[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 38.398140][ T25] audit: type=1800 audit(1571903642.477:25): pid=7003 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2447 res=0 [ 38.425143][ T25] audit: type=1800 audit(1571903642.487:26): pid=7003 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2490 res=0 [ 38.451976][ T25] audit: type=1800 audit(1571903642.487:27): pid=7003 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2469 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.4' (ECDSA) to the list of known hosts. 2019/10/24 07:54:14 fuzzer started 2019/10/24 07:54:16 dialing manager at 10.128.0.105:42135 2019/10/24 07:54:16 syscalls: 2524 2019/10/24 07:54:16 code coverage: enabled 2019/10/24 07:54:16 comparison tracing: enabled 2019/10/24 07:54:16 extra coverage: extra coverage is not supported by the kernel 2019/10/24 07:54:16 setuid sandbox: enabled 2019/10/24 07:54:16 namespace sandbox: enabled 2019/10/24 07:54:16 Android sandbox: /sys/fs/selinux/policy does not exist 2019/10/24 07:54:16 fault injection: enabled 2019/10/24 07:54:16 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/10/24 07:54:16 net packet injection: enabled 2019/10/24 07:54:16 net device setup: enabled 2019/10/24 07:54:16 concurrency sanitizer: enabled 2019/10/24 07:54:22 adding functions to KCSAN blacklist: '__tcp_select_window' 'tcp_add_backlog' 'ext4_free_inode' 'process_srcu' 'tick_do_update_jiffies64' 'tcp_poll' 'tomoyo_supervisor' 'find_get_pages_range_tag' 'vm_area_dup' 'rcu_gp_fqs_check_wake' '__ext4_new_inode' 'mod_timer' 'ep_poll' 'do_nanosleep' 'blk_mq_sched_dispatch_requests' 'tick_sched_do_timer' 'generic_permission' 'find_next_bit' '__nf_ct_refresh_acct' 'get_task_cred' 'ktime_get_real_seconds' 'taskstats_exit' 'add_timer' '__hrtimer_run_queues' 'run_timer_softirq' 'poll_schedule_timeout' syzkaller login: [ 58.173237][ T7171] KCSAN: could not find function: 'poll_schedule_timeout' 07:54:31 executing program 0: set_mempolicy(0x3, &(0x7f00000000c0)=0xfffffffffffffff7, 0x3) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = getpid() r2 = open(0x0, 0x0, 0x0) fchdir(r2) perf_event_open(0x0, r1, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000000)='t\x00\x8c\x00'}, 0x30) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x0, 0x9}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x42000) r5 = open(0x0, 0x1fe, 0x0) write$binfmt_aout(r5, &(0x7f0000000200)=ANY=[@ANYBLOB="d00400000033b832126e0019"], 0xc) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x3, 0x2) splice(r7, 0x0, r6, 0x0, 0x1000000008, 0x3) r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r8, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(0xffffffffffffffff, 0x0) [ 68.071432][ T7174] IPVS: ftp: loaded support on port[0] = 21 07:54:32 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000500)={0x30, 0x2, 0x0, 0x0, 0x1}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x20910, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0100000000"], 0x48}}, 0x0) [ 68.177048][ T7174] chnl_net:caif_netlink_parms(): no params data found [ 68.251096][ T7174] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.258254][ T7174] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.267262][ T7174] device bridge_slave_0 entered promiscuous mode [ 68.275028][ T7174] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.282991][ T7174] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.291167][ T7174] device bridge_slave_1 entered promiscuous mode [ 68.314835][ T7174] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.331241][ T7174] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.371497][ T7174] team0: Port device team_slave_0 added [ 68.378480][ T7174] team0: Port device team_slave_1 added [ 68.403613][ T7177] IPVS: ftp: loaded support on port[0] = 21 07:54:32 executing program 2: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000005c0)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000240)='.^\x00', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24000000) syz_genetlink_get_family_id$net_dm(&(0x7f0000000100)='NET_DM\x00') ioctl$LOOP_CLR_FD(r0, 0x4c01) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x2000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x5, 0x800000007, 0x8001}, 0x3c) ioctl$BLKGETSIZE64(r0, 0x80081272, &(0x7f0000000280)) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x4, 0x10000) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB="1300200065ff30795329239483daff5f2467a9deff21d171df3054a47727a647d724e2268e418d8f8d99ec5204dc39c9c144f8e55be6b90efe8d0e6032fda555e3c0ff534e789c1e56e29ec437819ce40e9c2145c76eec4d4e8b7edd6c3bd37131b8cf1413d5c94e69b08190512c803447295baf456d2fff0b60702154e37f0b939fdca9432ce6e986c81214d18ddb2108c66bac3a2ee19fa71a2233d2e8f12df49b6cffba4ba1fd4a591a5f308c755692643d11ba47baed5fbeffd884714a644a36a5b00528d973e8a283249643ead30ff359b653bc40e22764a7f97c9632c6009f324918b124ea074a4a3a0f83a2a452dcf13aa4ac01785f947cadb57f48f5e33b7b4364a731b097dd7ad4b8f7836431d04ce1236b7f05b6babdfb265ae93b8b64"], 0x13) pipe(&(0x7f0000000040)) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r2, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) r3 = accept$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) recvmmsg(r3, &(0x7f0000004c80)=[{{&(0x7f00000002c0)=@ipx, 0x80, &(0x7f0000003a40)=[{&(0x7f0000000500)=""/178, 0xb2}, {&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000001780)=""/4096, 0x1000}, {0x0}, {&(0x7f0000002800)=""/131, 0x83}, {&(0x7f00000028c0)=""/186, 0xba}, {&(0x7f0000002980)=""/4096, 0x1000}, {&(0x7f0000003980)=""/192, 0xc0}], 0x8}, 0x8}, {{&(0x7f0000003b00)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f0000003f40)=[{&(0x7f0000003b80)=""/244, 0xf4}, {&(0x7f0000003c80)=""/51, 0x33}, {&(0x7f0000003cc0)=""/217, 0xd9}, {&(0x7f0000003dc0)=""/214, 0xd6}, {&(0x7f0000003ec0)=""/31, 0x1f}, {&(0x7f0000003f00)=""/11, 0xb}], 0x6, &(0x7f0000003fc0)=""/195, 0xc3}, 0x7}, {{&(0x7f00000040c0)=@sco, 0x80, &(0x7f0000004280)=[{&(0x7f0000004140)=""/175, 0xaf}, {&(0x7f0000004200)=""/24, 0x18}, {&(0x7f0000004240)=""/33, 0x21}], 0x3, &(0x7f00000042c0)=""/113, 0x71}, 0x69}, {{&(0x7f0000004340)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @initdev}}, 0x80, &(0x7f0000004800)=[{&(0x7f00000043c0)=""/220, 0xdc}, {&(0x7f00000044c0)=""/218, 0xda}, {&(0x7f00000045c0)=""/131, 0x83}, {&(0x7f0000004680)}, {&(0x7f00000046c0)=""/30, 0x1e}, {&(0x7f0000004700)=""/235, 0xeb}], 0x6, &(0x7f0000004880)=""/59, 0x3b}, 0x4}, {{&(0x7f00000048c0)=@tipc=@id, 0x80, &(0x7f0000004b80)=[{&(0x7f0000004940)=""/219, 0xdb}, {&(0x7f0000004a40)=""/210, 0xd2}, {&(0x7f0000004b40)=""/46, 0x2e}], 0x3, &(0x7f0000004bc0)=""/173, 0xad}, 0xef36}], 0x5, 0x1, &(0x7f0000004dc0)={0x0, 0x989680}) lseek(0xffffffffffffffff, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_CPUID2(0xffffffffffffffff, 0xc008ae91, &(0x7f0000000400)={0x6, 0x0, [{}, {}, {}, {}, {}, {}]}) close(0xffffffffffffffff) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) [ 68.471978][ T7174] device hsr_slave_0 entered promiscuous mode [ 68.509866][ T7174] device hsr_slave_1 entered promiscuous mode [ 68.556670][ T7174] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.563782][ T7174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.571184][ T7174] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.578313][ T7174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.704424][ T7174] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.734259][ T7180] IPVS: ftp: loaded support on port[0] = 21 [ 68.735694][ T7174] 8021q: adding VLAN 0 to HW filter on device team0 07:54:32 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) mount$fuseblk(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x14) [ 68.749747][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.761361][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.780315][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.795446][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 68.883314][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.900291][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.907375][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.962192][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.971448][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.978508][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.989839][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.018661][ T7177] chnl_net:caif_netlink_parms(): no params data found [ 69.046799][ T7174] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network 07:54:33 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000100)=0x80000000002, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000280)="f7", 0x1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) [ 69.065502][ T7174] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.079311][ T7179] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.095862][ T7179] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.121096][ T7179] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.136325][ T7179] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.192093][ T7185] IPVS: ftp: loaded support on port[0] = 21 [ 69.200556][ T7174] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.217670][ T7179] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.320790][ T7177] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.339028][ T7177] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.358864][ T7177] device bridge_slave_0 entered promiscuous mode [ 69.408073][ T7177] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.418140][ T7177] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.433539][ T7177] device bridge_slave_1 entered promiscuous mode 07:54:33 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) r1 = socket$inet(0x10, 0x4000000000000002, 0x0) sendmsg(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="24000000200007041dfffd946f610500810000e81f0000030000080008000c0004000000", 0x24}], 0x1}, 0x0) [ 69.516868][ T7180] chnl_net:caif_netlink_parms(): no params data found [ 69.559269][ C0] hrtimer: interrupt took 32296 ns [ 69.586984][ T7177] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.613344][ T7177] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.646715][ T7192] IPVS: ftp: loaded support on port[0] = 21 [ 69.718430][ T7185] chnl_net:caif_netlink_parms(): no params data found [ 69.730007][ T7177] team0: Port device team_slave_0 added [ 69.737250][ T7177] team0: Port device team_slave_1 added [ 69.745551][ T7180] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.752766][ T7180] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.760672][ T7180] device bridge_slave_0 entered promiscuous mode [ 69.790456][ T7180] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.797786][ T7180] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.806904][ T7180] device bridge_slave_1 entered promiscuous mode [ 69.844069][ T7199] IPVS: ftp: loaded support on port[0] = 21 07:54:34 executing program 0: set_mempolicy(0x3, &(0x7f00000000c0)=0xfffffffffffffff7, 0x3) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = getpid() r2 = open(0x0, 0x0, 0x0) fchdir(r2) perf_event_open(0x0, r1, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000000)='t\x00\x8c\x00'}, 0x30) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x0, 0x9}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x42000) r5 = open(0x0, 0x1fe, 0x0) write$binfmt_aout(r5, &(0x7f0000000200)=ANY=[@ANYBLOB="d00400000033b832126e0019"], 0xc) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x3, 0x2) splice(r7, 0x0, r6, 0x0, 0x1000000008, 0x3) r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r8, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(0xffffffffffffffff, 0x0) [ 69.892115][ T7177] device hsr_slave_0 entered promiscuous mode [ 69.929143][ T7177] device hsr_slave_1 entered promiscuous mode [ 69.968810][ T7177] debugfs: Directory 'hsr0' with parent '/' already present! [ 69.985401][ T7180] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.042397][ T7180] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.051598][ T7185] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.059081][ T7185] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.066862][ T7185] device bridge_slave_0 entered promiscuous mode [ 70.076371][ T7185] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.083524][ T7185] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.091485][ T7185] device bridge_slave_1 entered promiscuous mode [ 70.099464][ T7177] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.106516][ T7177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.113839][ T7177] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.120898][ T7177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.150973][ T7185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.161671][ T7185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.202173][ T7180] team0: Port device team_slave_0 added [ 70.209602][ T7180] team0: Port device team_slave_1 added [ 70.220746][ T7185] team0: Port device team_slave_0 added 07:54:34 executing program 0: set_mempolicy(0x3, &(0x7f00000000c0)=0xfffffffffffffff7, 0x3) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = getpid() r2 = open(0x0, 0x0, 0x0) fchdir(r2) perf_event_open(0x0, r1, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000000)='t\x00\x8c\x00'}, 0x30) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x0, 0x9}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x42000) r5 = open(0x0, 0x1fe, 0x0) write$binfmt_aout(r5, &(0x7f0000000200)=ANY=[@ANYBLOB="d00400000033b832126e0019"], 0xc) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x3, 0x2) splice(r7, 0x0, r6, 0x0, 0x1000000008, 0x3) r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r8, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(0xffffffffffffffff, 0x0) [ 70.242645][ T3007] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.250665][ T3007] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.271500][ T7185] team0: Port device team_slave_1 added [ 70.331535][ T7180] device hsr_slave_0 entered promiscuous mode [ 70.369113][ T7180] device hsr_slave_1 entered promiscuous mode [ 70.428891][ T7180] debugfs: Directory 'hsr0' with parent '/' already present! [ 70.521281][ T7185] device hsr_slave_0 entered promiscuous mode [ 70.559267][ T7185] device hsr_slave_1 entered promiscuous mode 07:54:34 executing program 0: set_mempolicy(0x3, &(0x7f00000000c0)=0xfffffffffffffff7, 0x3) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = getpid() r2 = open(0x0, 0x0, 0x0) fchdir(r2) perf_event_open(0x0, r1, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000000)='t\x00\x8c\x00'}, 0x30) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x0, 0x9}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x42000) r5 = open(0x0, 0x1fe, 0x0) write$binfmt_aout(r5, &(0x7f0000000200)=ANY=[@ANYBLOB="d00400000033b832126e0019"], 0xc) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x3, 0x2) splice(r7, 0x0, r6, 0x0, 0x1000000008, 0x3) r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r8, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(0xffffffffffffffff, 0x0) [ 70.598904][ T7185] debugfs: Directory 'hsr0' with parent '/' already present! [ 70.633358][ T7192] chnl_net:caif_netlink_parms(): no params data found [ 70.699378][ T7177] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.773444][ T7192] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.781106][ T7192] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.789451][ T7192] device bridge_slave_0 entered promiscuous mode [ 70.797176][ T7192] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.804358][ T7192] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.812864][ T7192] device bridge_slave_1 entered promiscuous mode [ 70.835493][ T7180] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.844714][ T7199] chnl_net:caif_netlink_parms(): no params data found [ 70.884205][ T7192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.895050][ T3001] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.903525][ T3001] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.914345][ T7180] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.926758][ T7177] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.945394][ T7192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.955213][ T7179] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.963106][ T7179] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.984421][ T7185] 8021q: adding VLAN 0 to HW filter on device bond0 07:54:35 executing program 0: set_mempolicy(0x3, &(0x7f00000000c0)=0xfffffffffffffff7, 0x3) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = getpid() r2 = open(0x0, 0x0, 0x0) fchdir(r2) perf_event_open(0x0, r1, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000000)='t\x00\x8c\x00'}, 0x30) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x0, 0x9}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x42000) r5 = open(0x0, 0x1fe, 0x0) write$binfmt_aout(r5, &(0x7f0000000200)=ANY=[@ANYBLOB="d00400000033b832126e0019"], 0xc) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x3, 0x2) splice(r7, 0x0, r6, 0x0, 0x1000000008, 0x3) r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r8, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(0xffffffffffffffff, 0x0) [ 71.016988][ T3007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.026057][ T3007] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.049329][ T3007] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.056496][ T3007] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.064569][ T3007] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.088218][ T3007] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.096783][ T3007] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.103911][ T3007] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.121993][ T3007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.136270][ T3007] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.153457][ T7185] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.160959][ T7199] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.168264][ T7199] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.176914][ T7199] device bridge_slave_0 entered promiscuous mode [ 71.186481][ T7192] team0: Port device team_slave_0 added [ 71.196268][ T7192] team0: Port device team_slave_1 added [ 71.203400][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.216643][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.226355][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.238527][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.247920][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.256578][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.263712][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.272124][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.280898][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.289991][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.298636][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.307022][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.314419][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.322718][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.330647][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.338337][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.347138][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.358867][ T7199] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.367372][ T7199] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.375520][ T7199] device bridge_slave_1 entered promiscuous mode [ 71.402482][ T7179] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready 07:54:35 executing program 0: set_mempolicy(0x3, &(0x7f00000000c0)=0xfffffffffffffff7, 0x3) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = getpid() r2 = open(0x0, 0x0, 0x0) fchdir(r2) perf_event_open(0x0, r1, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000000)='t\x00\x8c\x00'}, 0x30) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x0, 0x9}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x42000) r5 = open(0x0, 0x1fe, 0x0) write$binfmt_aout(r5, &(0x7f0000000200)=ANY=[@ANYBLOB="d00400000033b832126e0019"], 0xc) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x3, 0x2) splice(r7, 0x0, r6, 0x0, 0x1000000008, 0x3) r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r8, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(0xffffffffffffffff, 0x0) [ 71.417600][ T7179] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.431684][ T7179] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.449830][ T7180] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.502047][ T7192] device hsr_slave_0 entered promiscuous mode [ 71.539379][ T7192] device hsr_slave_1 entered promiscuous mode [ 71.579295][ T7192] debugfs: Directory 'hsr0' with parent '/' already present! [ 71.588207][ T7179] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.597507][ T7179] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.606430][ T7179] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.615263][ T7179] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.624089][ T7179] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.633220][ T7179] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.641854][ T7179] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.650797][ T7179] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.659544][ T7179] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.667916][ T7179] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.674992][ T7179] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.683178][ T7179] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.692071][ T7179] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.711447][ T7199] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.724209][ T7177] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.735324][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.754916][ T7199] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 07:54:35 executing program 0: set_mempolicy(0x3, &(0x7f00000000c0)=0xfffffffffffffff7, 0x3) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = getpid() r2 = open(0x0, 0x0, 0x0) fchdir(r2) perf_event_open(0x0, r1, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000000)='t\x00\x8c\x00'}, 0x30) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x0, 0x9}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x42000) r5 = open(0x0, 0x1fe, 0x0) write$binfmt_aout(r5, &(0x7f0000000200)=ANY=[@ANYBLOB="d00400000033b832126e0019"], 0xc) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x3, 0x2) splice(r7, 0x0, r6, 0x0, 0x1000000008, 0x3) r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r8, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(0xffffffffffffffff, 0x0) [ 71.772785][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.781615][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.790893][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.800030][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.811225][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.818280][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.843224][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.896874][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.913331][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.921952][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.931039][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.940016][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.952230][ T7185] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 71.963283][ T7185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.976216][ T7199] team0: Port device team_slave_0 added [ 71.986954][ T7199] team0: Port device team_slave_1 added [ 71.995311][ T7179] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.004281][ T7179] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.013120][ T7179] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.021890][ T7179] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.030486][ T7179] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.038831][ T7179] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.049073][ T7177] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.068535][ T7185] 8021q: adding VLAN 0 to HW filter on device batadv0 07:54:36 executing program 0: set_mempolicy(0x3, &(0x7f00000000c0)=0xfffffffffffffff7, 0x3) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = getpid() r2 = open(0x0, 0x0, 0x0) fchdir(r2) perf_event_open(0x0, r1, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000000)='t\x00\x8c\x00'}, 0x30) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x0, 0x9}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x42000) r5 = open(0x0, 0x1fe, 0x0) write$binfmt_aout(r5, &(0x7f0000000200)=ANY=[@ANYBLOB="d00400000033b832126e0019"], 0xc) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x3, 0x2) splice(r7, 0x0, r6, 0x0, 0x1000000008, 0x3) r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r8, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(0xffffffffffffffff, 