:01 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00000000000000]}, 0x3c)

[  748.742417][T27329] bond0: Enslaving bond_slave_0 as an active interface with an up link
08:15:01 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00000000000000]}, 0x3c)

[  748.848816][T27329] bond0: Enslaving bond_slave_1 as an active interface with an up link
08:15:01 executing program 4:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f00000000c0)=0x3, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000640)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14)
sendto$inet6(r0, &(0x7f0000000040)="050300000600000000000200c52c", 0xe, 0x0, 0x0, 0x0)

[  748.943083][T27329] team0: Port device team_slave_0 added
[  749.018359][T27329] team0: Port device team_slave_1 added
[  749.177595][T27329] device hsr_slave_0 entered promiscuous mode
[  749.235134][T27329] device hsr_slave_1 entered promiscuous mode
[  749.633192][T27329] bridge0: port 2(bridge_slave_1) entered blocking state
[  749.640485][T27329] bridge0: port 2(bridge_slave_1) entered forwarding state
[  749.647918][T27329] bridge0: port 1(bridge_slave_0) entered blocking state
[  749.655060][T27329] bridge0: port 1(bridge_slave_0) entered forwarding state
[  749.665203][   T22] bridge0: port 1(bridge_slave_0) entered disabled state
[  749.673236][   T22] bridge0: port 2(bridge_slave_1) entered disabled state
[  749.774894][T27329] 8021q: adding VLAN 0 to HW filter on device bond0
[  749.801755][T26656] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  749.811681][T26656] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  749.823486][T27329] 8021q: adding VLAN 0 to HW filter on device team0
[  749.839628][T26656] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  749.851927][T26656] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  749.867615][T26656] bridge0: port 1(bridge_slave_0) entered blocking state
[  749.874770][T26656] bridge0: port 1(bridge_slave_0) entered forwarding state
[  749.897092][T26659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  749.906636][T26659] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  749.915724][T26659] bridge0: port 2(bridge_slave_1) entered blocking state
[  749.922806][T26659] bridge0: port 2(bridge_slave_1) entered forwarding state
[  749.933478][T26659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  749.943359][T26659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  749.953091][T26659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  749.962523][T26659] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  749.983535][T27329] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  749.994890][T27329] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  750.008103][T26656] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  750.017111][T26656] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  750.031791][T26656] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  750.049617][T26656] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  750.059683][T26656] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  750.073596][T26656] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  750.083963][T26656] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  750.113978][T26659] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  750.129940][T27329] 8021q: adding VLAN 0 to HW filter on device batadv0
08:15:03 executing program 2:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r1=>0xffffffffffffffff}}}, 0x20)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r1}}, 0xc)
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)

08:15:03 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:15:03 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf00000000000000]}, 0x3c)

08:15:03 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})

08:15:03 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)

08:15:03 executing program 4:
r0 = open(&(0x7f0000000200)='./file0\x00', 0x14104a, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000974fee)='/dev/input/event#\x00', 0x0, 0x101002)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0)
write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x74, 0x2}, {}], 0xfcf2)
sendfile(r1, r0, &(0x7f0000000000), 0x100000001)
ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f00000000c0)=""/216)

08:15:03 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000]}, 0x3c)

08:15:03 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})

08:15:03 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:15:03 executing program 4:
r0 = open(&(0x7f0000000200)='./file0\x00', 0x14104a, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000974fee)='/dev/input/event#\x00', 0x0, 0x101002)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0)
write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x74, 0x2}, {}], 0xfcf2)
sendfile(r1, r0, &(0x7f0000000000), 0x100000001)
ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f00000000c0)=""/216)

08:15:03 executing program 2:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r1=>0xffffffffffffffff}}}, 0x20)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r1}}, 0xc)
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)

08:15:03 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100000000000000]}, 0x3c)

08:15:04 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200000000000000]}, 0x3c)

08:15:04 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})

08:15:04 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:15:04 executing program 2:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)}}, 0x20)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)

[  752.840521][T27426] IPVS: ftp: loaded support on port[0] = 21
[  752.966734][T27426] chnl_net:caif_netlink_parms(): no params data found
[  752.981689][ T8857] device bridge_slave_1 left promiscuous mode
[  752.989219][ T8857] bridge0: port 2(bridge_slave_1) entered disabled state
[  753.046168][ T8857] device bridge_slave_0 left promiscuous mode
[  753.052365][ T8857] bridge0: port 1(bridge_slave_0) entered disabled state
[  754.667100][ T8857] device hsr_slave_1 left promiscuous mode
[  754.727805][ T8857] device hsr_slave_0 left promiscuous mode
[  754.779888][ T8857] team0 (unregistering): Port device team_slave_1 removed
[  754.793311][ T8857] team0 (unregistering): Port device team_slave_0 removed
[  754.805434][ T8857] bond0 (unregistering): Releasing backup interface bond_slave_1
[  754.831724][ T8857] bond0 (unregistering): Releasing backup interface bond_slave_0
[  754.921951][ T8857] bond0 (unregistering): Released all slaves
[  755.034428][T27426] bridge0: port 1(bridge_slave_0) entered blocking state
[  755.041693][T27426] bridge0: port 1(bridge_slave_0) entered disabled state
[  755.050597][T27426] device bridge_slave_0 entered promiscuous mode
[  755.058967][T27426] bridge0: port 2(bridge_slave_1) entered blocking state
[  755.066168][T27426] bridge0: port 2(bridge_slave_1) entered disabled state
[  755.073887][T27426] device bridge_slave_1 entered promiscuous mode
[  755.092946][T27426] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  755.104569][T27426] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  755.125319][T27426] team0: Port device team_slave_0 added
[  755.132646][T27426] team0: Port device team_slave_1 added
[  755.207330][T27426] device hsr_slave_0 entered promiscuous mode
[  755.264766][T27426] device hsr_slave_1 entered promiscuous mode
[  755.318894][T27426] bridge0: port 2(bridge_slave_1) entered blocking state
[  755.326022][T27426] bridge0: port 2(bridge_slave_1) entered forwarding state
[  755.333324][T27426] bridge0: port 1(bridge_slave_0) entered blocking state
[  755.340482][T27426] bridge0: port 1(bridge_slave_0) entered forwarding state
[  755.441028][T27426] 8021q: adding VLAN 0 to HW filter on device bond0
[  755.458108][T26659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  755.469276][T26659] bridge0: port 1(bridge_slave_0) entered disabled state
[  755.481689][T26659] bridge0: port 2(bridge_slave_1) entered disabled state
[  755.499987][T26659] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[  755.528704][T27426] 8021q: adding VLAN 0 to HW filter on device team0
[  755.546177][T26659] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  755.560343][T26659] bridge0: port 1(bridge_slave_0) entered blocking state
[  755.567514][T26659] bridge0: port 1(bridge_slave_0) entered forwarding state
[  755.603404][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  755.613047][   T22] bridge0: port 2(bridge_slave_1) entered blocking state
[  755.620167][   T22] bridge0: port 2(bridge_slave_1) entered forwarding state
[  755.630543][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  755.652468][T27426] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  755.670111][T27426] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  755.684631][T26659] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  755.692890][T26659] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  755.709322][T26659] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  755.723248][T26659] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  755.746911][T26659] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  755.771213][T27426] 8021q: adding VLAN 0 to HW filter on device batadv0
08:15:09 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)

08:15:09 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1300000000000000]}, 0x3c)

08:15:09 executing program 4:
r0 = open(&(0x7f0000000200)='./file0\x00', 0x14104a, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000974fee)='/dev/input/event#\x00', 0x0, 0x101002)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0)
write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x74, 0x2}, {}], 0xfcf2)
sendfile(r1, r0, &(0x7f0000000000), 0x100000001)
ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f00000000c0)=""/216)

08:15:09 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})

08:15:09 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:15:09 executing program 2:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)}}, 0x20)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)

08:15:09 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1400000000000000]}, 0x3c)

08:15:09 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})

08:15:09 executing program 2:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)}}, 0x20)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)

08:15:09 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1500000000000000]}, 0x3c)

08:15:09 executing program 4:
r0 = open(&(0x7f0000000200)='./file0\x00', 0x14104a, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000974fee)='/dev/input/event#\x00', 0x0, 0x101002)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0)
write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x74, 0x2}, {}], 0xfcf2)
sendfile(r1, r0, &(0x7f0000000000), 0x100000001)
ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f00000000c0)=""/216)

08:15:09 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:15:10 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r1=>0xffffffffffffffff}}}, 0x20)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r1}}, 0xc)
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)

08:15:10 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1600000000000000]}, 0x3c)

08:15:10 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})

08:15:10 executing program 2:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)

08:15:10 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:15:10 executing program 4:
r0 = open(&(0x7f0000000200)='./file0\x00', 0x14104a, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000974fee)='/dev/input/event#\x00', 0x0, 0x101002)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0)
write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x74, 0x2}, {}], 0xfcf2)
ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f00000000c0)=""/216)

08:15:10 executing program 2:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)

08:15:10 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1800000000000000]}, 0x3c)

08:15:10 executing program 2:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)

08:15:10 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:15:10 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})

08:15:10 executing program 4:
r0 = open(&(0x7f0000000200)='./file0\x00', 0x14104a, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000974fee)='/dev/input/event#\x00', 0x0, 0x101002)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0)
write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x74, 0x2}, {}], 0xfcf2)
ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f00000000c0)=""/216)

08:15:10 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r1=>0xffffffffffffffff}}}, 0x20)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r1}}, 0xc)
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)

08:15:10 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}, 0x3c)

08:15:10 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001000000000000]}, 0x3c)

08:15:10 executing program 4:
r0 = open(&(0x7f0000000200)='./file0\x00', 0x14104a, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000974fee)='/dev/input/event#\x00', 0x0, 0x101002)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0)
write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x74, 0x2}, {}], 0xfcf2)
ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f00000000c0)=""/216)

08:15:10 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})

08:15:11 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:15:11 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe4ffffff00000000]}, 0x3c)

08:15:11 executing program 4:
r0 = open(&(0x7f0000000200)='./file0\x00', 0x14104a, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000974fee)='/dev/input/event#\x00', 0x0, 0x101002)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0)
sendfile(r1, r0, &(0x7f0000000000), 0x100000001)
ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f00000000c0)=""/216)