0x0) [ 72.161760][ T7199] device hsr_slave_0 entered promiscuous mode [ 72.189214][ T7199] device hsr_slave_1 entered promiscuous mode [ 72.228793][ T7199] debugfs: Directory 'hsr0' with parent '/' already present! [ 72.242651][ T7180] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.258654][ T7192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.292899][ T3007] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.301551][ T3007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.314703][ T7192] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.347567][ T3007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.356869][ T3007] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.365645][ T3007] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.372846][ T3007] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.385684][ T7179] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.394186][ T7179] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.403117][ T7179] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.415993][ T7179] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.423094][ T7179] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.440867][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.460648][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.470544][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.479524][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.488509][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.504848][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.526948][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.580727][ T7199] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.638341][ T7179] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.669434][ T7179] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.680929][ T7192] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.699492][ T7192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.740715][ T7255] blk_update_request: I/O error, dev loop0, sector 256 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 0 [ 72.758128][ T3007] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.767216][ T3007] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.810348][ T7199] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.843993][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.854415][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.879878][ T7192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.917764][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.953462][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.982151][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.989283][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.008028][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.018254][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.031043][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.038176][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.102999][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.206012][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.253356][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.267821][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.293853][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.327343][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.340848][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.355594][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.364579][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.378391][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.387885][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.400987][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.473755][ T7199] 8021q: adding VLAN 0 to HW filter on device batadv0 07:54:37 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000500)={0x30, 0x2, 0x0, 0x0, 0x1}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x20910, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0100000000"], 0x48}}, 0x0) 07:54:37 executing program 0: set_mempolicy(0x3, &(0x7f00000000c0)=0xfffffffffffffff7, 0x3) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = getpid() r2 = open(0x0, 0x0, 0x0) fchdir(r2) perf_event_open(0x0, r1, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000000)='t\x00\x8c\x00'}, 0x30) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x0, 0x9}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x42000) r5 = open(0x0, 0x1fe, 0x0) write$binfmt_aout(r5, &(0x7f0000000200)=ANY=[@ANYBLOB="d00400000033b832126e0019"], 0xc) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x3, 0x2) splice(r7, 0x0, r6, 0x0, 0x1000000008, 0x3) r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r8, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(0xffffffffffffffff, 0x0) 07:54:37 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) mount$fuseblk(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x14) 07:54:38 executing program 2: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000005c0)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000240)='.^\x00', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24000000) syz_genetlink_get_family_id$net_dm(&(0x7f0000000100)='NET_DM\x00') ioctl$LOOP_CLR_FD(r0, 0x4c01) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x2000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x5, 0x800000007, 0x8001}, 0x3c) ioctl$BLKGETSIZE64(r0, 0x80081272, &(0x7f0000000280)) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x4, 0x10000) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x13) pipe(&(0x7f0000000040)) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r2, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) r3 = accept$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) recvmmsg(r3, &(0x7f0000004c80)=[{{&(0x7f00000002c0)=@ipx, 0x80, &(0x7f0000003a40)=[{&(0x7f0000000500)=""/178, 0xb2}, {&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000001780)=""/4096, 0x1000}, {0x0}, {&(0x7f0000002800)=""/131, 0x83}, {&(0x7f00000028c0)=""/186, 0xba}, {&(0x7f0000002980)=""/4096, 0x1000}, {&(0x7f0000003980)=""/192, 0xc0}], 0x8}, 0x8}, {{&(0x7f0000003b00)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f0000003f40)=[{&(0x7f0000003b80)=""/244, 0xf4}, {&(0x7f0000003c80)=""/51, 0x33}, {&(0x7f0000003cc0)=""/217, 0xd9}, {&(0x7f0000003dc0)=""/214, 0xd6}, {&(0x7f0000003ec0)=""/31, 0x1f}, {&(0x7f0000003f00)=""/11, 0xb}], 0x6, &(0x7f0000003fc0)=""/195, 0xc3}, 0x7}, {{&(0x7f00000040c0)=@sco, 0x80, &(0x7f0000004280)=[{&(0x7f0000004140)=""/175, 0xaf}, {&(0x7f0000004200)=""/24, 0x18}, {&(0x7f0000004240)=""/33, 0x21}], 0x3, &(0x7f00000042c0)=""/113, 0x71}, 0x69}, {{&(0x7f0000004340)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @initdev}}, 0x80, &(0x7f0000004800)=[{&(0x7f00000043c0)=""/220, 0xdc}, {&(0x7f00000044c0)=""/218, 0xda}, {&(0x7f00000045c0)=""/131, 0x83}, {&(0x7f0000004680)}, {&(0x7f00000046c0)=""/30, 0x1e}, {&(0x7f0000004700)=""/235, 0xeb}], 0x6, &(0x7f0000004880)=""/59, 0x3b}, 0x4}, {{&(0x7f00000048c0)=@tipc=@id, 0x80, &(0x7f0000004b80)=[{&(0x7f0000004940)=""/219, 0xdb}, {&(0x7f0000004a40)=""/210, 0xd2}, {&(0x7f0000004b40)=""/46, 0x2e}], 0x3, &(0x7f0000004bc0)=""/173, 0xad}, 0xef36}], 0x5, 0x1, &(0x7f0000004dc0)={0x0, 0x989680}) lseek(0xffffffffffffffff, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_CPUID2(0xffffffffffffffff, 0xc008ae91, &(0x7f0000000400)={0x6, 0x0, [{}, {}, {}, {}, {}, {}]}) close(0xffffffffffffffff) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) 07:54:38 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) mount$fuseblk(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x14) 07:54:38 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) r1 = socket$inet(0x10, 0x4000000000000002, 0x0) sendmsg(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="24000000200007041dfffd946f610500810000e81f0000030000080008000c0004000000", 0x24}], 0x1}, 0x0) 07:54:38 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000100)=0x80000000002, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000280)="f7", 0x1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) 07:54:38 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) r1 = socket$inet(0x10, 0x4000000000000002, 0x0) sendmsg(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="24000000200007041dfffd946f610500810000e81f0000030000080008000c0004000000", 0x24}], 0x1}, 0x0) [ 74.411158][ T7320] blk_update_request: I/O error, dev loop0, sector 256 op 0x0:(READ) flags 0x80700 phys_seg 17 prio class 0 07:54:38 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) mount$fuseblk(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x14) [ 74.648289][ T2492] blk_update_request: I/O error, dev loop0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 74.659897][ T2492] Buffer I/O error on dev loop0, logical block 0, lost async page write [ 74.668281][ T2492] blk_update_request: I/O error, dev loop0, sector 4 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 74.680137][ T2492] Buffer I/O error on dev loop0, logical block 1, lost async page write [ 74.688569][ T2492] blk_update_request: I/O error, dev loop0, sector 8 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 74.700644][ T2492] Buffer I/O error on dev loop0, logical block 2, lost async page write [ 74.710020][ T2492] blk_update_request: I/O error, dev loop0, sector 12 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 74.721299][ T2492] Buffer I/O error on dev loop0, logical block 3, lost async page write [ 74.729816][ T2492] blk_update_request: I/O error, dev loop0, sector 16 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 74.741144][ T2492] Buffer I/O error on dev loop0, logical block 4, lost async page write [ 74.749591][ T2492] blk_update_request: I/O error, dev loop0, sector 20 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 74.752141][ T7327] blk_update_request: I/O error, dev loop0, sector 24 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 74.760883][ T2492] Buffer I/O error on dev loop0, logical block 5, lost async page write [ 74.760964][ T2492] blk_update_request: I/O error, dev loop0, sector 28 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 74.772252][ T7327] Buffer I/O error on dev loop0, logical block 6, lost async page write [ 74.781138][ T2492] Buffer I/O error on dev loop0, logical block 7, lost async page write [ 74.792151][ T7327] Buffer I/O error on dev loop0, logical block 8, lost async page write [ 74.801109][ T2492] Buffer I/O error on dev loop0, logical block 9, lost async page write 07:54:38 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000100)=0x80000000002, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000280)="f7", 0x1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) 07:54:38 executing program 0: set_mempolicy(0x3, &(0x7f00000000c0)=0xfffffffffffffff7, 0x3) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = getpid() r2 = open(0x0, 0x0, 0x0) fchdir(r2) perf_event_open(0x0, r1, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000000)='t\x00\x8c\x00'}, 0x30) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x0, 0x9}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x42000) r5 = open(0x0, 0x1fe, 0x0) write$binfmt_aout(r5, &(0x7f0000000200)=ANY=[@ANYBLOB="d00400000033b832126e0019"], 0xc) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x3, 0x2) splice(r7, 0x0, r6, 0x0, 0x1000000008, 0x3) r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r8, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(0xffffffffffffffff, 0x0) 07:54:39 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000500)={0x30, 0x2, 0x0, 0x0, 0x1}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x20910, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0100000000"], 0x48}}, 0x0) 07:54:39 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) r1 = socket$inet(0x10, 0x4000000000000002, 0x0) sendmsg(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="24000000200007041dfffd946f610500810000e81f0000030000080008000c0004000000", 0x24}], 0x1}, 0x0) 07:54:39 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000100)=0x80000000002, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000280)="f7", 0x1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) 07:54:39 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000100)=0x80000000002, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000280)="f7", 0x1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) 07:54:39 executing program 2: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000005c0)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000240)='.