[  759.581874][T27523] IPVS: ftp: loaded support on port[0] = 21
[  759.928722][T27523] chnl_net:caif_netlink_parms(): no params data found
[  759.943243][T27526] IPVS: ftp: loaded support on port[0] = 21
[  760.111050][T27523] bridge0: port 1(bridge_slave_0) entered blocking state
[  760.119578][T27523] bridge0: port 1(bridge_slave_0) entered disabled state
[  760.129389][T27523] device bridge_slave_0 entered promiscuous mode
[  760.250651][T27523] bridge0: port 2(bridge_slave_1) entered blocking state
[  760.257945][T27523] bridge0: port 2(bridge_slave_1) entered disabled state
[  760.266602][T27523] device bridge_slave_1 entered promiscuous mode
[  760.411460][T27523] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  760.422175][T27523] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  760.448244][T27523] team0: Port device team_slave_0 added
[  760.458650][T27523] team0: Port device team_slave_1 added
[  760.478737][ T8857] device bridge_slave_1 left promiscuous mode
[  760.485656][ T8857] bridge0: port 2(bridge_slave_1) entered disabled state
[  760.555307][ T8857] device bridge_slave_0 left promiscuous mode
[  760.561495][ T8857] bridge0: port 1(bridge_slave_0) entered disabled state
[  760.616343][ T8857] device bridge_slave_1 left promiscuous mode
[  760.622533][ T8857] bridge0: port 2(bridge_slave_1) entered disabled state
[  760.675396][ T8857] device bridge_slave_0 left promiscuous mode
[  760.681600][ T8857] bridge0: port 1(bridge_slave_0) entered disabled state
[  763.806986][ T8857] device hsr_slave_1 left promiscuous mode
[  763.860376][ T8857] device hsr_slave_0 left promiscuous mode
[  763.910184][ T8857] team0 (unregistering): Port device team_slave_1 removed
[  763.922035][ T8857] team0 (unregistering): Port device team_slave_0 removed
[  763.933972][ T8857] bond0 (unregistering): Releasing backup interface bond_slave_1
[  763.971322][ T8857] bond0 (unregistering): Releasing backup interface bond_slave_0
[  764.063168][ T8857] bond0 (unregistering): Released all slaves
[  764.207742][ T8857] device hsr_slave_1 left promiscuous mode
[  764.270114][ T8857] device hsr_slave_0 left promiscuous mode
[  764.330701][ T8857] team0 (unregistering): Port device team_slave_1 removed
[  764.342469][ T8857] team0 (unregistering): Port device team_slave_0 removed
[  764.354746][ T8857] bond0 (unregistering): Releasing backup interface bond_slave_1
[  764.401933][ T8857] bond0 (unregistering): Releasing backup interface bond_slave_0
[  764.492132][ T8857] bond0 (unregistering): Released all slaves
[  764.676170][T27523] device hsr_slave_0 entered promiscuous mode
[  764.724745][T27523] device hsr_slave_1 entered promiscuous mode
[  764.793260][T27526] chnl_net:caif_netlink_parms(): no params data found
[  764.841840][T27526] bridge0: port 1(bridge_slave_0) entered blocking state
[  764.850129][T27526] bridge0: port 1(bridge_slave_0) entered disabled state
[  764.858344][T27526] device bridge_slave_0 entered promiscuous mode
[  764.866775][T27526] bridge0: port 2(bridge_slave_1) entered blocking state
[  764.873977][T27526] bridge0: port 2(bridge_slave_1) entered disabled state
[  764.881921][T27526] device bridge_slave_1 entered promiscuous mode
[  764.903155][T27526] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  764.918112][T27526] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  764.940261][T27526] team0: Port device team_slave_0 added
[  764.947839][T27526] team0: Port device team_slave_1 added
[  765.016970][T27526] device hsr_slave_0 entered promiscuous mode
[  765.064712][T27526] device hsr_slave_1 entered promiscuous mode
[  765.135043][T27526] bridge0: port 2(bridge_slave_1) entered blocking state
[  765.142174][T27526] bridge0: port 2(bridge_slave_1) entered forwarding state
[  765.149620][T27526] bridge0: port 1(bridge_slave_0) entered blocking state
[  765.156759][T27526] bridge0: port 1(bridge_slave_0) entered forwarding state
[  765.269755][T27523] 8021q: adding VLAN 0 to HW filter on device bond0
[  765.290425][   T22] bridge0: port 1(bridge_slave_0) entered disabled state
[  765.298377][   T22] bridge0: port 2(bridge_slave_1) entered disabled state
[  765.310083][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  765.318982][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  765.330263][T27523] 8021q: adding VLAN 0 to HW filter on device team0
[  765.359729][ T8819] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  765.375862][ T8819] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  765.390931][ T8819] bridge0: port 1(bridge_slave_0) entered blocking state
[  765.398079][ T8819] bridge0: port 1(bridge_slave_0) entered forwarding state
[  765.420906][T27526] 8021q: adding VLAN 0 to HW filter on device bond0
[  765.435235][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[  765.444022][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  765.458550][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  765.471173][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  765.484778][   T22] bridge0: port 2(bridge_slave_1) entered blocking state
[  765.492679][   T22] bridge0: port 2(bridge_slave_1) entered forwarding state
[  765.508314][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  765.543698][T27526] 8021q: adding VLAN 0 to HW filter on device team0
[  765.556524][ T8819] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  765.566911][ T8819] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  765.577701][ T8819] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  765.592574][ T8819] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  765.628726][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  765.643051][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  765.652587][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  765.669952][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  765.681768][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  765.695156][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  765.703630][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  765.719549][   T22] bridge0: port 1(bridge_slave_0) entered blocking state
[  765.726710][   T22] bridge0: port 1(bridge_slave_0) entered forwarding state
[  765.741505][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  765.750149][   T22] bridge0: port 2(bridge_slave_1) entered blocking state
[  765.757281][   T22] bridge0: port 2(bridge_slave_1) entered forwarding state
[  765.773432][T27523] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  765.787920][ T8773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  765.817448][ T8819] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  765.841123][T27523] 8021q: adding VLAN 0 to HW filter on device batadv0
[  765.857109][ T8773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  765.867400][ T8773] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  765.886031][ T8773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  765.897480][ T8773] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  765.915280][ T8773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  765.923820][ T8773] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  765.939205][T27526] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  765.951924][T27526] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  765.962717][ T8819] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  765.972428][ T8819] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  765.992412][ T8819] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  766.025779][T27526] 8021q: adding VLAN 0 to HW filter on device batadv0
08:15:19 executing program 2:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r1=>0xffffffffffffffff}}}, 0x20)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r1}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)

08:15:19 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x3c)

08:15:19 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})

08:15:19 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:15:19 executing program 4:
r0 = open(&(0x7f0000000200)='./file0\x00', 0x14104a, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000974fee)='/dev/input/event#\x00', 0x0, 0x101002)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0)
sendfile(r1, r0, &(0x7f0000000000), 0x100000001)
ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f00000000c0)=""/216)

08:15:19 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r1=>0xffffffffffffffff}}}, 0x20)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r1}}, 0xc)
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)

08:15:19 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x3c)

08:15:19 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})

08:15:19 executing program 4:
r0 = open(&(0x7f0000000200)='./file0\x00', 0x14104a, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000974fee)='/dev/input/event#\x00', 0x0, 0x101002)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0)
sendfile(r1, r0, &(0x7f0000000000), 0x100000001)
ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f00000000c0)=""/216)

08:15:19 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:15:19 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x3c)

08:15:19 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)}}, 0x20)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)

08:15:20 executing program 2:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r1=>0xffffffffffffffff}}}, 0x20)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r1}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)

08:15:20 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x3c)

08:15:20 executing program 4:
r0 = open(&(0x7f0000000200)='./file0\x00', 0x14104a, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000974fee)='/dev/input/event#\x00', 0x0, 0x101002)
write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x74, 0x2}, {}], 0xfcf2)
sendfile(r1, r0, &(0x7f0000000000), 0x100000001)
ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f00000000c0)=""/216)

08:15:20 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})

08:15:20 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:15:20 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)}}, 0x20)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)

08:15:20 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x3c)

08:15:20 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})

08:15:20 executing program 2:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r1=>0xffffffffffffffff}}}, 0x20)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r1}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)

08:15:20 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:15:20 executing program 4:
r0 = open(&(0x7f0000000200)='./file0\x00', 0x14104a, 0x0)
write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x74, 0x2}, {}], 0xfcf2)
sendfile(0xffffffffffffffff, r0, &(0x7f0000000000), 0x100000001)
ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, &(0x7f00000000c0)=""/216)

08:15:20 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x3c)

08:15:20 executing program 5:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})

08:15:20 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:15:20 executing program 4:
r0 = open(&(0x7f0000000200)='./file0\x00', 0x14104a, 0x0)
write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x74, 0x2}, {}], 0xfcf2)
sendfile(0xffffffffffffffff, r0, &(0x7f0000000000), 0x100000001)
ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, &(0x7f00000000c0)=""/216)

08:15:20 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, 0x3c)

08:15:21 executing program 4:
r0 = open(&(0x7f0000000200)='./file0\x00', 0x14104a, 0x0)
write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x74, 0x2}, {}], 0xfcf2)
sendfile(0xffffffffffffffff, r0, &(0x7f0000000000), 0x100000001)
ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, &(0x7f00000000c0)=""/216)

08:15:21 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)}}, 0x20)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)

08:15:21 executing program 5:
mkdir(0x0, 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})

08:15:21 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, 0x3c)

[  769.898580][T27632] IPVS: ftp: loaded support on port[0] = 21
[  770.188555][T27632] chnl_net:caif_netlink_parms(): no params data found
[  770.333603][T27632] bridge0: port 1(bridge_slave_0) entered blocking state
[  770.340923][T27632] bridge0: port 1(bridge_slave_0) entered disabled state
[  770.350106][T27632] device bridge_slave_0 entered promiscuous mode
[  770.472926][T27632] bridge0: port 2(bridge_slave_1) entered blocking state
[  770.480136][T27632] bridge0: port 2(bridge_slave_1) entered disabled state
[  770.491344][T27632] device bridge_slave_1 entered promiscuous mode
[  770.623090][T27632] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  770.635771][T27632] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  770.652655][T27632] team0: Port device team_slave_0 added
[  770.660233][T27632] team0: Port device team_slave_1 added
[  770.837717][T27632] device hsr_slave_0 entered promiscuous mode
[  770.904557][T27632] device hsr_slave_1 entered promiscuous mode
[  770.956011][ T8857] device bridge_slave_1 left promiscuous mode
[  770.962294][ T8857] bridge0: port 2(bridge_slave_1) entered disabled state
[  771.015030][ T8857] device bridge_slave_0 left promiscuous mode
[  771.021210][ T8857] bridge0: port 1(bridge_slave_0) entered disabled state
[  771.086220][ T8857] device bridge_slave_1 left promiscuous mode
[  771.092423][ T8857] bridge0: port 2(bridge_slave_1) entered disabled state
[  771.135059][ T8857] device bridge_slave_0 left promiscuous mode
[  771.141332][ T8857] bridge0: port 1(bridge_slave_0) entered disabled state
[  774.277578][ T8857] device hsr_slave_1 left promiscuous mode
[  774.347590][ T8857] device hsr_slave_0 left promiscuous mode
[  774.420745][ T8857] team0 (unregistering): Port device team_slave_1 removed
[  774.432523][ T8857] team0 (unregistering): Port device team_slave_0 removed
[  774.443983][ T8857] bond0 (unregistering): Releasing backup interface bond_slave_1
[  774.481540][ T8857] bond0 (unregistering): Releasing backup interface bond_slave_0
[  774.580620][ T8857] bond0 (unregistering): Released all slaves
[  774.726774][ T8857] device hsr_slave_1 left promiscuous mode
[  774.779990][ T8857] device hsr_slave_0 left promiscuous mode
[  774.828181][ T8857] team0 (unregistering): Port device team_slave_1 removed
[  774.841762][ T8857] team0 (unregistering): Port device team_slave_0 removed
[  774.853190][ T8857] bond0 (unregistering): Releasing backup interface bond_slave_1
[  774.888443][ T8857] bond0 (unregistering): Releasing backup interface bond_slave_0
[  775.002939][ T8857] bond0 (unregistering): Released all slaves
[  775.179470][T27632] 8021q: adding VLAN 0 to HW filter on device bond0
[  775.190894][T22664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  775.200423][T22664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  775.210761][T27632] 8021q: adding VLAN 0 to HW filter on device team0
[  775.227635][T22664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  775.237546][T22664] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  775.246166][T22664] bridge0: port 1(bridge_slave_0) entered blocking state
[  775.253229][T22664] bridge0: port 1(bridge_slave_0) entered forwarding state
[  775.261555][T22664] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  775.271286][T26983] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  775.280950][T26983] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  775.290039][T26983] bridge0: port 2(bridge_slave_1) entered blocking state
[  775.297161][T26983] bridge0: port 2(bridge_slave_1) entered forwarding state
[  775.319050][ T8819] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  775.328570][ T8819] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  775.337624][ T8819] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  775.347317][ T8819] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  775.356567][ T8819] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  775.365540][ T8819] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  775.373879][ T8819] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  775.382507][ T8819] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  775.390870][ T8819] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  775.399763][ T8819] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  775.408870][ T8819] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  775.419886][T27632] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  775.441881][T27632] 8021q: adding VLAN 0 to HW filter on device batadv0
08:15:28 executing program 2:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)