^\x00', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24000000) syz_genetlink_get_family_id$net_dm(&(0x7f0000000100)='NET_DM\x00') ioctl$LOOP_CLR_FD(r0, 0x4c01) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x2000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x5, 0x800000007, 0x8001}, 0x3c) ioctl$BLKGETSIZE64(r0, 0x80081272, &(0x7f0000000280)) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x4, 0x10000) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x13) pipe(&(0x7f0000000040)) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r2, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) r3 = accept$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) recvmmsg(r3, &(0x7f0000004c80)=[{{&(0x7f00000002c0)=@ipx, 0x80, &(0x7f0000003a40)=[{&(0x7f0000000500)=""/178, 0xb2}, {&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000001780)=""/4096, 0x1000}, {0x0}, {&(0x7f0000002800)=""/131, 0x83}, {&(0x7f00000028c0)=""/186, 0xba}, {&(0x7f0000002980)=""/4096, 0x1000}, {&(0x7f0000003980)=""/192, 0xc0}], 0x8}, 0x8}, {{&(0x7f0000003b00)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f0000003f40)=[{&(0x7f0000003b80)=""/244, 0xf4}, {&(0x7f0000003c80)=""/51, 0x33}, {&(0x7f0000003cc0)=""/217, 0xd9}, {&(0x7f0000003dc0)=""/214, 0xd6}, {&(0x7f0000003ec0)=""/31, 0x1f}, {&(0x7f0000003f00)=""/11, 0xb}], 0x6, &(0x7f0000003fc0)=""/195, 0xc3}, 0x7}, {{&(0x7f00000040c0)=@sco, 0x80, &(0x7f0000004280)=[{&(0x7f0000004140)=""/175, 0xaf}, {&(0x7f0000004200)=""/24, 0x18}, {&(0x7f0000004240)=""/33, 0x21}], 0x3, &(0x7f00000042c0)=""/113, 0x71}, 0x69}, {{&(0x7f0000004340)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @initdev}}, 0x80, &(0x7f0000004800)=[{&(0x7f00000043c0)=""/220, 0xdc}, {&(0x7f00000044c0)=""/218, 0xda}, {&(0x7f00000045c0)=""/131, 0x83}, {&(0x7f0000004680)}, {&(0x7f00000046c0)=""/30, 0x1e}, {&(0x7f0000004700)=""/235, 0xeb}], 0x6, &(0x7f0000004880)=""/59, 0x3b}, 0x4}, {{&(0x7f00000048c0)=@tipc=@id, 0x80, &(0x7f0000004b80)=[{&(0x7f0000004940)=""/219, 0xdb}, {&(0x7f0000004a40)=""/210, 0xd2}, {&(0x7f0000004b40)=""/46, 0x2e}], 0x3, &(0x7f0000004bc0)=""/173, 0xad}, 0xef36}], 0x5, 0x1, &(0x7f0000004dc0)={0x0, 0x989680}) lseek(0xffffffffffffffff, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_CPUID2(0xffffffffffffffff, 0xc008ae91, &(0x7f0000000400)={0x6, 0x0, [{}, {}, {}, {}, {}, {}]}) close(0xffffffffffffffff) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) 07:54:39 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000100)=0x80000000002, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000280)="f7", 0x1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) 07:54:40 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000500)={0x30, 0x2, 0x0, 0x0, 0x1}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x20910, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0100000000"], 0x48}}, 0x0) 07:54:40 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000100)=0x80000000002, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000280)="f7", 0x1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) 07:54:40 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000100)=0x80000000002, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000280)="f7", 0x1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) 07:54:40 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) r1 = socket$inet(0x10, 0x4000000000000002, 0x0) sendmsg(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="24000000200007041dfffd946f610500810000e81f0000030000080008000c0004000000", 0x24}], 0x1}, 0x0) 07:54:40 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000500)={0x30, 0x2, 0x0, 0x0, 0x1}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x20910, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0100000000"], 0x48}}, 0x0) 07:54:40 executing program 2: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000005c0)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000240)='.^\x00', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24000000) syz_genetlink_get_family_id$net_dm(&(0x7f0000000100)='NET_DM\x00') ioctl$LOOP_CLR_FD(r0, 0x4c01) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x2000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x5, 0x800000007, 0x8001}, 0x3c) ioctl$BLKGETSIZE64(r0, 0x80081272, &(0x7f0000000280)) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x4, 0x10000) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x13) pipe(&(0x7f0000000040)) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r2, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) r3 = accept$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) recvmmsg(r3, &(0x7f0000004c80)=[{{&(0x7f00000002c0)=@ipx, 0x80, &(0x7f0000003a40)=[{&(0x7f0000000500)=""/178, 0xb2}, {&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000001780)=""/4096, 0x1000}, {0x0}, {&(0x7f0000002800)=""/131, 0x83}, {&(0x7f00000028c0)=""/186, 0xba}, {&(0x7f0000002980)=""/4096, 0x1000}, {&(0x7f0000003980)=""/192, 0xc0}], 0x8}, 0x8}, {{&(0x7f0000003b00)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f0000003f40)=[{&(0x7f0000003b80)=""/244, 0xf4}, {&(0x7f0000003c80)=""/51, 0x33}, {&(0x7f0000003cc0)=""/217, 0xd9}, {&(0x7f0000003dc0)=""/214, 0xd6}, {&(0x7f0000003ec0)=""/31, 0x1f}, {&(0x7f0000003f00)=""/11, 0xb}], 0x6, &(0x7f0000003fc0)=""/195, 0xc3}, 0x7}, {{&(0x7f00000040c0)=@sco, 0x80, &(0x7f0000004280)=[{&(0x7f0000004140)=""/175, 0xaf}, {&(0x7f0000004200)=""/24, 0x18}, {&(0x7f0000004240)=""/33, 0x21}], 0x3, &(0x7f00000042c0)=""/113, 0x71}, 0x69}, {{&(0x7f0000004340)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @initdev}}, 0x80, &(0x7f0000004800)=[{&(0x7f00000043c0)=""/220, 0xdc}, {&(0x7f00000044c0)=""/218, 0xda}, {&(0x7f00000045c0)=""/131, 0x83}, {&(0x7f0000004680)}, {&(0x7f00000046c0)=""/30, 0x1e}, {&(0x7f0000004700)=""/235, 0xeb}], 0x6, &(0x7f0000004880)=""/59, 0x3b}, 0x4}, {{&(0x7f00000048c0)=@tipc=@id, 0x80, &(0x7f0000004b80)=[{&(0x7f0000004940)=""/219, 0xdb}, {&(0x7f0000004a40)=""/210, 0xd2}, {&(0x7f0000004b40)=""/46, 0x2e}], 0x3, &(0x7f0000004bc0)=""/173, 0xad}, 0xef36}], 0x5, 0x1, &(0x7f0000004dc0)={0x0, 0x989680}) lseek(0xffffffffffffffff, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_CPUID2(0xffffffffffffffff, 0xc008ae91, &(0x7f0000000400)={0x6, 0x0, [{}, {}, {}, {}, {}, {}]}) close(0xffffffffffffffff) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) 07:54:40 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) r1 = socket$inet(0x10, 0x4000000000000002, 0x0) sendmsg(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="24000000200007041dfffd946f610500810000e81f0000030000080008000c0004000000", 0x24}], 0x1}, 0x0) 07:54:40 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000100)=0x80000000002, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000280)="f7", 0x1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) 07:54:41 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000100)=0x80000000002, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000280)="f7", 0x1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) 07:54:41 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) r1 = socket$inet(0x10, 0x4000000000000002, 0x0) sendmsg(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="24000000200007041dfffd946f610500810000e81f0000030000080008000c0004000000", 0x24}], 0x1}, 0x0) 07:54:41 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000500)={0x30, 0x2, 0x0, 0x0, 0x1}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x20910, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0100000000"], 0x48}}, 0x0) 07:54:41 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000500)={0x30, 0x2, 0x0, 0x0, 0x1}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x20910, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0100000000"], 0x48}}, 0x0) 07:54:41 executing program 2: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000005c0)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000240)='.^\x00', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24000000) syz_genetlink_get_family_id$net_dm(&(0x7f0000000100)='NET_DM\x00') ioctl$LOOP_CLR_FD(r0, 0x4c01) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x2000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x5, 0x800000007, 0x8001}, 0x3c) ioctl$BLKGETSIZE64(r0, 0x80081272, &(0x7f0000000280)) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x4, 0x10000) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB="1300200065ff30795329239483daff5f2467a9deff21d171df3054a47727a647d724e2268e418d8f8d99ec5204dc39c9c144f8e55be6b90efe8d0e6032fda555e3c0ff534e789c1e56e29ec437819ce40e9c2145c76eec4d4e8b7edd6c3bd37131b8cf1413d5c94e69b08190512c803447295baf456d2fff0b60702154e37f0b939fdca9432ce6e986c81214d18ddb2108c66bac3a2ee19fa71a2233d2e8f12df49b6cffba4ba1fd4a591a5f308c755692643d11ba47baed5fbeffd884714a644a36a5b00528d973e8a283249643ead30ff359b653bc40e22764a7f97c9632c6009f324918b124ea074a4a3a0f83a2a452dcf13aa4ac01785f947cadb57f48f5e33b7b4364a731b097dd7ad4b8f7836431d04ce1236b7f05b6babdfb265ae93b8b64"], 0x13) pipe(&(0x7f0000000040)) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r2, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) r3 = accept$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) recvmmsg(r3, &(0x7f0000004c80)=[{{&(0x7f00000002c0)=@ipx, 0x80, &(0x7f0000003a40)=[{&(0x7f0000000500)=""/178, 0xb2}, {&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000001780)=""/4096, 0x1000}, {0x0}, {&(0x7f0000002800)=""/131, 0x83}, {&(0x7f00000028c0)=""/186, 0xba}, {&(0x7f0000002980)=""/4096, 0x1000}, {&(0x7f0000003980)=""/192, 0xc0}], 0x8}, 0x8}, {{&(0x7f0000003b00)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f0000003f40)=[{&(0x7f0000003b80)=""/244, 0xf4}, {&(0x7f0000003c80)=""/51, 0x33}, {&(0x7f0000003cc0)=""/217, 0xd9}, {&(0x7f0000003dc0)=""/214, 0xd6}, {&(0x7f0000003ec0)=""/31, 0x1f}, {&(0x7f0000003f00)=""/11, 0xb}], 0x6, &(0x7f0000003fc0)=""/195, 0xc3}, 0x7}, {{&(0x7f00000040c0)=@sco, 0x80, &(0x7f0000004280)=[{&(0x7f0000004140)=""/175, 0xaf}, {&(0x7f0000004200)=""/24, 0x18}, {&(0x7f0000004240)=""/33, 0x21}], 0x3, &(0x7f00000042c0)=""/113, 0x71}, 0x69}, {{&(0x7f0000004340)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @initdev}}, 0x80, &(0x7f0000004800)=[{&(0x7f00000043c0)=""/220, 0xdc}, {&(0x7f00000044c0)=""/218, 0xda}, {&(0x7f00000045c0)=""/131, 0x83}, {&(0x7f0000004680)}, {&(0x7f00000046c0)=""/30, 0x1e}, {&(0x7f0000004700)=""/235, 0xeb}], 0x6, &(0x7f0000004880)=""/59, 0x3b}, 0x4}, {{&(0x7f00000048c0)=@tipc=@id, 0x80, &(0x7f0000004b80)=[{&(0x7f0000004940)=""/219, 0xdb}, {&(0x7f0000004a40)=""/210, 0xd2}, {&(0x7f0000004b40)=""/46, 0x2e}], 0x3, &(0x7f0000004bc0)=""/173, 0xad}, 0xef36}], 0x5, 0x1, &(0x7f0000004dc0)={0x0, 0x989680}) lseek(0xffffffffffffffff, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_CPUID2(0xffffffffffffffff, 0xc008ae91, &(0x7f0000000400)={0x6, 0x0, [{}, {}, {}, {}, {}, {}]}) close(0xffffffffffffffff) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) 07:54:42 executing program 3: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000005c0)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000240)='.^\x00', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24000000) syz_genetlink_get_family_id$net_dm(&(0x7f0000000100)='NET_DM\x00') ioctl$LOOP_CLR_FD(r0, 0x4c01) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x2000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x5, 0x800000007, 0x8001}, 0x3c) ioctl$BLKGETSIZE64(r0, 0x80081272, &(0x7f0000000280)) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x4, 0x10000) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x13) pipe(&(0x7f0000000040)) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r2, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) r3 = accept$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) recvmmsg(r3, &(0x7f0000004c80)=[{{&(0x7f00000002c0)=@ipx, 0x80, &(0x7f0000003a40)=[{&(0x7f0000000500)=""/178, 0xb2}, {&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000001780)=""/4096, 0x1000}, {0x0}, {&(0x7f0000002800)=""/131, 0x83}, {&(0x7f00000028c0)=""/186, 0xba}, {&(0x7f0000002980)=""/4096, 0x1000}, {&(0x7f0000003980)=""/192, 0xc0}], 0x8}, 0x8}, {{&(0x7f0000003b00)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f0000003f40)=[{&(0x7f0000003b80)=""/244, 0xf4}, {&(0x7f0000003c80)=""/51, 0x33}, {&(0x7f0000003cc0)=""/217, 0xd9}, {&(0x7f0000003dc0)=""/214, 0xd6}, {&(0x7f0000003ec0)=""/31, 0x1f}, {&(0x7f0000003f00)=""/11, 0xb}], 0x6, &(0x7f0000003fc0)=""/195, 0xc3}, 0x7}, {{&(0x7f00000040c0)=@sco, 0x80, &(0x7f0000004280)=[{&(0x7f0000004140)=""/175, 0xaf}, {&(0x7f0000004200)=""/24, 0x18}, {&(0x7f0000004240)=""/33, 0x21}], 0x3, &(0x7f00000042c0)=""/113, 0x71}, 0x69}, {{&(0x7f0000004340)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @initdev}}, 0x80, &(0x7f0000004800)=[{&(0x7f00000043c0)=""/220, 0xdc}, {&(0x7f00000044c0)=""/218, 0xda}, {&(0x7f00000045c0)=""/131, 0x83}, {&(0x7f0000004680)}, {&(0x7f00000046c0)=""/30, 0x1e}, {&(0x7f0000004700)=""/235, 0xeb}], 0x6, &(0x7f0000004880)=""/59, 0x3b}, 0x4}, {{&(0x7f00000048c0)=@tipc=@id, 0x80, &(0x7f0000004b80)=[{&(0x7f0000004940)=""/219, 0xdb}, {&(0x7f0000004a40)=""/210, 0xd2}, {&(0x7f0000004b40)=""/46, 0x2e}], 0x3, &(0x7f0000004bc0)=""/173, 0xad}, 0xef36}], 0x5, 0x1, &(0x7f0000004dc0)={0x0, 0x989680}) lseek(0xffffffffffffffff, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_CPUID2(0xffffffffffffffff, 0xc008ae91, &(0x7f0000000400)={0x6, 0x0, [{}, {}, {}, {}, {}, {}]}) close(0xffffffffffffffff) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) 07:54:42 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000500)={0x30, 0x2, 0x0, 0x0, 0x1}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x20910, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0100000000"], 0x48}}, 0x0) 07:54:42 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000005c0)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000240)='.^\x00', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24000000) syz_genetlink_get_family_id$net_dm(&(0x7f0000000100)='NET_DM\x00') ioctl$LOOP_CLR_FD(r0, 0x4c01) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x2000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x5, 0x800000007, 0x8001}, 0x3c) ioctl$BLKGETSIZE64(r0, 0x80081272, &(0x7f0000000280)) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x4, 0x10000) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x13) pipe(&(0x7f0000000040)) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r2, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) r3 = accept$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) recvmmsg(r3, &(0x7f0000004c80)=[{{&(0x7f00000002c0)=@ipx, 0x80, &(0x7f0000003a40)=[{&(0x7f0000000500)=""/178, 0xb2}, {&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000001780)=""/4096, 0x1000}, {0x0}, {&(0x7f0000002800)=""/131, 0x83}, {&(0x7f00000028c0)=""/186, 0xba}, {&(0x7f0000002980)=""/4096, 0x1000}, {&(0x7f0000003980)=""/192, 0xc0}], 0x8}, 0x8}, {{&(0x7f0000003b00)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f0000003f40)=[{&(0x7f0000003b80)=""/244, 0xf4}, {&(0x7f0000003c80)=""/51, 0x33}, {&(0x7f0000003cc0)=""/217, 0xd9}, {&(0x7f0000003dc0)=""/214, 0xd6}, {&(0x7f0000003ec0)=""/31, 0x1f}, {&(0x7f0000003f00)=""/11, 0xb}], 0x6, &(0x7f0000003fc0)=""/195, 0xc3}, 0x7}, {{&(0x7f00000040c0)=@sco, 0x80, &(0x7f0000004280)=[{&(0x7f0000004140)=""/175, 0xaf}, {&(0x7f0000004200)=""/24, 0x18}, {&(0x7f0000004240)=""/33, 0x21}], 0x3, &(0x7f00000042c0)=""/113, 0x71}, 0x69}, {{&(0x7f0000004340)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @initdev}}, 0x80, &(0x7f0000004800)=[{&(0x7f00000043c0)=""/220, 0xdc}, {&(0x7f00000044c0)=""/218, 0xda}, {&(0x7f00000045c0)=""/131, 0x83}, {&(0x7f0000004680)}, {&(0x7f00000046c0)=""/30, 0x1e}, {&(0x7f0000004700)=""/235, 0xeb}], 0x6, &(0x7f0000004880)=""/59, 0x3b}, 0x4}, {{&(0x7f00000048c0)=@tipc=@id, 0x80, &(0x7f0000004b80)=[{&(0x7f0000004940)=""/219, 0xdb}, {&(0x7f0000004a40)=""/210, 0xd2}, {&(0x7f0000004b40)=""/46, 0x2e}], 0x3, &(0x7f0000004bc0)=""/173, 0xad}, 0xef36}], 0x5, 0x1, &(0x7f0000004dc0)={0x0, 0x989680}) lseek(0xffffffffffffffff, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_CPUID2(0xffffffffffffffff, 0xc008ae91, &(0x7f0000000400)={0x6, 0x0, [{}, {}, {}, {}, {}, {}]}) close(0xffffffffffffffff) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) [ 78.294328][ T7436] print_req_error: 25 callbacks suppressed [ 78.294415][ T7436] blk_update_request: I/O error, dev loop0, sector 136 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0 07:54:42 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000500)={0x30, 0x2, 0x0, 0x0, 0x1}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x20910, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0100000000"], 0x48}}, 0x0) 07:54:42 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000500)={0x30, 0x2, 0x0, 0x0, 0x1}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x20910, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0100000000"], 0x48}}, 0x0) 07:54:42 executing program 3: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000005c0)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000240)='.^\x00', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24000000) syz_genetlink_get_family_id$net_dm(&(0x7f0000000100)='NET_DM\x00') ioctl$LOOP_CLR_FD(r0, 0x4c01) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x2000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x5, 0x800000007, 0x8001}, 0x3c) ioctl$BLKGETSIZE64(r0, 0x80081272, &(0x7f0000000280)) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x4, 0x10000) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x13) pipe(&(0x7f0000000040)) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r2, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) r3 = accept$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) recvmmsg(r3, &(0x7f0000004c80)=[{{&(0x7f00000002c0)=@ipx, 0x80, &(0x7f0000003a40)=[{&(0x7f0000000500)=""/178, 0xb2}, {&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000001780)=""/4096, 0x1000}, {0x0}, {&(0x7f0000002800)=""/131, 0x83}, {&(0x7f00000028c0)=""/186, 0xba}, {&(0x7f0000002980)=""/4096, 0x1000}, {&(0x7f0000003980)=""/192, 0xc0}], 0x8}, 0x8}, {{&(0x7f0000003b00)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f0000003f40)=[{&(0x7f0000003b80)=""/244, 0xf4}, {&(0x7f0000003c80)=""/51, 0x33}, {&(0x7f0000003cc0)=""/217, 0xd9}, {&(0x7f0000003dc0)=""/214, 0xd6}, {&(0x7f0000003ec0)=""/31, 0x1f}, {&(0x7f0000003f00)=""/11, 0xb}], 0x6, &(0x7f0000003fc0)=""/195, 0xc3}, 0x7}, {{&(0x7f00000040c0)=@sco, 0x80, &(0x7f0000004280)=[{&(0x7f0000004140)=""/175, 0xaf}, {&(0x7f0000004200)=""/24, 0x18}, {&(0x7f0000004240)=""/33, 0x21}], 0x3, &(0x7f00000042c0)=""/113, 0x71}, 0x69}, {{&(0x7f0000004340)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @initdev}}, 0x80, &(0x7f0000004800)=[{&(0x7f00000043c0)=""/220, 0xdc}, {&(0x7f00000044c0)=""/218, 0xda}, {&(0x7f00000045c0)=""/131, 0x83}, {&(0x7f0000004680)}, {&(0x7f00000046c0)=""/30, 0x1e}, {&(0x7f0000004700)=""/235, 0xeb}], 0x6, &(0x7f0000004880)=""/59, 0x3b}, 0x4}, {{&(0x7f00000048c0)=@tipc=@id, 0x80, &(0x7f0000004b80)=[{&(0x7f0000004940)=""/219, 0xdb}, {&(0x7f0000004a40)=""/210, 0xd2}, {&(0x7f0000004b40)=""/46, 0x2e}], 0x3, &(0x7f0000004bc0)=""/173, 0xad}, 0xef36}], 0x5, 0x1, &(0x7f0000004dc0)={0x0, 0x989680}) lseek(0xffffffffffffffff, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_CPUID2(0xffffffffffffffff, 0xc008ae91, &(0x7f0000000400)={0x6, 0x0, [{}, {}, {}, {}, {}, {}]}) close(0xffffffffffffffff) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) 07:54:43 executing program 2: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000005c0)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000240)='.^\x00', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24000000) syz_genetlink_get_family_id$net_dm(&(0x7f0000000100)='NET_DM\x00') ioctl$LOOP_CLR_FD(r0, 0x4c01) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x2000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x5, 0x800000007, 0x8001}, 0x3c) ioctl$BLKGETSIZE64(r0, 0x80081272, &(0x7f0000000280)) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x4, 0x10000) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x13) pipe(&(0x7f0000000040)) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r2, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) r3 = accept$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) recvmmsg(r3, &(0x7f0000004c80)=[{{&(0x7f00000002c0)=@ipx, 0x80, &(0x7f0000003a40)=[{&(0x7f0000000500)=""/178, 0xb2}, {&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000001780)=""/4096, 0x1000}, {0x0}, {&(0x7f0000002800)=""/131, 0x83}, {&(0x7f00000028c0)=""/186, 0xba}, {&(0x7f0000002980)=""/4096, 0x1000}, {&(0x7f0000003980)=""/192, 0xc0}], 0x8}, 0x8}, {{&(0x7f0000003b00)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f0000003f40)=[{&(0x7f0000003b80)=""/244, 0xf4}, {&(0x7f0000003c80)=""/51, 0x33}, {&(0x7f0000003cc0)=""/217, 0xd9}, {&(0x7f0000003dc0)=""/214, 0xd6}, {&(0x7f0000003ec0)=""/31, 0x1f}, {&(0x7f0000003f00)=""/11, 0xb}], 0x6, &(0x7f0000003fc0)=""/195, 0xc3}, 0x7}, {{&(0x7f00000040c0)=@sco, 0x80, &(0x7f0000004280)=[{&(0x7f0000004140)=""/175, 0xaf}, {&(0x7f0000004200)=""/24, 0x18}, {&(0x7f0000004240)=""/33, 0x21}], 0x3, &(0x7f00000042c0)=""/113, 0x71}, 0x69}, {{&(0x7f0000004340)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @initdev}}, 0x80, &(0x7f0000004800)=[{&(0x7f00000043c0)=""/220, 0xdc}, {&(0x7f00000044c0)=""/218, 0xda}, {&(0x7f00000045c0)=""/131, 0x83}, {&(0x7f0000004680)}, {&(0x7f00000046c0)=""/30, 0x1e}, {&(0x7f0000004700)=""/235, 0xeb}], 0x6, &(0x7f0000004880)=""/59, 0x3b}, 0x4}, {{&(0x7f00000048c0)=@tipc=@id, 0x80, &(0x7f0000004b80)=[{&(0x7f0000004940)=""/219, 0xdb}, {&(0x7f0000004a40)=""/210, 0xd2}, {&(0x7f0000004b40)=""/46, 0x2e}], 0x3, &(0x7f0000004bc0)=""/173, 0xad}, 0xef36}], 0x5, 0x1, &(0x7f0000004dc0)={0x0, 0x989680}) lseek(0xffffffffffffffff, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_CPUID2(0xffffffffffffffff, 0xc008ae91, &(0x7f0000000400)={0x6, 0x0, [{}, {}, {}, {}, {}, {}]}) close(0xffffffffffffffff) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) 07:54:43 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000005c0)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000240)='.^\x00', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24000000) syz_genetlink_get_family_id$net_dm(&(0x7f0000000100)='NET_DM\x00') ioctl$LOOP_CLR_FD(r0, 0x4c01) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x2000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x5, 0x800000007, 0x8001}, 0x3c) ioctl$BLKGETSIZE64(r0, 0x80081272, &(0x7f0000000280)) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x4, 0x10000) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x13) pipe(&(0x7f0000000040)) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r2, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) r3 = accept$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) recvmmsg(r3, &(0x7f0000004c80)=[{{&(0x7f00000002c0)=@ipx, 0x80, &(0x7f0000003a40)=[{&(0x7f0000000500)=""/178, 0xb2}, {&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000001780)=""/4096, 0x1000}, {0x0}, {&(0x7f0000002800)=""/131, 0x83}, {&(0x7f00000028c0)=""/186, 0xba}, {&(0x7f0000002980)=""/4096, 0x1000}, {&(0x7f0000003980)=""/192, 0xc0}], 0x8}, 0x8}, {{&(0x7f0000003b00)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f0000003f40)=[{&(0x7f0000003b80)=""/244, 0xf4}, {&(0x7f0000003c80)=""/51, 0x33}, {&(0x7f0000003cc0)=""/217, 0xd9}, {&(0x7f0000003dc0)=""/214, 0xd6}, {&(0x7f0000003ec0)=""/31, 0x1f}, {&(0x7f0000003f00)=""/11, 0xb}], 0x6, &(0x7f0000003fc0)=""/195, 0xc3}, 0x7}, {{&(0x7f00000040c0)=@sco, 0x80, &(0x7f0000004280)=[{&(0x7f0000004140)=""/175, 0xaf}, {&(0x7f0000004200)=""/24, 0x18}, {&(0x7f0000004240)=""/33, 0x21}], 0x3, &(0x7f00000042c0)=""/113, 0x71}, 0x69}, {{&(0x7f0000004340)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @initdev}}, 0x80, &(0x7f0000004800)=[{&(0x7f00000043c0)=""/220, 0xdc}, {&(0x7f00000044c0)=""/218, 0xda}, {&(0x7f00000045c0)=""/131, 0x83}, {&(0x7f0000004680)}, {&(0x7f00000046c0)=""/30, 0x1e}, {&(0x7f0000004700)=""/235, 0xeb}], 0x6, &(0x7f0000004880)=""/59, 0x3b}, 0x4}, {{&(0x7f00000048c0)=@tipc=@id, 0x80, &(0x7f0000004b80)=[{&(0x7f0000004940)=""/219, 0xdb}, {&(0x7f0000004a40)=""/210, 0xd2}, {&(0x7f0000004b40)=""/46, 0x2e}], 0x3, &(0x7f0000004bc0)=""/173, 0xad}, 0xef36}], 0x5, 0x1, &(0x7f0000004dc0)={0x0, 0x989680}) lseek(0xffffffffffffffff, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_CPUID2(0xffffffffffffffff, 0xc008ae91, &(0x7f0000000400)={0x6, 0x0, [{}, {}, {}, {}, {}, {}]}) close(0xffffffffffffffff) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) 07:54:43 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000500)={0x30, 0x2, 0x0, 0x0, 0x1}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x20910, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0100000000"], 0x48}}, 0x0) 07:54:43 executing program 2: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000005c0)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000240)='.