08:15:28 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)

08:15:28 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:15:28 executing program 4:
r0 = syz_open_dev$evdev(&(0x7f0000974fee)='/dev/input/event#\x00', 0x0, 0x101002)
write$evdev(0xffffffffffffffff, &(0x7f0000000080)=[{{}, 0x1, 0x74, 0x2}, {}], 0xfcf2)
sendfile(r0, 0xffffffffffffffff, &(0x7f0000000000), 0x100000001)
ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f00000000c0)=""/216)

08:15:28 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}, 0x3c)

08:15:28 executing program 5:
mkdir(0x0, 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})

08:15:28 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, 0x3c)

08:15:28 executing program 5:
mkdir(0x0, 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})

08:15:28 executing program 4:
r0 = syz_open_dev$evdev(&(0x7f0000974fee)='/dev/input/event#\x00', 0x0, 0x101002)
write$evdev(0xffffffffffffffff, &(0x7f0000000080)=[{{}, 0x1, 0x74, 0x2}, {}], 0xfcf2)
sendfile(r0, 0xffffffffffffffff, &(0x7f0000000000), 0x100000001)
ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f00000000c0)=""/216)

08:15:29 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:15:29 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}, 0x3c)

08:15:29 executing program 2:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)

08:15:29 executing program 5:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mount$bpf(0x20000000, 0x0, 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})

08:15:29 executing program 4:
r0 = syz_open_dev$evdev(&(0x7f0000974fee)='/dev/input/event#\x00', 0x0, 0x101002)
write$evdev(0xffffffffffffffff, &(0x7f0000000080)=[{{}, 0x1, 0x74, 0x2}, {}], 0xfcf2)
sendfile(r0, 0xffffffffffffffff, &(0x7f0000000000), 0x100000001)
ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f00000000c0)=""/216)

08:15:29 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, 0x3c)

08:15:29 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:15:29 executing program 5:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mount$bpf(0x20000000, 0x0, 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})

[  778.129209][T27694] IPVS: ftp: loaded support on port[0] = 21
[  778.193702][T27694] chnl_net:caif_netlink_parms(): no params data found
[  778.223130][T27694] bridge0: port 1(bridge_slave_0) entered blocking state
[  778.230739][T27694] bridge0: port 1(bridge_slave_0) entered disabled state
[  778.238881][T27694] device bridge_slave_0 entered promiscuous mode
[  778.359720][T27694] bridge0: port 2(bridge_slave_1) entered blocking state
[  778.366977][T27694] bridge0: port 2(bridge_slave_1) entered disabled state
[  778.375093][T27694] device bridge_slave_1 entered promiscuous mode
[  778.391637][T27694] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  778.402132][T27694] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  778.422156][T27694] team0: Port device team_slave_0 added
[  778.486213][T27694] team0: Port device team_slave_1 added
[  778.537493][T27694] device hsr_slave_0 entered promiscuous mode
[  778.604555][T27694] device hsr_slave_1 entered promiscuous mode
[  778.746280][T27694] 8021q: adding VLAN 0 to HW filter on device bond0
[  778.817788][T27694] 8021q: adding VLAN 0 to HW filter on device team0
[  778.826623][T26986] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[  778.837643][T26986] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  778.846404][T26986] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  778.924871][T26986] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  778.933673][T26986] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  778.942564][T26986] bridge0: port 1(bridge_slave_0) entered blocking state
[  778.949686][T26986] bridge0: port 1(bridge_slave_0) entered forwarding state
[  778.957328][T26986] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  778.966126][T26986] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  778.974647][T26986] bridge0: port 2(bridge_slave_1) entered blocking state
[  778.981721][T26986] bridge0: port 2(bridge_slave_1) entered forwarding state
[  778.992442][T26986] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  779.000912][T26986] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  779.010485][T26986] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  779.085120][ T8773] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  779.094001][ T8773] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  779.102476][ T8773] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  779.113866][T27694] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  779.194065][T27694] 8021q: adding VLAN 0 to HW filter on device batadv0
08:15:32 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)

08:15:32 executing program 4:
r0 = open(0x0, 0x14104a, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000974fee)='/dev/input/event#\x00', 0x0, 0x101002)
write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x74, 0x2}, {}], 0xfcf2)
sendfile(r1, r0, &(0x7f0000000000), 0x100000001)
ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f00000000c0)=""/216)

08:15:32 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}, 0x3c)

08:15:32 executing program 5:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})

08:15:32 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:15:32 executing program 2:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)

08:15:32 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf]}, 0x3c)

[  779.617430][ T8857] device bridge_slave_1 left promiscuous mode
08:15:32 executing program 4:
r0 = open(0x0, 0x14104a, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000974fee)='/dev/input/event#\x00', 0x0, 0x101002)
write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x74, 0x2}, {}], 0xfcf2)
sendfile(r1, r0, &(0x7f0000000000), 0x100000001)
ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f00000000c0)=""/216)

[  779.660619][ T8857] bridge0: port 2(bridge_slave_1) entered disabled state
08:15:32 executing program 5:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})

08:15:32 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

[  779.745676][ T8857] device bridge_slave_0 left promiscuous mode
[  779.755709][ T8857] bridge0: port 1(bridge_slave_0) entered disabled state
08:15:32 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10]}, 0x3c)

08:15:32 executing program 4:
r0 = open(0x0, 0x14104a, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000974fee)='/dev/input/event#\x00', 0x0, 0x101002)
write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x74, 0x2}, {}], 0xfcf2)
sendfile(r1, r0, &(0x7f0000000000), 0x100000001)
ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f00000000c0)=""/216)

[  781.897506][ T8857] device hsr_slave_1 left promiscuous mode
[  781.961209][ T8857] device hsr_slave_0 left promiscuous mode
[  782.020024][ T8857] team0 (unregistering): Port device team_slave_1 removed
[  782.030961][ T8857] team0 (unregistering): Port device team_slave_0 removed
[  782.045078][ T8857] bond0 (unregistering): Releasing backup interface bond_slave_1
[  782.110490][ T8857] bond0 (unregistering): Releasing backup interface bond_slave_0
[  782.201695][ T8857] bond0 (unregistering): Released all slaves
[  782.477586][T27737] IPVS: ftp: loaded support on port[0] = 21
08:15:35 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)

08:15:35 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11]}, 0x3c)

08:15:35 executing program 5:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})

08:15:35 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:15:35 executing program 4:
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000974fee)='/dev/input/event#\x00', 0x0, 0x101002)
write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x74, 0x2}, {}], 0xfcf2)
sendfile(r1, r0, &(0x7f0000000000), 0x100000001)
ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f00000000c0)=""/216)

[  782.625638][T27737] chnl_net:caif_netlink_parms(): no params data found
[  782.833044][T27737] bridge0: port 1(bridge_slave_0) entered blocking state
[  782.872321][T27737] bridge0: port 1(bridge_slave_0) entered disabled state
[  782.889424][T27737] device bridge_slave_0 entered promiscuous mode
[  782.905574][T27737] bridge0: port 2(bridge_slave_1) entered blocking state
[  782.912760][T27737] bridge0: port 2(bridge_slave_1) entered disabled state
[  782.948120][T27737] device bridge_slave_1 entered promiscuous mode
[  782.993229][T27737] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  783.012219][T27737] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  783.041948][T27737] team0: Port device team_slave_0 added
[  783.056380][T27737] team0: Port device team_slave_1 added
[  783.168516][T27737] device hsr_slave_0 entered promiscuous mode
[  783.254616][T27737] device hsr_slave_1 entered promiscuous mode
[  783.331226][T27737] bridge0: port 2(bridge_slave_1) entered blocking state
[  783.338353][T27737] bridge0: port 2(bridge_slave_1) entered forwarding state
[  783.345856][T27737] bridge0: port 1(bridge_slave_0) entered blocking state
[  783.352920][T27737] bridge0: port 1(bridge_slave_0) entered forwarding state
[  783.428968][T27737] 8021q: adding VLAN 0 to HW filter on device bond0
[  783.450797][ T8773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  783.462562][ T8773] bridge0: port 1(bridge_slave_0) entered disabled state
[  783.473877][ T8773] bridge0: port 2(bridge_slave_1) entered disabled state
[  783.500581][T27737] 8021q: adding VLAN 0 to HW filter on device team0
[  783.513395][ T8773] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  783.522645][ T8773] bridge0: port 1(bridge_slave_0) entered blocking state
[  783.529755][ T8773] bridge0: port 1(bridge_slave_0) entered forwarding state
[  783.546981][ T8773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  783.555784][ T8773] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  783.564846][ T8773] bridge0: port 2(bridge_slave_1) entered blocking state
[  783.571909][ T8773] bridge0: port 2(bridge_slave_1) entered forwarding state
[  783.580483][ T8773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  783.610846][ T8773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  783.620564][ T8773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  783.629787][ T8773] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  783.651092][ T8773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  783.659622][ T8773] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  783.668161][ T8773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  783.676388][ T8773] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  783.685561][ T8773] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  783.698155][T27737] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  783.722004][T27737] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  783.731072][T26986] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  783.752074][T26986] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  783.771709][T27737] 8021q: adding VLAN 0 to HW filter on device batadv0
08:15:37 executing program 2:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)

08:15:37 executing program 4:
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000974fee)='/dev/input/event#\x00', 0x0, 0x101002)
write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x74, 0x2}, {}], 0xfcf2)
sendfile(r1, r0, &(0x7f0000000000), 0x100000001)
ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f00000000c0)=""/216)

08:15:37 executing program 5:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})

08:15:37 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r1=>0xffffffffffffffff}}}, 0x20)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r1}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)

08:15:37 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12]}, 0x3c)

08:15:37 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:15:37 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13]}, 0x3c)