^\x00', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24000000) syz_genetlink_get_family_id$net_dm(&(0x7f0000000100)='NET_DM\x00') ioctl$LOOP_CLR_FD(r0, 0x4c01) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x2000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x5, 0x800000007, 0x8001}, 0x3c) ioctl$BLKGETSIZE64(r0, 0x80081272, &(0x7f0000000280)) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x4, 0x10000) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x13) pipe(&(0x7f0000000040)) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r2, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) r3 = accept$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) recvmmsg(r3, &(0x7f0000004c80)=[{{&(0x7f00000002c0)=@ipx, 0x80, &(0x7f0000003a40)=[{&(0x7f0000000500)=""/178, 0xb2}, {&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000001780)=""/4096, 0x1000}, {0x0}, {&(0x7f0000002800)=""/131, 0x83}, {&(0x7f00000028c0)=""/186, 0xba}, {&(0x7f0000002980)=""/4096, 0x1000}, {&(0x7f0000003980)=""/192, 0xc0}], 0x8}, 0x8}, {{&(0x7f0000003b00)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f0000003f40)=[{&(0x7f0000003b80)=""/244, 0xf4}, {&(0x7f0000003c80)=""/51, 0x33}, {&(0x7f0000003cc0)=""/217, 0xd9}, {&(0x7f0000003dc0)=""/214, 0xd6}, {&(0x7f0000003ec0)=""/31, 0x1f}, {&(0x7f0000003f00)=""/11, 0xb}], 0x6, &(0x7f0000003fc0)=""/195, 0xc3}, 0x7}, {{&(0x7f00000040c0)=@sco, 0x80, &(0x7f0000004280)=[{&(0x7f0000004140)=""/175, 0xaf}, {&(0x7f0000004200)=""/24, 0x18}, {&(0x7f0000004240)=""/33, 0x21}], 0x3, &(0x7f00000042c0)=""/113, 0x71}, 0x69}, {{&(0x7f0000004340)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @initdev}}, 0x80, &(0x7f0000004800)=[{&(0x7f00000043c0)=""/220, 0xdc}, {&(0x7f00000044c0)=""/218, 0xda}, {&(0x7f00000045c0)=""/131, 0x83}, {&(0x7f0000004680)}, {&(0x7f00000046c0)=""/30, 0x1e}, {&(0x7f0000004700)=""/235, 0xeb}], 0x6, &(0x7f0000004880)=""/59, 0x3b}, 0x4}, {{&(0x7f00000048c0)=@tipc=@id, 0x80, &(0x7f0000004b80)=[{&(0x7f0000004940)=""/219, 0xdb}, {&(0x7f0000004a40)=""/210, 0xd2}, {&(0x7f0000004b40)=""/46, 0x2e}], 0x3, &(0x7f0000004bc0)=""/173, 0xad}, 0xef36}], 0x5, 0x1, &(0x7f0000004dc0)={0x0, 0x989680}) lseek(0xffffffffffffffff, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_CPUID2(0xffffffffffffffff, 0xc008ae91, &(0x7f0000000400)={0x6, 0x0, [{}, {}, {}, {}, {}, {}]}) close(0xffffffffffffffff) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) 07:54:43 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000500)={0x30, 0x2, 0x0, 0x0, 0x1}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x20910, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0100000000"], 0x48}}, 0x0) 07:54:43 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000500)={0x30, 0x2, 0x0, 0x0, 0x1}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x20910, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0100000000"], 0x48}}, 0x0) 07:54:44 executing program 3: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000005c0)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000240)='.^\x00', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24000000) syz_genetlink_get_family_id$net_dm(&(0x7f0000000100)='NET_DM\x00') ioctl$LOOP_CLR_FD(r0, 0x4c01) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x2000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x5, 0x800000007, 0x8001}, 0x3c) ioctl$BLKGETSIZE64(r0, 0x80081272, &(0x7f0000000280)) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x4, 0x10000) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x13) pipe(&(0x7f0000000040)) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r2, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) r3 = accept$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) recvmmsg(r3, &(0x7f0000004c80)=[{{&(0x7f00000002c0)=@ipx, 0x80, &(0x7f0000003a40)=[{&(0x7f0000000500)=""/178, 0xb2}, {&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000001780)=""/4096, 0x1000}, {0x0}, {&(0x7f0000002800)=""/131, 0x83}, {&(0x7f00000028c0)=""/186, 0xba}, {&(0x7f0000002980)=""/4096, 0x1000}, {&(0x7f0000003980)=""/192, 0xc0}], 0x8}, 0x8}, {{&(0x7f0000003b00)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f0000003f40)=[{&(0x7f0000003b80)=""/244, 0xf4}, {&(0x7f0000003c80)=""/51, 0x33}, {&(0x7f0000003cc0)=""/217, 0xd9}, {&(0x7f0000003dc0)=""/214, 0xd6}, {&(0x7f0000003ec0)=""/31, 0x1f}, {&(0x7f0000003f00)=""/11, 0xb}], 0x6, &(0x7f0000003fc0)=""/195, 0xc3}, 0x7}, {{&(0x7f00000040c0)=@sco, 0x80, &(0x7f0000004280)=[{&(0x7f0000004140)=""/175, 0xaf}, {&(0x7f0000004200)=""/24, 0x18}, {&(0x7f0000004240)=""/33, 0x21}], 0x3, &(0x7f00000042c0)=""/113, 0x71}, 0x69}, {{&(0x7f0000004340)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @initdev}}, 0x80, &(0x7f0000004800)=[{&(0x7f00000043c0)=""/220, 0xdc}, {&(0x7f00000044c0)=""/218, 0xda}, {&(0x7f00000045c0)=""/131, 0x83}, {&(0x7f0000004680)}, {&(0x7f00000046c0)=""/30, 0x1e}, {&(0x7f0000004700)=""/235, 0xeb}], 0x6, &(0x7f0000004880)=""/59, 0x3b}, 0x4}, {{&(0x7f00000048c0)=@tipc=@id, 0x80, &(0x7f0000004b80)=[{&(0x7f0000004940)=""/219, 0xdb}, {&(0x7f0000004a40)=""/210, 0xd2}, {&(0x7f0000004b40)=""/46, 0x2e}], 0x3, &(0x7f0000004bc0)=""/173, 0xad}, 0xef36}], 0x5, 0x1, &(0x7f0000004dc0)={0x0, 0x989680}) lseek(0xffffffffffffffff, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_CPUID2(0xffffffffffffffff, 0xc008ae91, &(0x7f0000000400)={0x6, 0x0, [{}, {}, {}, {}, {}, {}]}) close(0xffffffffffffffff) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) 07:54:44 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000005c0)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000240)='.^\x00', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24000000) syz_genetlink_get_family_id$net_dm(&(0x7f0000000100)='NET_DM\x00') ioctl$LOOP_CLR_FD(r0, 0x4c01) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x2000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x5, 0x800000007, 0x8001}, 0x3c) ioctl$BLKGETSIZE64(r0, 0x80081272, &(0x7f0000000280)) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x4, 0x10000) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB="1300200065ff30795329239483daff5f2467a9deff21d171df3054a47727a647d724e2268e418d8f8d99ec5204dc39c9c144f8e55be6b90efe8d0e6032fda555e3c0ff534e789c1e56e29ec437819ce40e9c2145c76eec4d4e8b7edd6c3bd37131b8cf1413d5c94e69b08190512c803447295baf456d2fff0b60702154e37f0b939fdca9432ce6e986c81214d18ddb2108c66bac3a2ee19fa71a2233d2e8f12df49b6cffba4ba1fd4a591a5f308c755692643d11ba47baed5fbeffd884714a644a36a5b00528d973e8a283249643ead30ff359b653bc40e22764a7f97c9632c6009f324918b124ea074a4a3a0f83a2a452dcf13aa4ac01785f947cadb57f48f5e33b7b4364a731b097dd7ad4b8f7836431d04ce1236b7f05b6babdfb265ae93b8b64"], 0x13) pipe(&(0x7f0000000040)) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r2, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) r3 = accept$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) recvmmsg(r3, &(0x7f0000004c80)=[{{&(0x7f00000002c0)=@ipx, 0x80, &(0x7f0000003a40)=[{&(0x7f0000000500)=""/178, 0xb2}, {&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000001780)=""/4096, 0x1000}, {0x0}, {&(0x7f0000002800)=""/131, 0x83}, {&(0x7f00000028c0)=""/186, 0xba}, {&(0x7f0000002980)=""/4096, 0x1000}, {&(0x7f0000003980)=""/192, 0xc0}], 0x8}, 0x8}, {{&(0x7f0000003b00)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f0000003f40)=[{&(0x7f0000003b80)=""/244, 0xf4}, {&(0x7f0000003c80)=""/51, 0x33}, {&(0x7f0000003cc0)=""/217, 0xd9}, {&(0x7f0000003dc0)=""/214, 0xd6}, {&(0x7f0000003ec0)=""/31, 0x1f}, {&(0x7f0000003f00)=""/11, 0xb}], 0x6, &(0x7f0000003fc0)=""/195, 0xc3}, 0x7}, {{&(0x7f00000040c0)=@sco, 0x80, &(0x7f0000004280)=[{&(0x7f0000004140)=""/175, 0xaf}, {&(0x7f0000004200)=""/24, 0x18}, {&(0x7f0000004240)=""/33, 0x21}], 0x3, &(0x7f00000042c0)=""/113, 0x71}, 0x69}, {{&(0x7f0000004340)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @initdev}}, 0x80, &(0x7f0000004800)=[{&(0x7f00000043c0)=""/220, 0xdc}, {&(0x7f00000044c0)=""/218, 0xda}, {&(0x7f00000045c0)=""/131, 0x83}, {&(0x7f0000004680)}, {&(0x7f00000046c0)=""/30, 0x1e}, {&(0x7f0000004700)=""/235, 0xeb}], 0x6, &(0x7f0000004880)=""/59, 0x3b}, 0x4}, {{&(0x7f00000048c0)=@tipc=@id, 0x80, &(0x7f0000004b80)=[{&(0x7f0000004940)=""/219, 0xdb}, {&(0x7f0000004a40)=""/210, 0xd2}, {&(0x7f0000004b40)=""/46, 0x2e}], 0x3, &(0x7f0000004bc0)=""/173, 0xad}, 0xef36}], 0x5, 0x1, &(0x7f0000004dc0)={0x0, 0x989680}) lseek(0xffffffffffffffff, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_CPUID2(0xffffffffffffffff, 0xc008ae91, &(0x7f0000000400)={0x6, 0x0, [{}, {}, {}, {}, {}, {}]}) close(0xffffffffffffffff) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) [ 80.156078][ T7508] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0 [ 80.468504][ T2492] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 80.479582][ T2492] buffer_io_error: 22 callbacks suppressed [ 80.479602][ T2492] Buffer I/O error on dev loop0, logical block 0, async page read 07:54:44 executing program 4: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000005c0)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000240)='.^\x00', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24000000) syz_genetlink_get_family_id$net_dm(&(0x7f0000000100)='NET_DM\x00') ioctl$LOOP_CLR_FD(r0, 0x4c01) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x2000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x5, 0x800000007, 0x8001}, 0x3c) ioctl$BLKGETSIZE64(r0, 0x80081272, &(0x7f0000000280)) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x4, 0x10000) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x13) pipe(&(0x7f0000000040)) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r2, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) r3 = accept$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) recvmmsg(r3, &(0x7f0000004c80)=[{{&(0x7f00000002c0)=@ipx, 0x80, &(0x7f0000003a40)=[{&(0x7f0000000500)=""/178, 0xb2}, {&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000001780)=""/4096, 0x1000}, {0x0}, {&(0x7f0000002800)=""/131, 0x83}, {&(0x7f00000028c0)=""/186, 0xba}, {&(0x7f0000002980)=""/4096, 0x1000}, {&(0x7f0000003980)=""/192, 0xc0}], 0x8}, 0x8}, {{&(0x7f0000003b00)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f0000003f40)=[{&(0x7f0000003b80)=""/244, 0xf4}, {&(0x7f0000003c80)=""/51, 0x33}, {&(0x7f0000003cc0)=""/217, 0xd9}, {&(0x7f0000003dc0)=""/214, 0xd6}, {&(0x7f0000003ec0)=""/31, 0x1f}, {&(0x7f0000003f00)=""/11, 0xb}], 0x6, &(0x7f0000003fc0)=""/195, 0xc3}, 0x7}, {{&(0x7f00000040c0)=@sco, 0x80, &(0x7f0000004280)=[{&(0x7f0000004140)=""/175, 0xaf}, {&(0x7f0000004200)=""/24, 0x18}, {&(0x7f0000004240)=""/33, 0x21}], 0x3, &(0x7f00000042c0)=""/113, 0x71}, 0x69}, {{&(0x7f0000004340)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @initdev}}, 0x80, &(0x7f0000004800)=[{&(0x7f00000043c0)=""/220, 0xdc}, {&(0x7f00000044c0)=""/218, 0xda}, {&(0x7f00000045c0)=""/131, 0x83}, {&(0x7f0000004680)}, {&(0x7f00000046c0)=""/30, 0x1e}, {&(0x7f0000004700)=""/235, 0xeb}], 0x6, &(0x7f0000004880)=""/59, 0x3b}, 0x4}, {{&(0x7f00000048c0)=@tipc=@id, 0x80, &(0x7f0000004b80)=[{&(0x7f0000004940)=""/219, 0xdb}, {&(0x7f0000004a40)=""/210, 0xd2}, {&(0x7f0000004b40)=""/46, 0x2e}], 0x3, &(0x7f0000004bc0)=""/173, 0xad}, 0xef36}], 0x5, 0x1, &(0x7f0000004dc0)={0x0, 0x989680}) lseek(0xffffffffffffffff, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_CPUID2(0xffffffffffffffff, 0xc008ae91, &(0x7f0000000400)={0x6, 0x0, [{}, {}, {}, {}, {}, {}]}) close(0xffffffffffffffff) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) 07:54:44 executing program 3: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000005c0)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000240)='.^\x00', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24000000) syz_genetlink_get_family_id$net_dm(&(0x7f0000000100)='NET_DM\x00') ioctl$LOOP_CLR_FD(r0, 0x4c01) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x2000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x5, 0x800000007, 0x8001}, 0x3c) ioctl$BLKGETSIZE64(r0, 0x80081272, &(0x7f0000000280)) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x4, 0x10000) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x13) pipe(&(0x7f0000000040)) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r2, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) r3 = accept$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) recvmmsg(r3, &(0x7f0000004c80)=[{{&(0x7f00000002c0)=@ipx, 0x80, &(0x7f0000003a40)=[{&(0x7f0000000500)=""/178, 0xb2}, {&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000001780)=""/4096, 0x1000}, {0x0}, {&(0x7f0000002800)=""/131, 0x83}, {&(0x7f00000028c0)=""/186, 0xba}, {&(0x7f0000002980)=""/4096, 0x1000}, {&(0x7f0000003980)=""/192, 0xc0}], 0x8}, 0x8}, {{&(0x7f0000003b00)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f0000003f40)=[{&(0x7f0000003b80)=""/244, 0xf4}, {&(0x7f0000003c80)=""/51, 0x33}, {&(0x7f0000003cc0)=""/217, 0xd9}, {&(0x7f0000003dc0)=""/214, 0xd6}, {&(0x7f0000003ec0)=""/31, 0x1f}, {&(0x7f0000003f00)=""/11, 0xb}], 0x6, &(0x7f0000003fc0)=""/195, 0xc3}, 0x7}, {{&(0x7f00000040c0)=@sco, 0x80, &(0x7f0000004280)=[{&(0x7f0000004140)=""/175, 0xaf}, {&(0x7f0000004200)=""/24, 0x18}, {&(0x7f0000004240)=""/33, 0x21}], 0x3, &(0x7f00000042c0)=""/113, 0x71}, 0x69}, {{&(0x7f0000004340)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @initdev}}, 0x80, &(0x7f0000004800)=[{&(0x7f00000043c0)=""/220, 0xdc}, {&(0x7f00000044c0)=""/218, 0xda}, {&(0x7f00000045c0)=""/131, 0x83}, {&(0x7f0000004680)}, {&(0x7f00000046c0)=""/30, 0x1e}, {&(0x7f0000004700)=""/235, 0xeb}], 0x6, &(0x7f0000004880)=""/59, 0x3b}, 0x4}, {{&(0x7f00000048c0)=@tipc=@id, 0x80, &(0x7f0000004b80)=[{&(0x7f0000004940)=""/219, 0xdb}, {&(0x7f0000004a40)=""/210, 0xd2}, {&(0x7f0000004b40)=""/46, 0x2e}], 0x3, &(0x7f0000004bc0)=""/173, 0xad}, 0xef36}], 0x5, 0x1, &(0x7f0000004dc0)={0x0, 0x989680}) lseek(0xffffffffffffffff, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_CPUID2(0xffffffffffffffff, 0xc008ae91, &(0x7f0000000400)={0x6, 0x0, [{}, {}, {}, {}, {}, {}]}) close(0xffffffffffffffff) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) 07:54:44 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000005c0)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000240)='.^\x00', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24000000) syz_genetlink_get_family_id$net_dm(&(0x7f0000000100)='NET_DM\x00') ioctl$LOOP_CLR_FD(r0, 0x4c01) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x2000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x5, 0x800000007, 0x8001}, 0x3c) ioctl$BLKGETSIZE64(r0, 0x80081272, &(0x7f0000000280)) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x4, 0x10000) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB="1300200065ff30795329239483daff5f2467a9deff21d171df3054a47727a647d724e2268e418d8f8d99ec5204dc39c9c144f8e55be6b90efe8d0e6032fda555e3c0ff534e789c1e56e29ec437819ce40e9c2145c76eec4d4e8b7edd6c3bd37131b8cf1413d5c94e69b08190512c803447295baf456d2fff0b60702154e37f0b939fdca9432ce6e986c81214d18ddb2108c66bac3a2ee19fa71a2233d2e8f12df49b6cffba4ba1fd4a591a5f308c755692643d11ba47baed5fbeffd884714a644a36a5b00528d973e8a283249643ead30ff359b653bc40e22764a7f97c9632c6009f324918b124ea074a4a3a0f83a2a452dcf13aa4ac01785f947cadb57f48f5e33b7b4364a731b097dd7ad4b8f7836431d04ce1236b7f05b6babdfb265ae93b8b64"], 0x13) pipe(&(0x7f0000000040)) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r2, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) r3 = accept$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) recvmmsg(r3, &(0x7f0000004c80)=[{{&(0x7f00000002c0)=@ipx, 0x80, &(0x7f0000003a40)=[{&(0x7f0000000500)=""/178, 0xb2}, {&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000001780)=""/4096, 0x1000}, {0x0}, {&(0x7f0000002800)=""/131, 0x83}, {&(0x7f00000028c0)=""/186, 0xba}, {&(0x7f0000002980)=""/4096, 0x1000}, {&(0x7f0000003980)=""/192, 0xc0}], 0x8}, 0x8}, {{&(0x7f0000003b00)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f0000003f40)=[{&(0x7f0000003b80)=""/244, 0xf4}, {&(0x7f0000003c80)=""/51, 0x33}, {&(0x7f0000003cc0)=""/217, 0xd9}, {&(0x7f0000003dc0)=""/214, 0xd6}, {&(0x7f0000003ec0)=""/31, 0x1f}, {&(0x7f0000003f00)=""/11, 0xb}], 0x6, &(0x7f0000003fc0)=""/195, 0xc3}, 0x7}, {{&(0x7f00000040c0)=@sco, 0x80, &(0x7f0000004280)=[{&(0x7f0000004140)=""/175, 0xaf}, {&(0x7f0000004200)=""/24, 0x18}, {&(0x7f0000004240)=""/33, 0x21}], 0x3, &(0x7f00000042c0)=""/113, 0x71}, 0x69}, {{&(0x7f0000004340)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @initdev}}, 0x80, &(0x7f0000004800)=[{&(0x7f00000043c0)=""/220, 0xdc}, {&(0x7f00000044c0)=""/218, 0xda}, {&(0x7f00000045c0)=""/131, 0x83}, {&(0x7f0000004680)}, {&(0x7f00000046c0)=""/30, 0x1e}, {&(0x7f0000004700)=""/235, 0xeb}], 0x6, &(0x7f0000004880)=""/59, 0x3b}, 0x4}, {{&(0x7f00000048c0)=@tipc=@id, 0x80, &(0x7f0000004b80)=[{&(0x7f0000004940)=""/219, 0xdb}, {&(0x7f0000004a40)=""/210, 0xd2}, {&(0x7f0000004b40)=""/46, 0x2e}], 0x3, &(0x7f0000004bc0)=""/173, 0xad}, 0xef36}], 0x5, 0x1, &(0x7f0000004dc0)={0x0, 0x989680}) lseek(0xffffffffffffffff, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_CPUID2(0xffffffffffffffff, 0xc008ae91, &(0x7f0000000400)={0x6, 0x0, [{}, {}, {}, {}, {}, {}]}) close(0xffffffffffffffff) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) 07:54:45 executing program 2: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000005c0)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000240)='.^\x00', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24000000) syz_genetlink_get_family_id$net_dm(&(0x7f0000000100)='NET_DM\x00') ioctl$LOOP_CLR_FD(r0, 0x4c01) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x2000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x5, 0x800000007, 0x8001}, 0x3c) ioctl$BLKGETSIZE64(r0, 0x80081272, &(0x7f0000000280)) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x4, 0x10000) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB="1300200065ff30795329239483daff5f2467a9deff21d171df3054a47727a647d724e2268e418d8f8d99ec5204dc39c9c144f8e55be6b90efe8d0e6032fda555e3c0ff534e789c1e56e29ec437819ce40e9c2145c76eec4d4e8b7edd6c3bd37131b8cf1413d5c94e69b08190512c803447295baf456d2fff0b60702154e37f0b939fdca9432ce6e986c81214d18ddb2108c66bac3a2ee19fa71a2233d2e8f12df49b6cffba4ba1fd4a591a5f308c755692643d11ba47baed5fbeffd884714a644a36a5b00528d973e8a283249643ead30ff359b653bc40e22764a7f97c9632c6009f324918b124ea074a4a3a0f83a2a452dcf13aa4ac01785f947cadb57f48f5e33b7b4364a731b097dd7ad4b8f7836431d04ce1236b7f05b6babdfb265ae93b8b64"], 0x13) pipe(&(0x7f0000000040)) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r2, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) r3 = accept$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) recvmmsg(r3, &(0x7f0000004c80)=[{{&(0x7f00000002c0)=@ipx, 0x80, &(0x7f0000003a40)=[{&(0x7f0000000500)=""/178, 0xb2}, {&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000001780)=""/4096, 0x1000}, {0x0}, {&(0x7f0000002800)=""/131, 0x83}, {&(0x7f00000028c0)=""/186, 0xba}, {&(0x7f0000002980)=""/4096, 0x1000}, {&(0x7f0000003980)=""/192, 0xc0}], 0x8}, 0x8}, {{&(0x7f0000003b00)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f0000003f40)=[{&(0x7f0000003b80)=""/244, 0xf4}, {&(0x7f0000003c80)=""/51, 0x33}, {&(0x7f0000003cc0)=""/217, 0xd9}, {&(0x7f0000003dc0)=""/214, 0xd6}, {&(0x7f0000003ec0)=""/31, 0x1f}, {&(0x7f0000003f00)=""/11, 0xb}], 0x6, &(0x7f0000003fc0)=""/195, 0xc3}, 0x7}, {{&(0x7f00000040c0)=@sco, 0x80, &(0x7f0000004280)=[{&(0x7f0000004140)=""/175, 0xaf}, {&(0x7f0000004200)=""/24, 0x18}, {&(0x7f0000004240)=""/33, 0x21}], 0x3, &(0x7f00000042c0)=""/113, 0x71}, 0x69}, {{&(0x7f0000004340)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @initdev}}, 0x80, &(0x7f0000004800)=[{&(0x7f00000043c0)=""/220, 0xdc}, {&(0x7f00000044c0)=""/218, 0xda}, {&(0x7f00000045c0)=""/131, 0x83}, {&(0x7f0000004680)}, {&(0x7f00000046c0)=""/30, 0x1e}, {&(0x7f0000004700)=""/235, 0xeb}], 0x6, &(0x7f0000004880)=""/59, 0x3b}, 0x4}, {{&(0x7f00000048c0)=@tipc=@id, 0x80, &(0x7f0000004b80)=[{&(0x7f0000004940)=""/219, 0xdb}, {&(0x7f0000004a40)=""/210, 0xd2}, {&(0x7f0000004b40)=""/46, 0x2e}], 0x3, &(0x7f0000004bc0)=""/173, 0xad}, 0xef36}], 0x5, 0x1, &(0x7f0000004dc0)={0x0, 0x989680}) lseek(0xffffffffffffffff, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_CPUID2(0xffffffffffffffff, 0xc008ae91, &(0x7f0000000400)={0x6, 0x0, [{}, {}, {}, {}, {}, {}]}) close(0xffffffffffffffff) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) 07:54:45 executing program 5: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000005c0)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000240)='.^\x00', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24000000) syz_genetlink_get_family_id$net_dm(&(0x7f0000000100)='NET_DM\x00') ioctl$LOOP_CLR_FD(r0, 0x4c01) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x2000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x5, 0x800000007, 0x8001}, 0x3c) ioctl$BLKGETSIZE64(r0, 0x80081272, &(0x7f0000000280)) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x4, 0x10000) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB="1300200065ff30795329239483daff5f2467a9deff21d171df3054a47727a647d724e2268e418d8f8d99ec5204dc39c9c144f8e55be6b90efe8d0e6032fda555e3c0ff534e789c1e56e29ec437819ce40e9c2145c76eec4d4e8b7edd6c3bd37131b8cf1413d5c94e69b08190512c803447295baf456d2fff0b60702154e37f0b939fdca9432ce6e986c81214d18ddb2108c66bac3a2ee19fa71a2233d2e8f12df49b6cffba4ba1fd4a591a5f308c755692643d11ba47baed5fbeffd884714a644a36a5b00528d973e8a283249643ead30ff359b653bc40e22764a7f97c9632c6009f324918b124ea074a4a3a0f83a2a452dcf13aa4ac01785f947cadb57f48f5e33b7b4364a731b097dd7ad4b8f7836431d04ce1236b7f05b6babdfb265ae93b8b64"], 0x13) pipe(&(0x7f0000000040)) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r2, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) r3 = accept$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) recvmmsg(r3, &(0x7f0000004c80)=[{{&(0x7f00000002c0)=@ipx, 0x80, &(0x7f0000003a40)=[{&(0x7f0000000500)=""/178, 0xb2}, {&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000001780)=""/4096, 0x1000}, {0x0}, {&(0x7f0000002800)=""/131, 0x83}, {&(0x7f00000028c0)=""/186, 0xba}, {&(0x7f0000002980)=""/4096, 0x1000}, {&(0x7f0000003980)=""/192, 0xc0}], 0x8}, 0x8}, {{&(0x7f0000003b00)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f0000003f40)=[{&(0x7f0000003b80)=""/244, 0xf4}, {&(0x7f0000003c80)=""/51, 0x33}, {&(0x7f0000003cc0)=""/217, 0xd9}, {&(0x7f0000003dc0)=""/214, 0xd6}, {&(0x7f0000003ec0)=""/31, 0x1f}, {&(0x7f0000003f00)=""/11, 0xb}], 0x6, &(0x7f0000003fc0)=""/195, 0xc3}, 0x7}, {{&(0x7f00000040c0)=@sco, 0x80, &(0x7f0000004280)=[{&(0x7f0000004140)=""/175, 0xaf}, {&(0x7f0000004200)=""/24, 0x18}, {&(0x7f0000004240)=""/33, 0x21}], 0x3, &(0x7f00000042c0)=""/113, 0x71}, 0x69}, {{&(0x7f0000004340)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @initdev}}, 0x80, &(0x7f0000004800)=[{&(0x7f00000043c0)=""/220, 0xdc}, {&(0x7f00000044c0)=""/218, 0xda}, {&(0x7f00000045c0)=""/131, 0x83}, {&(0x7f0000004680)}, {&(0x7f00000046c0)=""/30, 0x1e}, {&(0x7f0000004700)=""/235, 0xeb}], 0x6, &(0x7f0000004880)=""/59, 0x3b}, 0x4}, {{&(0x7f00000048c0)=@tipc=@id, 0x80, &(0x7f0000004b80)=[{&(0x7f0000004940)=""/219, 0xdb}, {&(0x7f0000004a40)=""/210, 0xd2}, {&(0x7f0000004b40)=""/46, 0x2e}], 0x3, &(0x7f0000004bc0)=""/173, 0xad}, 0xef36}], 0x5, 0x1, &(0x7f0000004dc0)={0x0, 0x989680}) lseek(0xffffffffffffffff, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_CPUID2(0xffffffffffffffff, 0xc008ae91, &(0x7f0000000400)={0x6, 0x0, [{}, {}, {}, {}, {}, {}]}) close(0xffffffffffffffff) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) [ 80.943723][ T7527] blk_update_request: I/O error, dev loop0, sector 256 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0 07:54:45 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000005c0)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000240)='.