08:15:37 executing program 5:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})

08:15:37 executing program 4:
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000974fee)='/dev/input/event#\x00', 0x0, 0x101002)
write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x74, 0x2}, {}], 0xfcf2)
sendfile(r1, r0, &(0x7f0000000000), 0x100000001)
ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f00000000c0)=""/216)

08:15:37 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:15:37 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14]}, 0x3c)

08:15:37 executing program 5:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})

[  786.073778][T27792] IPVS: ftp: loaded support on port[0] = 21
[  786.257097][T27792] chnl_net:caif_netlink_parms(): no params data found
[  786.283942][T27792] bridge0: port 1(bridge_slave_0) entered blocking state
[  786.291720][T27792] bridge0: port 1(bridge_slave_0) entered disabled state
[  786.299847][T27792] device bridge_slave_0 entered promiscuous mode
[  786.308316][T27792] bridge0: port 2(bridge_slave_1) entered blocking state
[  786.315569][T27792] bridge0: port 2(bridge_slave_1) entered disabled state
[  786.323619][T27792] device bridge_slave_1 entered promiscuous mode
[  786.456695][T27792] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  786.579749][T27792] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  786.600213][T27792] team0: Port device team_slave_0 added
[  786.607749][T27792] team0: Port device team_slave_1 added
[  786.667499][T27792] device hsr_slave_0 entered promiscuous mode
[  786.704699][T27792] device hsr_slave_1 entered promiscuous mode
[  786.869795][T27792] bridge0: port 2(bridge_slave_1) entered blocking state
[  786.876988][T27792] bridge0: port 2(bridge_slave_1) entered forwarding state
[  786.884426][T27792] bridge0: port 1(bridge_slave_0) entered blocking state
[  786.891491][T27792] bridge0: port 1(bridge_slave_0) entered forwarding state
[  786.906917][ T8857] device bridge_slave_1 left promiscuous mode
[  786.913206][ T8857] bridge0: port 2(bridge_slave_1) entered disabled state
[  786.965024][ T8857] device bridge_slave_0 left promiscuous mode
[  786.971184][ T8857] bridge0: port 1(bridge_slave_0) entered disabled state
[  787.026340][ T8857] device bridge_slave_1 left promiscuous mode
[  787.032536][ T8857] bridge0: port 2(bridge_slave_1) entered disabled state
[  787.085518][ T8857] device bridge_slave_0 left promiscuous mode
[  787.091745][ T8857] bridge0: port 1(bridge_slave_0) entered disabled state
[  790.267399][ T8857] device hsr_slave_1 left promiscuous mode
[  790.317834][ T8857] device hsr_slave_0 left promiscuous mode
[  790.357895][ T8857] team0 (unregistering): Port device team_slave_1 removed
[  790.372782][ T8857] team0 (unregistering): Port device team_slave_0 removed
[  790.384927][ T8857] bond0 (unregistering): Releasing backup interface bond_slave_1
[  790.438759][ T8857] bond0 (unregistering): Releasing backup interface bond_slave_0
[  790.531856][ T8857] bond0 (unregistering): Released all slaves
[  790.707835][ T8857] device hsr_slave_1 left promiscuous mode
[  790.770326][ T8857] device hsr_slave_0 left promiscuous mode
[  790.817862][ T8857] team0 (unregistering): Port device team_slave_1 removed
[  790.831385][ T8857] team0 (unregistering): Port device team_slave_0 removed
[  790.844328][ T8857] bond0 (unregistering): Releasing backup interface bond_slave_1
[  790.878858][ T8857] bond0 (unregistering): Releasing backup interface bond_slave_0
[  790.970706][ T8857] bond0 (unregistering): Released all slaves
[  791.075495][T26983] bridge0: port 1(bridge_slave_0) entered disabled state
[  791.083408][T26983] bridge0: port 2(bridge_slave_1) entered disabled state
[  791.109400][T27792] 8021q: adding VLAN 0 to HW filter on device bond0
[  791.123993][T26983] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  791.132428][T26983] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  791.142774][T27792] 8021q: adding VLAN 0 to HW filter on device team0
[  791.151979][ T8773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  791.161209][ T8773] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  791.169795][ T8773] bridge0: port 1(bridge_slave_0) entered blocking state
[  791.176874][ T8773] bridge0: port 1(bridge_slave_0) entered forwarding state
[  791.194740][ T8773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  791.203729][ T8773] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  791.212412][ T8773] bridge0: port 2(bridge_slave_1) entered blocking state
[  791.219512][ T8773] bridge0: port 2(bridge_slave_1) entered forwarding state
[  791.228564][ T8773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  791.237461][ T8773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  791.255113][ T8773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  791.263837][ T8773] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  791.272576][ T8773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  791.281355][ T8773] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  791.290147][ T8773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  791.298695][ T8773] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  791.307072][ T8773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  791.315584][ T8773] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  791.324031][ T8773] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  791.335222][T27792] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  791.353460][T27792] 8021q: adding VLAN 0 to HW filter on device batadv0
08:15:44 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r1=>0xffffffffffffffff}}}, 0x20)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r1}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)

08:15:44 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15]}, 0x3c)

08:15:44 executing program 4:
r0 = open(&(0x7f0000000200)='./file0\x00', 0x14104a, 0x0)
r1 = syz_open_dev$evdev(0x0, 0x0, 0x101002)
write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x74, 0x2}, {}], 0xfcf2)
sendfile(r1, r0, &(0x7f0000000000), 0x100000001)
ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f00000000c0)=""/216)

08:15:44 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:15:44 executing program 2:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)

08:15:44 executing program 5:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})

08:15:44 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16]}, 0x3c)

08:15:44 executing program 4:
r0 = open(&(0x7f0000000200)='./file0\x00', 0x14104a, 0x0)
r1 = syz_open_dev$evdev(0x0, 0x0, 0x101002)
write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x74, 0x2}, {}], 0xfcf2)
sendfile(r1, r0, &(0x7f0000000000), 0x100000001)
ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f00000000c0)=""/216)

08:15:44 executing program 5:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})

08:15:44 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:15:45 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18]}, 0x3c)

08:15:45 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r1=>0xffffffffffffffff}}}, 0x20)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r1}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)

08:15:45 executing program 4:
r0 = open(&(0x7f0000000200)='./file0\x00', 0x14104a, 0x0)
r1 = syz_open_dev$evdev(0x0, 0x0, 0x101002)
write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x74, 0x2}, {}], 0xfcf2)
sendfile(r1, r0, &(0x7f0000000000), 0x100000001)
ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f00000000c0)=""/216)

08:15:45 executing program 5:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})

08:15:45 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180]}, 0x3c)

08:15:45 executing program 4:
r0 = open(&(0x7f0000000200)='./file0\x00', 0x14104a, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000974fee)='/dev/input/event#\x00', 0x0, 0x0)
write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x74, 0x2}, {}], 0xfcf2)
sendfile(r1, r0, &(0x7f0000000000), 0x100000001)
ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f00000000c0)=""/216)

[  793.912436][T27852] IPVS: ftp: loaded support on port[0] = 21
[  793.978688][T27852] chnl_net:caif_netlink_parms(): no params data found
[  794.007157][T27852] bridge0: port 1(bridge_slave_0) entered blocking state
[  794.014368][T27852] bridge0: port 1(bridge_slave_0) entered disabled state
[  794.022090][T27852] device bridge_slave_0 entered promiscuous mode
[  794.030003][T27852] bridge0: port 2(bridge_slave_1) entered blocking state
[  794.037425][T27852] bridge0: port 2(bridge_slave_1) entered disabled state
[  794.045659][T27852] device bridge_slave_1 entered promiscuous mode
[  794.178553][T27852] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  794.188793][T27852] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  794.207095][T27852] team0: Port device team_slave_0 added
[  794.269676][T27852] team0: Port device team_slave_1 added
[  794.326100][T27852] device hsr_slave_0 entered promiscuous mode
[  794.364525][T27852] device hsr_slave_1 entered promiscuous mode
[  794.493255][T27852] 8021q: adding VLAN 0 to HW filter on device bond0
[  794.506312][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[  794.518342][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  794.526272][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  794.590886][T27852] 8021q: adding VLAN 0 to HW filter on device team0
[  794.600722][T23140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  794.609641][T23140] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  794.618368][T23140] bridge0: port 1(bridge_slave_0) entered blocking state
[  794.626636][T23140] bridge0: port 1(bridge_slave_0) entered forwarding state
[  794.636458][T23140] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  794.647510][ T8773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  794.656808][ T8773] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  794.665796][ T8773] bridge0: port 2(bridge_slave_1) entered blocking state
[  794.672863][ T8773] bridge0: port 2(bridge_slave_1) entered forwarding state
[  794.756222][T26986] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  794.768866][T26986] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  794.777593][T26986] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  794.786415][T26986] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  794.794840][T26986] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  794.803842][T26986] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  794.870426][T27852] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  794.889876][T27852] 8021q: adding VLAN 0 to HW filter on device batadv0
08:15:48 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)

08:15:48 executing program 2:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)

08:15:48 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}, 0x3c)

08:15:48 executing program 5:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})

08:15:48 executing program 4:
r0 = open(&(0x7f0000000200)='./file0\x00', 0x14104a, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000974fee)='/dev/input/event#\x00', 0x0, 0x0)
write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x74, 0x2}, {}], 0xfcf2)
sendfile(r1, r0, &(0x7f0000000000), 0x100000001)
ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f00000000c0)=""/216)

08:15:48 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:15:48 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500]}, 0x3c)

08:15:48 executing program 5:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})

08:15:48 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:15:48 executing program 4:
r0 = open(&(0x7f0000000200)='./file0\x00', 0x14104a, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000974fee)='/dev/input/event#\x00', 0x0, 0x0)
write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x74, 0x2}, {}], 0xfcf2)
sendfile(r1, r0, &(0x7f0000000000), 0x100000001)
ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f00000000c0)=""/216)

08:15:48 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}, 0x3c)

08:15:48 executing program 5:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})

[  796.132113][ T8857] device bridge_slave_1 left promiscuous mode
[  796.143849][ T8857] bridge0: port 2(bridge_slave_1) entered disabled state
[  796.206917][ T8857] device bridge_slave_0 left promiscuous mode
[  796.213116][ T8857] bridge0: port 1(bridge_slave_0) entered disabled state
[  797.816828][ T8857] device hsr_slave_1 left promiscuous mode
[  797.889516][ T8857] device hsr_slave_0 left promiscuous mode
[  797.949354][ T8857] team0 (unregistering): Port device team_slave_1 removed
[  797.960790][ T8857] team0 (unregistering): Port device team_slave_0 removed
[  797.973881][ T8857] bond0 (unregistering): Releasing backup interface bond_slave_1
[  797.998671][ T8857] bond0 (unregistering): Releasing backup interface bond_slave_0
[  798.100319][ T8857] bond0 (unregistering): Released all slaves
[  798.219912][T27895] IPVS: ftp: loaded support on port[0] = 21
[  798.313149][T27895] chnl_net:caif_netlink_parms(): no params data found
[  798.399274][T27895] bridge0: port 1(bridge_slave_0) entered blocking state
[  798.406472][T27895] bridge0: port 1(bridge_slave_0) entered disabled state
[  798.420274][T27895] device bridge_slave_0 entered promiscuous mode
[  798.428646][T27895] bridge0: port 2(bridge_slave_1) entered blocking state
[  798.442496][T27895] bridge0: port 2(bridge_slave_1) entered disabled state
[  798.450615][T27895] device bridge_slave_1 entered promiscuous mode
[  798.484564][T27895] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  798.500863][T27895] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  798.528308][T27895] team0: Port device team_slave_0 added
[  798.536173][T27895] team0: Port device team_slave_1 added
[  798.607197][T27895] device hsr_slave_0 entered promiscuous mode
[  798.704620][T27895] device hsr_slave_1 entered promiscuous mode
[  798.791935][T27895] bridge0: port 2(bridge_slave_1) entered blocking state
[  798.799170][T27895] bridge0: port 2(bridge_slave_1) entered forwarding state
[  798.806633][T27895] bridge0: port 1(bridge_slave_0) entered blocking state
[  798.813715][T27895] bridge0: port 1(bridge_slave_0) entered forwarding state
[  798.865652][T27895] 8021q: adding VLAN 0 to HW filter on device bond0
[  798.881048][T23140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  798.891154][T23140] bridge0: port 1(bridge_slave_0) entered disabled state
[  798.899725][T23140] bridge0: port 2(bridge_slave_1) entered disabled state
[  798.921372][T27895] 8021q: adding VLAN 0 to HW filter on device team0
[  798.934656][T23140] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  798.943198][T23140] bridge0: port 1(bridge_slave_0) entered blocking state
[  798.950345][T23140] bridge0: port 1(bridge_slave_0) entered forwarding state
[  798.969310][T26986] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  798.978007][T26986] bridge0: port 2(bridge_slave_1) entered blocking state
[  798.985142][T26986] bridge0: port 2(bridge_slave_1) entered forwarding state
[  799.021323][T26986] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  799.030711][T26986] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  799.054091][T27895] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  799.065126][T27895] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  799.079315][T23140] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  799.088334][T23140] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  799.097832][T23140] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  799.136325][T23140] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  799.155715][T27895] 8021q: adding VLAN 0 to HW filter on device batadv0
08:15:52 executing program 4:
r0 = open(&(0x7f0000000200)='./file0\x00', 0x14104a, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000974fee)='/dev/input/event#\x00', 0x0, 0x101002)
write$evdev(0xffffffffffffffff, &(0x7f0000000080)=[{{}, 0x1, 0x74, 0x2}, {}], 0xfcf2)
sendfile(r1, r0, &(0x7f0000000000), 0x100000001)
ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f00000000c0)=""/216)

08:15:52 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700]}, 0x3c)

08:15:52 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:15:52 executing program 5:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})

08:15:52 executing program 2:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r1=>0xffffffffffffffff}}}, 0x20)
write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r1}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)

08:15:52 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)

08:15:52 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900]}, 0x3c)

08:15:52 executing program 4:
r0 = open(&(0x7f0000000200)='./file0\x00', 0x14104a, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000974fee)='/dev/input/event#\x00', 0x0, 0x101002)
write$evdev(0xffffffffffffffff, &(0x7f0000000080)=[{{}, 0x1, 0x74, 0x2}, {}], 0xfcf2)
sendfile(r1, r0, &(0x7f0000000000), 0x100000001)
ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f00000000c0)=""/216)

08:15:52 executing program 5:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})

08:15:52 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00]}, 0x3c)

08:15:52 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:15:52 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00]}, 0x3c)

08:15:52 executing program 4:
r0 = open(&(0x7f0000000200)='./file0\x00', 0x14104a, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000974fee)='/dev/input/event#\x00', 0x0, 0x101002)
write$evdev(0xffffffffffffffff, &(0x7f0000000080)=[{{}, 0x1, 0x74, 0x2}, {}], 0xfcf2)
sendfile(r1, r0, &(0x7f0000000000), 0x100000001)
ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f00000000c0)=""/216)

08:15:53 executing program 5:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})

08:15:53 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00]}, 0x3c)

08:15:53 executing program 4:
r0 = open(&(0x7f0000000200)='./file0\x00', 0x14104a, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000974fee)='/dev/input/event#\x00', 0x0, 0x101002)
write$evdev(r0, 0x0, 0x0)
sendfile(r1, r0, &(0x7f0000000000), 0x100000001)
ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f00000000c0)=""/216)

[  801.805628][T27951] IPVS: ftp: loaded support on port[0] = 21
[  802.101979][T27951] chnl_net:caif_netlink_parms(): no params data found
[  802.246444][T27951] bridge0: port 1(bridge_slave_0) entered blocking state
[  802.253516][T27951] bridge0: port 1(bridge_slave_0) entered disabled state
[  802.264696][T27951] device bridge_slave_0 entered promiscuous mode
[  802.272353][T27951] bridge0: port 2(bridge_slave_1) entered blocking state
[  802.279647][T27951] bridge0: port 2(bridge_slave_1) entered disabled state
[  802.287741][T27951] device bridge_slave_1 entered promiscuous mode
[  802.307569][T27951] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  802.317529][ T8857] device bridge_slave_1 left promiscuous mode
[  802.323774][ T8857] bridge0: port 2(bridge_slave_1) entered disabled state
[  802.365612][ T8857] device bridge_slave_0 left promiscuous mode
[  802.371791][ T8857] bridge0: port 1(bridge_slave_0) entered disabled state
[  802.406401][ T8857] device bridge_slave_1 left promiscuous mode
[  802.412611][ T8857] bridge0: port 2(bridge_slave_1) entered disabled state
[  802.455112][ T8857] device bridge_slave_0 left promiscuous mode
[  802.461290][ T8857] bridge0: port 1(bridge_slave_0) entered disabled state
[  805.607283][ T8857] device hsr_slave_1 left promiscuous mode
[  805.648784][ T8857] device hsr_slave_0 left promiscuous mode
[  805.708548][ T8857] team0 (unregistering): Port device team_slave_1 removed
[  805.722972][ T8857] team0 (unregistering): Port device team_slave_0 removed
[  805.734665][ T8857] bond0 (unregistering): Releasing backup interface bond_slave_1
[  805.790432][ T8857] bond0 (unregistering): Releasing backup interface bond_slave_0
[  805.908489][ T8857] bond0 (unregistering): Released all slaves
[  806.037914][ T8857] device hsr_slave_1 left promiscuous mode
[  806.079987][ T8857] device hsr_slave_0 left promiscuous mode
[  806.159456][ T8857] team0 (unregistering): Port device team_slave_1 removed
[  806.171158][ T8857] team0 (unregistering): Port device team_slave_0 removed
[  806.183410][ T8857] bond0 (unregistering): Releasing backup interface bond_slave_1
[  806.241741][ T8857] bond0 (unregistering): Releasing backup interface bond_slave_0
[  806.333551][ T8857] bond0 (unregistering): Released all slaves
[  806.430262][T27951] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  806.455580][T27951] team0: Port device team_slave_0 added
[  806.462433][T27951] team0: Port device team_slave_1 added
[  806.537388][T27951] device hsr_slave_0 entered promiscuous mode
[  806.577753][T27951] device hsr_slave_1 entered promiscuous mode
[  806.651580][T27951] 8021q: adding VLAN 0 to HW filter on device bond0
[  806.668131][T23140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  806.679091][T23140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  806.690526][T27951] 8021q: adding VLAN 0 to HW filter on device team0
[  806.700439][T23140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  806.709678][T23140] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  806.718258][T23140] bridge0: port 1(bridge_slave_0) entered blocking state
[  806.725365][T23140] bridge0: port 1(bridge_slave_0) entered forwarding state
[  806.746357][T23140] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  806.754880][T23140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  806.763449][T23140] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  806.772948][T23140] bridge0: port 2(bridge_slave_1) entered blocking state
[  806.780092][T23140] bridge0: port 2(bridge_slave_1) entered forwarding state
[  806.789171][T23140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  806.797966][T23140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  806.806877][T23140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  806.815564][T23140] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  806.824102][T23140] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  806.834017][T23140] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  806.849131][T23140] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  806.860365][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  806.871793][T27951] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  806.972072][T27951] 8021q: adding VLAN 0 to HW filter on device batadv0
08:16:00 executing program 2:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r1=>0xffffffffffffffff}}}, 0x20)
write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r1}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)

08:16:00 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:16:00 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00]}, 0x3c)

08:16:00 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)

08:16:00 executing program 4:
r0 = open(&(0x7f0000000200)='./file0\x00', 0x14104a, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000974fee)='/dev/input/event#\x00', 0x0, 0x101002)
write$evdev(r0, 0x0, 0x0)
sendfile(r1, r0, &(0x7f0000000000), 0x100000001)
ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f00000000c0)=""/216)

08:16:00 executing program 5:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})

08:16:00 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00]}, 0x3c)

08:16:00 executing program 5:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})

08:16:00 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:16:00 executing program 4:
r0 = open(&(0x7f0000000200)='./file0\x00', 0x14104a, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000974fee)='/dev/input/event#\x00', 0x0, 0x101002)
write$evdev(r0, 0x0, 0x0)
sendfile(r1, r0, &(0x7f0000000000), 0x100000001)
ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f00000000c0)=""/216)

08:16:00 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf00]}, 0x3c)

08:16:00 executing program 5:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})

08:16:01 executing program 2:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r1=>0xffffffffffffffff}}}, 0x20)
write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r1}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)

08:16:01 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100]}, 0x3c)

[  809.535815][T27999] IPVS: ftp: loaded support on port[0] = 21
[  809.663772][T27999] chnl_net:caif_netlink_parms(): no params data found
[  809.754096][T27999] bridge0: port 1(bridge_slave_0) entered blocking state
[  809.762269][T27999] bridge0: port 1(bridge_slave_0) entered disabled state
[  809.770934][T27999] device bridge_slave_0 entered promiscuous mode
[  809.835546][T27999] bridge0: port 2(bridge_slave_1) entered blocking state
[  809.843454][T27999] bridge0: port 2(bridge_slave_1) entered disabled state
[  809.851944][T27999] device bridge_slave_1 entered promiscuous mode
[  809.870338][T27999] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  809.881324][T27999] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  809.959604][T27999] team0: Port device team_slave_0 added
[  809.967166][T27999] team0: Port device team_slave_1 added
[  810.046222][T27999] device hsr_slave_0 entered promiscuous mode
[  810.094832][T27999] device hsr_slave_1 entered promiscuous mode
[  810.208518][T27999] bridge0: port 2(bridge_slave_1) entered blocking state
[  810.216583][T27999] bridge0: port 2(bridge_slave_1) entered forwarding state
[  810.224746][T27999] bridge0: port 1(bridge_slave_0) entered blocking state
[  810.231899][T27999] bridge0: port 1(bridge_slave_0) entered forwarding state
[  810.334448][T27999] 8021q: adding VLAN 0 to HW filter on device bond0
[  810.348869][ T8778] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  810.358754][ T8778] bridge0: port 1(bridge_slave_0) entered disabled state
[  810.368157][ T8778] bridge0: port 2(bridge_slave_1) entered disabled state
[  810.377055][ T8778] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[  810.447806][T27999] 8021q: adding VLAN 0 to HW filter on device team0
[  810.459492][ T8778] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  810.469331][ T8778] bridge0: port 1(bridge_slave_0) entered blocking state
[  810.477147][ T8778] bridge0: port 1(bridge_slave_0) entered forwarding state
[  810.551420][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  810.561915][   T22] bridge0: port 2(bridge_slave_1) entered blocking state
[  810.569608][   T22] bridge0: port 2(bridge_slave_1) entered forwarding state
[  810.586675][T22664] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  810.596379][T22664] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  810.605694][ T8857] device bridge_slave_1 left promiscuous mode
[  810.612322][ T8857] bridge0: port 2(bridge_slave_1) entered disabled state
[  810.645448][ T8857] device bridge_slave_0 left promiscuous mode
[  810.652140][ T8857] bridge0: port 1(bridge_slave_0) entered disabled state
[  812.257613][ T8857] device hsr_slave_1 left promiscuous mode
[  812.327720][ T8857] device hsr_slave_0 left promiscuous mode
[  812.379911][ T8857] team0 (unregistering): Port device team_slave_1 removed
[  812.392504][ T8857] team0 (unregistering): Port device team_slave_0 removed
[  812.406300][ T8857] bond0 (unregistering): Releasing backup interface bond_slave_1
[  812.460003][ T8857] bond0 (unregistering): Releasing backup interface bond_slave_0
[  812.528006][ T8857] bond0 (unregistering): Released all slaves
[  812.625142][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  812.643775][T27999] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  812.657224][T27999] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  812.670634][T22664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  812.680820][T22664] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  812.689948][T22664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  812.699201][T22664] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  812.708398][T22664] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  812.732482][T27999] 8021q: adding VLAN 0 to HW filter on device batadv0
08:16:06 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)

08:16:06 executing program 4:
r0 = open(&(0x7f0000000200)='./file0\x00', 0x14104a, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000974fee)='/dev/input/event#\x00', 0x0, 0x101002)
write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x74, 0x2}], 0x18)
sendfile(r1, r0, &(0x7f0000000000), 0x100000001)
ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f00000000c0)=""/216)

08:16:06 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200]}, 0x3c)

08:16:06 executing program 5:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, 0x0, &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})

08:16:06 executing program 2:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)

08:16:06 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:16:06 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1300]}, 0x3c)

08:16:06 executing program 5:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, 0x0, &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})

08:16:06 executing program 4:
r0 = open(&(0x7f0000000200)='./file0\x00', 0x14104a, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000974fee)='/dev/input/event#\x00', 0x0, 0x101002)
write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x74, 0x2}], 0x18)
sendfile(r1, r0, &(0x7f0000000000), 0x100000001)
ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f00000000c0)=""/216)

08:16:06 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:16:06 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1400]}, 0x3c)

08:16:06 executing program 5:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, 0x0, &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})

08:16:07 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)

08:16:07 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1500]}, 0x3c)

08:16:07 executing program 4:
r0 = open(&(0x7f0000000200)='./file0\x00', 0x14104a, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000974fee)='/dev/input/event#\x00', 0x0, 0x101002)
write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x74, 0x2}], 0x18)
sendfile(r1, r0, &(0x7f0000000000), 0x100000001)
ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f00000000c0)=""/216)

08:16:07 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:16:07 executing program 5:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})

[  815.139814][T28058] IPVS: ftp: loaded support on port[0] = 21
[  815.210471][T28058] chnl_net:caif_netlink_parms(): no params data found
[  815.241431][T28058] bridge0: port 1(bridge_slave_0) entered blocking state
[  815.256717][T28058] bridge0: port 1(bridge_slave_0) entered disabled state
[  815.265988][T28058] device bridge_slave_0 entered promiscuous mode
[  815.383222][T28058] bridge0: port 2(bridge_slave_1) entered blocking state
[  815.391600][T28058] bridge0: port 2(bridge_slave_1) entered disabled state
[  815.401619][T28058] device bridge_slave_1 entered promiscuous mode
[  815.478657][T28058] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  815.492299][T28058] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  815.572295][T28058] team0: Port device team_slave_0 added
[  815.580552][T28058] team0: Port device team_slave_1 added
[  815.646832][T28058] device hsr_slave_0 entered promiscuous mode
[  815.704595][T28058] device hsr_slave_1 entered promiscuous mode
[  815.818641][T28058] bridge0: port 2(bridge_slave_1) entered blocking state
[  815.826712][T28058] bridge0: port 2(bridge_slave_1) entered forwarding state
[  815.834734][T28058] bridge0: port 1(bridge_slave_0) entered blocking state
[  815.842105][T28058] bridge0: port 1(bridge_slave_0) entered forwarding state
[  815.943715][T28058] 8021q: adding VLAN 0 to HW filter on device bond0
[  816.021536][T28058] 8021q: adding VLAN 0 to HW filter on device team0
[  816.030055][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  816.038558][   T22] bridge0: port 1(bridge_slave_0) entered disabled state
[  816.046875][   T22] bridge0: port 2(bridge_slave_1) entered disabled state
[  816.056370][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[  816.145555][ T8778] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  816.154920][ T8778] bridge0: port 1(bridge_slave_0) entered blocking state
[  816.162711][ T8778] bridge0: port 1(bridge_slave_0) entered forwarding state
[  816.170850][ T8778] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  816.180893][ T8778] bridge0: port 2(bridge_slave_1) entered blocking state
[  816.188559][ T8778] bridge0: port 2(bridge_slave_1) entered forwarding state
[  816.197942][ T8778] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  816.209211][ T8778] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  816.279820][ T8819] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  816.290638][ T8819] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  816.305476][T23140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  816.315703][T23140] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  816.325402][T23140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  816.334064][T23140] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  816.344985][T28058] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  816.420631][T28058] 8021q: adding VLAN 0 to HW filter on device batadv0
[  816.455483][ T8857] device bridge_slave_1 left promiscuous mode
[  816.462041][ T8857] bridge0: port 2(bridge_slave_1) entered disabled state
[  816.525515][ T8857] device bridge_slave_0 left promiscuous mode
[  816.532075][ T8857] bridge0: port 1(bridge_slave_0) entered disabled state
[  818.147528][ T8857] device hsr_slave_1 left promiscuous mode
[  818.209902][ T8857] device hsr_slave_0 left promiscuous mode
[  818.278098][ T8857] team0 (unregistering): Port device team_slave_1 removed
[  818.293830][ T8857] team0 (unregistering): Port device team_slave_0 removed
[  818.307563][ T8857] bond0 (unregistering): Releasing backup interface bond_slave_1
[  818.370746][ T8857] bond0 (unregistering): Releasing backup interface bond_slave_0
[  818.461273][ T8857] bond0 (unregistering): Released all slaves
08:16:11 executing program 2:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)

08:16:11 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1600]}, 0x3c)

08:16:11 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(0x0, 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:16:11 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)

08:16:11 executing program 4:
r0 = open(&(0x7f0000000200)='./file0\x00', 0x14104a, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000974fee)='/dev/input/event#\x00', 0x0, 0x101002)
write$evdev(r0, &(0x7f0000000080)=[{}], 0x18)
sendfile(r1, r0, &(0x7f0000000000), 0x100000001)
ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f00000000c0)=""/216)

08:16:11 executing program 5:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})

08:16:11 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1800]}, 0x3c)

08:16:12 executing program 4:
r0 = open(&(0x7f0000000200)='./file0\x00', 0x14104a, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000974fee)='/dev/input/event#\x00', 0x0, 0x101002)
write$evdev(r0, &(0x7f0000000080)=[{}], 0x18)
sendfile(0xffffffffffffffff, r0, &(0x7f0000000000), 0x100000001)
ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f00000000c0)=""/216)

08:16:12 executing program 5:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})

08:16:12 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(0x0, 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:16:12 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}, 0x3c)

08:16:12 executing program 4:
r0 = open(&(0x7f0000000200)='./file0\x00', 0x14104a, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000974fee)='/dev/input/event#\x00', 0x0, 0x101002)
write$evdev(r0, &(0x7f0000000080)=[{}], 0x18)
sendfile(0xffffffffffffffff, r0, &(0x7f0000000000), 0x100000001)
ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f00000000c0)=""/216)

08:16:12 executing program 2:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)

08:16:12 executing program 5:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, 0x0)

08:16:12 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000]}, 0x3c)

[  820.957623][T28110] IPVS: ftp: loaded support on port[0] = 21
[  821.022910][T28110] chnl_net:caif_netlink_parms(): no params data found
[  821.159102][T28110] bridge0: port 1(bridge_slave_0) entered blocking state
[  821.166395][T28110] bridge0: port 1(bridge_slave_0) entered disabled state
[  821.174112][T28110] device bridge_slave_0 entered promiscuous mode
[  821.182132][T28110] bridge0: port 2(bridge_slave_1) entered blocking state
[  821.189915][T28110] bridge0: port 2(bridge_slave_1) entered disabled state
[  821.198583][T28110] device bridge_slave_1 entered promiscuous mode
[  821.274505][T28110] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  821.284605][T28110] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  821.301199][T28110] team0: Port device team_slave_0 added
[  821.308665][T28110] team0: Port device team_slave_1 added
[  821.346794][T28110] device hsr_slave_0 entered promiscuous mode
[  821.394672][T28110] device hsr_slave_1 entered promiscuous mode
[  821.528961][T28110] bridge0: port 2(bridge_slave_1) entered blocking state
[  821.536251][T28110] bridge0: port 2(bridge_slave_1) entered forwarding state
[  821.543568][T28110] bridge0: port 1(bridge_slave_0) entered blocking state
[  821.550717][T28110] bridge0: port 1(bridge_slave_0) entered forwarding state
[  821.645591][T28110] 8021q: adding VLAN 0 to HW filter on device bond0
[  821.660275][ T8778] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  821.668362][ T8778] bridge0: port 1(bridge_slave_0) entered disabled state
[  821.676580][ T8778] bridge0: port 2(bridge_slave_1) entered disabled state
[  821.685400][ T8778] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[  821.698410][T28110] 8021q: adding VLAN 0 to HW filter on device team0
[  821.772875][ T8819] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  821.781463][ T8819] bridge0: port 1(bridge_slave_0) entered blocking state
[  821.788570][ T8819] bridge0: port 1(bridge_slave_0) entered forwarding state
[  821.796240][ T8819] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  821.805030][ T8819] bridge0: port 2(bridge_slave_1) entered blocking state
[  821.812066][ T8819] bridge0: port 2(bridge_slave_1) entered forwarding state
[  821.830248][T23140] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  821.838975][T23140] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  821.915889][T22664] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  821.924651][T22664] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  821.936754][T23140] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  822.008087][T28110] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  822.029457][T28110] 8021q: adding VLAN 0 to HW filter on device batadv0
[  822.268199][ T8857] device bridge_slave_1 left promiscuous mode
[  822.280691][ T8857] bridge0: port 2(bridge_slave_1) entered disabled state
08:16:15 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r1=>0xffffffffffffffff}}}, 0x20)
write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r1}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)

08:16:15 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(0x0, 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:16:15 executing program 4:
r0 = open(&(0x7f0000000200)='./file0\x00', 0x14104a, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000974fee)='/dev/input/event#\x00', 0x0, 0x101002)
write$evdev(r0, &(0x7f0000000080)=[{}], 0x18)
sendfile(0xffffffffffffffff, r0, &(0x7f0000000000), 0x100000001)
ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f00000000c0)=""/216)

08:16:15 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff]}, 0x3c)

08:16:15 executing program 2:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}}}, 0x20)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)

08:16:15 executing program 5:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, 0x0)

[  822.337272][ T8857] device bridge_slave_0 left promiscuous mode
[  822.345000][ T8857] bridge0: port 1(bridge_slave_0) entered disabled state
08:16:15 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}, 0x3c)

08:16:15 executing program 5:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, 0x0)

08:16:15 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, 0x0, 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:16:15 executing program 4:
r0 = open(&(0x7f0000000200)='./file0\x00', 0x14104a, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000974fee)='/dev/input/event#\x00', 0x0, 0x101002)
write$evdev(r0, &(0x7f0000000080)=[{}], 0x18)
sendfile(r1, 0xffffffffffffffff, &(0x7f0000000000), 0x100000001)
ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f00000000c0)=""/216)

08:16:15 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x3c)

08:16:15 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, 0x0, 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

[  824.677399][ T8857] device hsr_slave_1 left promiscuous mode
[  824.719867][ T8857] device hsr_slave_0 left promiscuous mode
[  824.787734][ T8857] team0 (unregistering): Port device team_slave_1 removed
[  824.799442][ T8857] team0 (unregistering): Port device team_slave_0 removed
[  824.812455][ T8857] bond0 (unregistering): Releasing backup interface bond_slave_1
[  824.878345][ T8857] bond0 (unregistering): Releasing backup interface bond_slave_0
[  824.947902][ T8857] bond0 (unregistering): Released all slaves
08:16:18 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r1=>0xffffffffffffffff}}}, 0x20)
write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r1}}, 0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
chdir(0x0)

08:16:18 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7, 0xe49, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000]}, 0x3c)

08:16:18 executing program 5:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})

08:16:18 executing program 4:
r0 = open(&(0x7f0000000200)='./file0\x00', 0x14104a, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000974fee)='/dev/input/event#\x00', 0x0, 0x101002)
write$evdev(r0, &(0x7f0000000080)=[{}], 0x18)
sendfile(r1, 0xffffffffffffffff, &(0x7f0000000000), 0x100000001)
ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f00000000c0)=""/216)

[  825.205121][T28154] IPVS: ftp: loaded support on port[0] = 21
[  825.350680][ T8857] ------------[ cut here ]------------
[  825.357903][ T8857] ODEBUG: free active (active state 0) object type: timer_list hint: delayed_work_timer_fn+0x0/0x90
[  825.369020][ T8857] WARNING: CPU: 1 PID: 8857 at lib/debugobjects.c:325 debug_print_object+0x168/0x250
[  825.378479][ T8857] Kernel panic - not syncing: panic_on_warn set ...
[  825.385074][ T8857] CPU: 1 PID: 8857 Comm: kworker/u4:5 Not tainted 5.2.0-rc3+ #20
[  825.392814][ T8857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  825.402890][ T8857] Workqueue: netns cleanup_net
[  825.407654][ T8857] Call Trace:
[  825.410970][ T8857]  dump_stack+0x172/0x1f0
[  825.415331][ T8857]  ? debug_print_object+0x150/0x250
[  825.420539][ T8857]  panic+0x2cb/0x744
[  825.424438][ T8857]  ? __warn_printk+0xf3/0xf3
[  825.429043][ T8857]  ? debug_print_object+0x168/0x250
[  825.434250][ T8857]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  825.440512][ T8857]  ? __warn.cold+0x5/0x4d
[  825.444854][ T8857]  ? __warn+0xe8/0x1d0
[  825.448931][ T8857]  ? debug_print_object+0x168/0x250
[  825.454158][ T8857]  __warn.cold+0x20/0x4d
[  825.458413][ T8857]  ? debug_print_object+0x168/0x250
[  825.463619][ T8857]  report_bug+0x263/0x2b0
[  825.467957][ T8857]  do_error_trap+0x11b/0x200
[  825.472554][ T8857]  do_invalid_op+0x37/0x50
[  825.476979][ T8857]  ? debug_print_object+0x168/0x250
[  825.482185][ T8857]  invalid_op+0x14/0x20
[  825.486345][ T8857] RIP: 0010:debug_print_object+0x168/0x250
[  825.493090][ T8857] Code: dd 60 c7 a4 87 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 b5 00 00 00 48 8b 14 dd 60 c7 a4 87 48 c7 c7 00 bd a4 87 e8 f6 8f 0d fe <0f> 0b 83 05 2b 61 4b 06 01 48 83 c4 20 5b 41 5c 41 5d 41 5e 5d c3
[  825.519595][ T8857] RSP: 0018:ffff88805fdff838 EFLAGS: 00010086
[  825.525839][ T8857] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000000000
[  825.533832][ T8857] RDX: 0000000000000000 RSI: ffffffff815ac936 RDI: ffffed100bfbfef9
[  825.541823][ T8857] RBP: ffff88805fdff878 R08: ffff88805fdf6000 R09: ffffed1015d240f1
[  825.549804][ T8857] R10: ffffed1015d240f0 R11: ffff8880ae920787 R12: 0000000000000001
[  825.557790][ T8857] R13: ffffffff88bad1a0 R14: ffffffff816039b0 R15: ffff88805ba8a660
[  825.565792][ T8857]  ? calc_wheel_index+0x220/0x220
[  825.570822][ T8857]  ? vprintk_func+0x86/0x189
[  825.575420][ T8857]  ? debug_print_object+0x168/0x250
[  825.580624][ T8857]  ? _raw_spin_unlock_irqrestore+0xa4/0xe0
[  825.586440][ T8857]  debug_check_no_obj_freed+0x29f/0x464
[  825.592001][ T8857]  kfree+0xbd/0x220
[  825.595821][ T8857]  kvfree+0x61/0x70
[  825.599640][ T8857]  netdev_freemem+0x4c/0x60
[  825.604496][ T8857]  netdev_release+0x86/0xb0
[  825.609013][ T8857]  ? xps_cpus_store+0x2b0/0x2b0
[  825.613864][ T8857]  device_release+0x7a/0x210
[  825.618463][ T8857]  kobject_put.cold+0x289/0x2e6
[  825.623324][ T8857]  netdev_run_todo+0x53b/0x7c0
[  825.628108][ T8857]  ? register_netdev+0x50/0x50
[  825.632871][ T8857]  ? unregister_netdevice_queue+0x1d2/0x2c0
[  825.638768][ T8857]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  825.645018][ T8857]  ? net_set_todo+0xbf/0x150
[  825.649625][ T8857]  rtnl_unlock+0xe/0x10
[  825.653791][ T8857]  default_device_exit_batch+0x358/0x410
[  825.659424][ T8857]  ? unregister_netdevice_many+0x50/0x50
[  825.665393][ T8857]  ? default_device_exit+0x203/0x290
[  825.670683][ T8857]  ? do_wait_intr_irq+0x2b0/0x2b0
[  825.675716][ T8857]  ? rtnl_unlock+0xe/0x10
[  825.680047][ T8857]  ? unregister_netdevice_many+0x50/0x50
[  825.685687][ T8857]  ? dev_change_net_namespace+0xc70/0xc70
[  825.691428][ T8857]  ops_exit_list.isra.0+0xfc/0x150
[  825.696547][ T8857]  cleanup_net+0x3fb/0x960
[  825.701026][ T8857]  ? netns_install+0x1d0/0x1d0
[  825.705812][ T8857]  process_one_work+0x989/0x1790
[  825.710765][ T8857]  ? pwq_dec_nr_in_flight+0x320/0x320
[  825.716139][ T8857]  ? lock_acquire+0x16f/0x3f0
[  825.720823][ T8857]  worker_thread+0x98/0xe40
[  825.725327][ T8857]  ? trace_hardirqs_on+0x67/0x220
[  825.730358][ T8857]  kthread+0x354/0x420
[  825.734430][ T8857]  ? process_one_work+0x1790/0x1790
[  825.739652][ T8857]  ? kthread_cancel_delayed_work_sync+0x20/0x20
[  825.745901][ T8857]  ret_from_fork+0x24/0x30
[  825.750320][ T8857] 
[  825.750327][ T8857] ======================================================
[  825.750333][ T8857] WARNING: possible circular locking dependency detected
[  825.750337][ T8857] 5.2.0-rc3+ #20 Not tainted
[  825.750343][ T8857] ------------------------------------------------------
[  825.750349][ T8857] kworker/u4:5/8857 is trying to acquire lock:
[  825.750353][ T8857] 0000000095664b2c ((console_sem).lock){-.-.}, at: down_trylock+0x13/0x70
[  825.750369][ T8857] 
[  825.750374][ T8857] but task is already holding lock:
[  825.750377][ T8857] 000000008efd7107 (&obj_hash[i].lock){-.-.}, at: debug_check_no_obj_freed+0xbe/0x464
[  825.750393][ T8857] 
[  825.750399][ T8857] which lock already depends on the new lock.
[  825.750401][ T8857] 
[  825.750404][ T8857] 
[  825.750410][ T8857] the existing dependency chain (in reverse order) is:
[  825.750412][ T8857] 
[  825.750415][ T8857] -> #3 (&obj_hash[i].lock){-.-.}:
[  825.750431][ T8857]        _raw_spin_lock_irqsave+0x95/0xcd
[  825.750436][ T8857]        __debug_object_init+0xc6/0xc30
[  825.750440][ T8857]        debug_object_init+0x16/0x20
[  825.750445][ T8857]        hrtimer_init+0x2a/0x300
[  825.750449][ T8857]        init_dl_task_timer+0x1b/0x50
[  825.750453][ T8857]        __sched_fork+0x22a/0x4f0
[  825.750458][ T8857]        init_idle+0x75/0x670
[  825.750462][ T8857]        sched_init+0x952/0x9f5
[  825.750466][ T8857]        start_kernel+0x393/0x893
[  825.750471][ T8857]        x86_64_start_reservations+0x29/0x2b
[  825.750476][ T8857]        x86_64_start_kernel+0x77/0x7b
[  825.750480][ T8857]        secondary_startup_64+0xa4/0xb0
[  825.750483][ T8857] 
[  825.750486][ T8857] -> #2 (&rq->lock){-.-.}:
[  825.750501][ T8857]        _raw_spin_lock+0x2f/0x40
[  825.750505][ T8857]        task_fork_fair+0x6a/0x520
[  825.750509][ T8857]        sched_fork+0x3af/0x900
[  825.750513][ T8857]        copy_process.part.0+0x1a25/0x6790
[  825.750517][ T8857]        _do_fork+0x25d/0xfe0
[  825.750521][ T8857]        kernel_thread+0x34/0x40
[  825.750526][ T8857]        rest_init+0x28/0x37b
[  825.750530][ T8857]        arch_call_rest_init+0xe/0x1b
[  825.750534][ T8857]        start_kernel+0x854/0x893
[  825.750539][ T8857]        x86_64_start_reservations+0x29/0x2b
[  825.750544][ T8857]        x86_64_start_kernel+0x77/0x7b
[  825.750549][ T8857]        secondary_startup_64+0xa4/0xb0
[  825.750552][ T8857] 
[  825.750554][ T8857] -> #1 (&p->pi_lock){-.-.}:
[  825.750570][ T8857]        _raw_spin_lock_irqsave+0x95/0xcd
[  825.750575][ T8857]        try_to_wake_up+0x90/0x13f0
[  825.750579][ T8857]        wake_up_process+0x10/0x20
[  825.750583][ T8857]        __up.isra.0+0x136/0x1a0
[  825.750587][ T8857]        up+0x9c/0xe0
[  825.750591][ T8857]        __up_console_sem+0xb7/0x1c0
[  825.750596][ T8857]        console_unlock+0x663/0xec0
[  825.750600][ T8857]        vprintk_emit+0x2a0/0x700
[  825.750605][ T8857]        vprintk_default+0x28/0x30
[  825.750609][ T8857]        vprintk_func+0x7e/0x189
[  825.750613][ T8857]        printk+0xba/0xed
[  825.750617][ T8857]        kobject_uevent_env+0xe2/0x101d
[  825.750622][ T8857]        reg_query_database+0x232/0x340
[  825.750627][ T8857]        reg_process_hint+0x13f/0xd30
[  825.750631][ T8857]        reg_todo+0x1ab/0x7d0
[  825.750635][ T8857]        process_one_work+0x989/0x1790
[  825.750640][ T8857]        worker_thread+0x98/0xe40
[  825.750644][ T8857]        kthread+0x354/0x420
[  825.750648][ T8857]        ret_from_fork+0x24/0x30
[  825.750651][ T8857] 
[  825.750653][ T8857] -> #0 ((console_sem).lock){-.-.}:
[  825.750669][ T8857]        lock_acquire+0x16f/0x3f0
[  825.750674][ T8857]        _raw_spin_lock_irqsave+0x95/0xcd
[  825.750678][ T8857]        down_trylock+0x13/0x70
[  825.750683][ T8857]        __down_trylock_console_sem+0xa8/0x210
[  825.750687][ T8857]        console_trylock+0x15/0xa0
[  825.750692][ T8857]        vprintk_emit+0x283/0x700
[  825.750696][ T8857]        vprintk_default+0x28/0x30
[  825.750700][ T8857]        vprintk_func+0x7e/0x189
[  825.750704][ T8857]        printk+0xba/0xed
[  825.750709][ T8857]        __warn_printk+0x9b/0xf3
[  825.750713][ T8857]        debug_print_object+0x168/0x250
[  825.750719][ T8857]        debug_check_no_obj_freed+0x29f/0x464
[  825.750722][ T8857]        kfree+0xbd/0x220
[  825.750726][ T8857]        kvfree+0x61/0x70
[  825.750731][ T8857]        netdev_freemem+0x4c/0x60
[  825.750735][ T8857]        netdev_release+0x86/0xb0
[  825.750739][ T8857]        device_release+0x7a/0x210
[  825.750744][ T8857]        kobject_put.cold+0x289/0x2e6
[  825.750749][ T8857]        netdev_run_todo+0x53b/0x7c0
[  825.750753][ T8857]        rtnl_unlock+0xe/0x10
[  825.750758][ T8857]        default_device_exit_batch+0x358/0x410
[  825.750762][ T8857]        ops_exit_list.isra.0+0xfc/0x150
[  825.750767][ T8857]        cleanup_net+0x3fb/0x960
[  825.750771][ T8857]        process_one_work+0x989/0x1790
[  825.750776][ T8857]        worker_thread+0x98/0xe40
[  825.750780][ T8857]        kthread+0x354/0x420
[  825.750784][ T8857]        ret_from_fork+0x24/0x30
[  825.750787][ T8857] 
[  825.750792][ T8857] other info that might help us debug this:
[  825.750794][ T8857] 
[  825.750798][ T8857] Chain exists of:
[  825.750800][ T8857]   (console_sem).lock --> &rq->lock --> &obj_hash[i].lock
[  825.750820][ T8857] 
[  825.750825][ T8857]  Possible unsafe locking scenario:
[  825.750827][ T8857] 
[  825.750832][ T8857]        CPU0                    CPU1
[  825.750836][ T8857]        ----                    ----
[  825.750839][ T8857]   lock(&obj_hash[i].lock);
[  825.750849][ T8857]                                lock(&rq->lock);
[  825.750859][ T8857]                                lock(&obj_hash[i].lock);
[  825.750868][ T8857]   lock((console_sem).lock);
[  825.750877][ T8857] 
[  825.750881][ T8857]  *** DEADLOCK ***
[  825.750883][ T8857] 
[  825.750888][ T8857] 4 locks held by kworker/u4:5/8857:
[  825.750890][ T8857]  #0: 00000000c77d72fd ((wq_completion)netns){+.+.}, at: process_one_work+0x87e/0x1790
[  825.750910][ T8857]  #1: 000000000babe95d (net_cleanup_work){+.+.}, at: process_one_work+0x8b4/0x1790
[  825.750928][ T8857]  #2: 00000000f31ee52b (pernet_ops_rwsem){++++}, at: cleanup_net+0xae/0x960
[  825.750947][ T8857]  #3: 000000008efd7107 (&obj_hash[i].lock){-.-.}, at: debug_check_no_obj_freed+0xbe/0x464
[  825.750966][ T8857] 
[  825.750969][ T8857] stack backtrace:
[  825.750976][ T8857] CPU: 1 PID: 8857 Comm: kworker/u4:5 Not tainted 5.2.0-rc3+ #20
[  825.750983][ T8857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  825.750987][ T8857] Workqueue: netns cleanup_net
[  825.750993][ T8857] Call Trace:
[  825.750997][ T8857]  dump_stack+0x172/0x1f0
[  825.751002][ T8857]  print_circular_bug.cold+0x1cc/0x28f
[  825.751006][ T8857]  __lock_acquire+0x3755/0x5490
[  825.751016][ T8857]  ? mark_held_locks+0xf0/0xf0
[  825.751020][ T8857]  ? enable_ptr_key_workfn+0x30/0x30
[  825.751024][ T8857]  ? kvm_clock_read+0x18/0x30
[  825.751029][ T8857]  ? kvm_sched_clock_read+0x9/0x20
[  825.751033][ T8857]  lock_acquire+0x16f/0x3f0
[  825.751037][ T8857]  ? down_trylock+0x13/0x70
[  825.751041][ T8857]  _raw_spin_lock_irqsave+0x95/0xcd
[  825.751045][ T8857]  ? down_trylock+0x13/0x70
[  825.751049][ T8857]  ? vprintk_emit+0x283/0x700
[  825.751053][ T8857]  down_trylock+0x13/0x70
[  825.751057][ T8857]  ? vprintk_emit+0x283/0x700
[  825.751062][ T8857]  __down_trylock_console_sem+0xa8/0x210
[  825.751066][ T8857]  console_trylock+0x15/0xa0
[  825.751070][ T8857]  vprintk_emit+0x283/0x700
[  825.751075][ T8857]  ? calc_wheel_index+0x220/0x220
[  825.751079][ T8857]  vprintk_default+0x28/0x30
[  825.751083][ T8857]  vprintk_func+0x7e/0x189
[  825.751086][ T8857]  printk+0xba/0xed
[  825.751091][ T8857]  ? kmsg_dump_rewind_nolock+0xe4/0xe4
[  825.751095][ T8857]  ? mark_held_locks+0xf0/0xf0
[  825.751099][ T8857]  ? mark_held_locks+0xf0/0xf0
[  825.751103][ T8857]  ? __warn_printk+0x8f/0xf3
[  825.751108][ T8857]  ? queue_work_node+0x360/0x360
[  825.751112][ T8857]  __warn_printk+0x9b/0xf3
[  825.751116][ T8857]  ? add_taint.cold+0x16/0x16
[  825.751120][ T8857]  ? kasan_check_write+0x14/0x20
[  825.751124][ T8857]  ? lock_downgrade+0x880/0x880
[  825.751129][ T8857]  ? queue_work_node+0x360/0x360
[  825.751133][ T8857]  debug_print_object+0x168/0x250
[  825.751138][ T8857]  ? _raw_spin_unlock_irqrestore+0xa4/0xe0
[  825.751142][ T8857]  debug_check_no_obj_freed+0x29f/0x464
[  825.751146][ T8857]  kfree+0xbd/0x220
[  825.751150][ T8857]  kvfree+0x61/0x70
[  825.751154][ T8857]  netdev_freemem+0x4c/0x60
[  825.751158][ T8857]  netdev_release+0x86/0xb0
[  825.751162][ T8857]  ? xps_cpus_store+0x2b0/0x2b0
[  825.751166][ T8857]  device_release+0x7a/0x210
[  825.751170][ T8857]  kobject_put.cold+0x289/0x2e6
[  825.751174][ T8857]  netdev_run_todo+0x53b/0x7c0
[  825.751178][ T8857]  ? register_netdev+0x50/0x50
[  825.751183][ T8857]  ? unregister_netdevice_queue+0x1d2/0x2c0
[  825.751188][ T8857]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  825.751192][ T8857]  ? net_set_todo+0xbf/0x150
[  825.751196][ T8857]  rtnl_unlock+0xe/0x10
[  825.751201][ T8857]  default_device_exit_batch+0x358/0x410
[  825.751206][ T8857]  ? unregister_netdevice_many+0x50/0x50
[  825.751210][ T8857]  ? default_device_exit+0x203/0x290
[  825.751215][ T8857]  ? do_wait_intr_irq+0x2b0/0x2b0
[  825.751218][ T8857]  ? rtnl_unlock+0xe/0x10
[  825.751223][ T8857]  ? unregister_netdevice_many+0x50/0x50
[  825.751228][ T8857]  ? dev_change_net_namespace+0xc70/0xc70
[  825.751233][ T8857]  ops_exit_list.isra.0+0xfc/0x150
[  825.751237][ T8857]  cleanup_net+0x3fb/0x960
[  825.751241][ T8857]  ? netns_install+0x1d0/0x1d0
[  825.751245][ T8857]  process_one_work+0x989/0x1790
[  825.751249][ T8857]  ? pwq_dec_nr_in_flight+0x320/0x320
[  825.751254][ T8857]  ? lock_acquire+0x16f/0x3f0
[  825.751258][ T8857]  worker_thread+0x98/0xe40
[  825.751262][ T8857]  ? trace_hardirqs_on+0x67/0x220
[  825.751266][ T8857]  kthread+0x354/0x420
[  825.751270][ T8857]  ? process_one_work+0x1790/0x1790
[  825.751275][ T8857]  ? kthread_cancel_delayed_work_sync+0x20/0x20
[  825.751279][ T8857]  ret_from_fork+0x24/0x30
[  826.889021][ T8857] Shutting down cpus with NMI
[  827.839709][ T8857] Kernel Offset: disabled
[  827.844046][ T8857] Rebooting in 86400 seconds..