^\x00', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24000000) syz_genetlink_get_family_id$net_dm(&(0x7f0000000100)='NET_DM\x00') ioctl$LOOP_CLR_FD(r0, 0x4c01) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x2000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x5, 0x800000007, 0x8001}, 0x3c) ioctl$BLKGETSIZE64(r0, 0x80081272, &(0x7f0000000280)) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x4, 0x10000) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB="1300200065ff30795329239483daff5f2467a9deff21d171df3054a47727a647d724e2268e418d8f8d99ec5204dc39c9c144f8e55be6b90efe8d0e6032fda555e3c0ff534e789c1e56e29ec437819ce40e9c2145c76eec4d4e8b7edd6c3bd37131b8cf1413d5c94e69b08190512c803447295baf456d2fff0b60702154e37f0b939fdca9432ce6e986c81214d18ddb2108c66bac3a2ee19fa71a2233d2e8f12df49b6cffba4ba1fd4a591a5f308c755692643d11ba47baed5fbeffd884714a644a36a5b00528d973e8a283249643ead30ff359b653bc40e22764a7f97c9632c6009f324918b124ea074a4a3a0f83a2a452dcf13aa4ac01785f947cadb57f48f5e33b7b4364a731b097dd7ad4b8f7836431d04ce1236b7f05b6babdfb265ae93b8b64"], 0x13) pipe(&(0x7f0000000040)) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r2, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) r3 = accept$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) recvmmsg(r3, &(0x7f0000004c80)=[{{&(0x7f00000002c0)=@ipx, 0x80, &(0x7f0000003a40)=[{&(0x7f0000000500)=""/178, 0xb2}, {&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000001780)=""/4096, 0x1000}, {0x0}, {&(0x7f0000002800)=""/131, 0x83}, {&(0x7f00000028c0)=""/186, 0xba}, {&(0x7f0000002980)=""/4096, 0x1000}, {&(0x7f0000003980)=""/192, 0xc0}], 0x8}, 0x8}, {{&(0x7f0000003b00)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f0000003f40)=[{&(0x7f0000003b80)=""/244, 0xf4}, {&(0x7f0000003c80)=""/51, 0x33}, {&(0x7f0000003cc0)=""/217, 0xd9}, {&(0x7f0000003dc0)=""/214, 0xd6}, {&(0x7f0000003ec0)=""/31, 0x1f}, {&(0x7f0000003f00)=""/11, 0xb}], 0x6, &(0x7f0000003fc0)=""/195, 0xc3}, 0x7}, {{&(0x7f00000040c0)=@sco, 0x80, &(0x7f0000004280)=[{&(0x7f0000004140)=""/175, 0xaf}, {&(0x7f0000004200)=""/24, 0x18}, {&(0x7f0000004240)=""/33, 0x21}], 0x3, &(0x7f00000042c0)=""/113, 0x71}, 0x69}, {{&(0x7f0000004340)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @initdev}}, 0x80, &(0x7f0000004800)=[{&(0x7f00000043c0)=""/220, 0xdc}, {&(0x7f00000044c0)=""/218, 0xda}, {&(0x7f00000045c0)=""/131, 0x83}, {&(0x7f0000004680)}, {&(0x7f00000046c0)=""/30, 0x1e}, {&(0x7f0000004700)=""/235, 0xeb}], 0x6, &(0x7f0000004880)=""/59, 0x3b}, 0x4}, {{&(0x7f00000048c0)=@tipc=@id, 0x80, &(0x7f0000004b80)=[{&(0x7f0000004940)=""/219, 0xdb}, {&(0x7f0000004a40)=""/210, 0xd2}, {&(0x7f0000004b40)=""/46, 0x2e}], 0x3, &(0x7f0000004bc0)=""/173, 0xad}, 0xef36}], 0x5, 0x1, &(0x7f0000004dc0)={0x0, 0x989680}) lseek(0xffffffffffffffff, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_CPUID2(0xffffffffffffffff, 0xc008ae91, &(0x7f0000000400)={0x6, 0x0, [{}, {}, {}, {}, {}, {}]}) close(0xffffffffffffffff) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) [ 81.040397][ T2492] blk_update_request: I/O error, dev loop0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 81.051607][ T2492] Buffer I/O error on dev loop0, logical block 0, lost async page write [ 81.060086][ T2492] blk_update_request: I/O error, dev loop0, sector 4 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 81.071278][ T2492] Buffer I/O error on dev loop0, logical block 1, lost async page write [ 81.079859][ T2492] blk_update_request: I/O error, dev loop0, sector 8 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 81.088110][ T7527] blk_update_request: I/O error, dev loop0, sector 12 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 81.091033][ T2492] Buffer I/O error on dev loop0, logical block 2, lost async page write [ 81.091147][ T2492] blk_update_request: I/O error, dev loop0, sector 16 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 81.091169][ T2492] Buffer I/O error on dev loop0, logical block 4, lost async page write [ 81.091223][ T2492] blk_update_request: I/O error, dev loop0, sector 20 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 81.091320][ T2492] Buffer I/O error on dev loop0, logical block 5, lost async page write [ 81.091371][ T2492] Buffer I/O error on dev loop0, logical block 6, lost async page write [ 81.091419][ T2492] Buffer I/O error on dev loop0, logical block 7, lost async page write [ 81.103251][ T7527] Buffer I/O error on dev loop0, logical block 3, lost async page write [ 81.111530][ T2492] Buffer I/O error on dev loop0, logical block 8, lost async page write 07:54:45 executing program 4: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000005c0)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000240)='.^\x00', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24000000) syz_genetlink_get_family_id$net_dm(&(0x7f0000000100)='NET_DM\x00') ioctl$LOOP_CLR_FD(r0, 0x4c01) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x2000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x5, 0x800000007, 0x8001}, 0x3c) ioctl$BLKGETSIZE64(r0, 0x80081272, &(0x7f0000000280)) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x4, 0x10000) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x13) pipe(&(0x7f0000000040)) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r2, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) r3 = accept$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) recvmmsg(r3, &(0x7f0000004c80)=[{{&(0x7f00000002c0)=@ipx, 0x80, &(0x7f0000003a40)=[{&(0x7f0000000500)=""/178, 0xb2}, {&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000001780)=""/4096, 0x1000}, {0x0}, {&(0x7f0000002800)=""/131, 0x83}, {&(0x7f00000028c0)=""/186, 0xba}, {&(0x7f0000002980)=""/4096, 0x1000}, {&(0x7f0000003980)=""/192, 0xc0}], 0x8}, 0x8}, {{&(0x7f0000003b00)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f0000003f40)=[{&(0x7f0000003b80)=""/244, 0xf4}, {&(0x7f0000003c80)=""/51, 0x33}, {&(0x7f0000003cc0)=""/217, 0xd9}, {&(0x7f0000003dc0)=""/214, 0xd6}, {&(0x7f0000003ec0)=""/31, 0x1f}, {&(0x7f0000003f00)=""/11, 0xb}], 0x6, &(0x7f0000003fc0)=""/195, 0xc3}, 0x7}, {{&(0x7f00000040c0)=@sco, 0x80, &(0x7f0000004280)=[{&(0x7f0000004140)=""/175, 0xaf}, {&(0x7f0000004200)=""/24, 0x18}, {&(0x7f0000004240)=""/33, 0x21}], 0x3, &(0x7f00000042c0)=""/113, 0x71}, 0x69}, {{&(0x7f0000004340)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @initdev}}, 0x80, &(0x7f0000004800)=[{&(0x7f00000043c0)=""/220, 0xdc}, {&(0x7f00000044c0)=""/218, 0xda}, {&(0x7f00000045c0)=""/131, 0x83}, {&(0x7f0000004680)}, {&(0x7f00000046c0)=""/30, 0x1e}, {&(0x7f0000004700)=""/235, 0xeb}], 0x6, &(0x7f0000004880)=""/59, 0x3b}, 0x4}, {{&(0x7f00000048c0)=@tipc=@id, 0x80, &(0x7f0000004b80)=[{&(0x7f0000004940)=""/219, 0xdb}, {&(0x7f0000004a40)=""/210, 0xd2}, {&(0x7f0000004b40)=""/46, 0x2e}], 0x3, &(0x7f0000004bc0)=""/173, 0xad}, 0xef36}], 0x5, 0x1, &(0x7f0000004dc0)={0x0, 0x989680}) lseek(0xffffffffffffffff, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_CPUID2(0xffffffffffffffff, 0xc008ae91, &(0x7f0000000400)={0x6, 0x0, [{}, {}, {}, {}, {}, {}]}) close(0xffffffffffffffff) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) 07:54:45 executing program 2: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000005c0)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000240)='.^\x00', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24000000) syz_genetlink_get_family_id$net_dm(&(0x7f0000000100)='NET_DM\x00') ioctl$LOOP_CLR_FD(r0, 0x4c01) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x2000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x5, 0x800000007, 0x8001}, 0x3c) ioctl$BLKGETSIZE64(r0, 0x80081272, &(0x7f0000000280)) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x4, 0x10000) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB="1300200065ff30795329239483daff5f2467a9deff21d171df3054a47727a647d724e2268e418d8f8d99ec5204dc39c9c144f8e55be6b90efe8d0e6032fda555e3c0ff534e789c1e56e29ec437819ce40e9c2145c76eec4d4e8b7edd6c3bd37131b8cf1413d5c94e69b08190512c803447295baf456d2fff0b60702154e37f0b939fdca9432ce6e986c81214d18ddb2108c66bac3a2ee19fa71a2233d2e8f12df49b6cffba4ba1fd4a591a5f308c755692643d11ba47baed5fbeffd884714a644a36a5b00528d973e8a283249643ead30ff359b653bc40e22764a7f97c9632c6009f324918b124ea074a4a3a0f83a2a452dcf13aa4ac01785f947cadb57f48f5e33b7b4364a731b097dd7ad4b8f7836431d04ce1236b7f05b6babdfb265ae93b8b64"], 0x13) pipe(&(0x7f0000000040)) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r2, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) r3 = accept$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) recvmmsg(r3, &(0x7f0000004c80)=[{{&(0x7f00000002c0)=@ipx, 0x80, &(0x7f0000003a40)=[{&(0x7f0000000500)=""/178, 0xb2}, {&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000001780)=""/4096, 0x1000}, {0x0}, {&(0x7f0000002800)=""/131, 0x83}, {&(0x7f00000028c0)=""/186, 0xba}, {&(0x7f0000002980)=""/4096, 0x1000}, {&(0x7f0000003980)=""/192, 0xc0}], 0x8}, 0x8}, {{&(0x7f0000003b00)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f0000003f40)=[{&(0x7f0000003b80)=""/244, 0xf4}, {&(0x7f0000003c80)=""/51, 0x33}, {&(0x7f0000003cc0)=""/217, 0xd9}, {&(0x7f0000003dc0)=""/214, 0xd6}, {&(0x7f0000003ec0)=""/31, 0x1f}, {&(0x7f0000003f00)=""/11, 0xb}], 0x6, &(0x7f0000003fc0)=""/195, 0xc3}, 0x7}, {{&(0x7f00000040c0)=@sco, 0x80, &(0x7f0000004280)=[{&(0x7f0000004140)=""/175, 0xaf}, {&(0x7f0000004200)=""/24, 0x18}, {&(0x7f0000004240)=""/33, 0x21}], 0x3, &(0x7f00000042c0)=""/113, 0x71}, 0x69}, {{&(0x7f0000004340)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @initdev}}, 0x80, &(0x7f0000004800)=[{&(0x7f00000043c0)=""/220, 0xdc}, {&(0x7f00000044c0)=""/218, 0xda}, {&(0x7f00000045c0)=""/131, 0x83}, {&(0x7f0000004680)}, {&(0x7f00000046c0)=""/30, 0x1e}, {&(0x7f0000004700)=""/235, 0xeb}], 0x6, &(0x7f0000004880)=""/59, 0x3b}, 0x4}, {{&(0x7f00000048c0)=@tipc=@id, 0x80, &(0x7f0000004b80)=[{&(0x7f0000004940)=""/219, 0xdb}, {&(0x7f0000004a40)=""/210, 0xd2}, {&(0x7f0000004b40)=""/46, 0x2e}], 0x3, &(0x7f0000004bc0)=""/173, 0xad}, 0xef36}], 0x5, 0x1, &(0x7f0000004dc0)={0x0, 0x989680}) lseek(0xffffffffffffffff, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_CPUID2(0xffffffffffffffff, 0xc008ae91, &(0x7f0000000400)={0x6, 0x0, [{}, {}, {}, {}, {}, {}]}) close(0xffffffffffffffff) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) 07:54:45 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000005c0)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000240)='.^\x00', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24000000) syz_genetlink_get_family_id$net_dm(&(0x7f0000000100)='NET_DM\x00') ioctl$LOOP_CLR_FD(r0, 0x4c01) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x2000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x5, 0x800000007, 0x8001}, 0x3c) ioctl$BLKGETSIZE64(r0, 0x80081272, &(0x7f0000000280)) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x4, 0x10000) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x13) pipe(&(0x7f0000000040)) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r2, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) r3 = accept$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) recvmmsg(r3, &(0x7f0000004c80)=[{{&(0x7f00000002c0)=@ipx, 0x80, &(0x7f0000003a40)=[{&(0x7f0000000500)=""/178, 0xb2}, {&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000001780)=""/4096, 0x1000}, {0x0}, {&(0x7f0000002800)=""/131, 0x83}, {&(0x7f00000028c0)=""/186, 0xba}, {&(0x7f0000002980)=""/4096, 0x1000}, {&(0x7f0000003980)=""/192, 0xc0}], 0x8}, 0x8}, {{&(0x7f0000003b00)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f0000003f40)=[{&(0x7f0000003b80)=""/244, 0xf4}, {&(0x7f0000003c80)=""/51, 0x33}, {&(0x7f0000003cc0)=""/217, 0xd9}, {&(0x7f0000003dc0)=""/214, 0xd6}, {&(0x7f0000003ec0)=""/31, 0x1f}, {&(0x7f0000003f00)=""/11, 0xb}], 0x6, &(0x7f0000003fc0)=""/195, 0xc3}, 0x7}, {{&(0x7f00000040c0)=@sco, 0x80, &(0x7f0000004280)=[{&(0x7f0000004140)=""/175, 0xaf}, {&(0x7f0000004200)=""/24, 0x18}, {&(0x7f0000004240)=""/33, 0x21}], 0x3, &(0x7f00000042c0)=""/113, 0x71}, 0x69}, {{&(0x7f0000004340)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @initdev}}, 0x80, &(0x7f0000004800)=[{&(0x7f00000043c0)=""/220, 0xdc}, {&(0x7f00000044c0)=""/218, 0xda}, {&(0x7f00000045c0)=""/131, 0x83}, {&(0x7f0000004680)}, {&(0x7f00000046c0)=""/30, 0x1e}, {&(0x7f0000004700)=""/235, 0xeb}], 0x6, &(0x7f0000004880)=""/59, 0x3b}, 0x4}, {{&(0x7f00000048c0)=@tipc=@id, 0x80, &(0x7f0000004b80)=[{&(0x7f0000004940)=""/219, 0xdb}, {&(0x7f0000004a40)=""/210, 0xd2}, {&(0x7f0000004b40)=""/46, 0x2e}], 0x3, &(0x7f0000004bc0)=""/173, 0xad}, 0xef36}], 0x5, 0x1, &(0x7f0000004dc0)={0x0, 0x989680}) lseek(0xffffffffffffffff, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_CPUID2(0xffffffffffffffff, 0xc008ae91, &(0x7f0000000400)={0x6, 0x0, [{}, {}, {}, {}, {}, {}]}) close(0xffffffffffffffff) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) 07:54:46 executing program 3: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000005c0)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000240)='.^\x00', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24000000) syz_genetlink_get_family_id$net_dm(&(0x7f0000000100)='NET_DM\x00') ioctl$LOOP_CLR_FD(r0, 0x4c01) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x2000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x5, 0x800000007, 0x8001}, 0x3c) ioctl$BLKGETSIZE64(r0, 0x80081272, &(0x7f0000000280)) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x4, 0x10000) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x13) pipe(&(0x7f0000000040)) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r2, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) r3 = accept$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) recvmmsg(r3, &(0x7f0000004c80)=[{{&(0x7f00000002c0)=@ipx, 0x80, &(0x7f0000003a40)=[{&(0x7f0000000500)=""/178, 0xb2}, {&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000001780)=""/4096, 0x1000}, {0x0}, {&(0x7f0000002800)=""/131, 0x83}, {&(0x7f00000028c0)=""/186, 0xba}, {&(0x7f0000002980)=""/4096, 0x1000}, {&(0x7f0000003980)=""/192, 0xc0}], 0x8}, 0x8}, {{&(0x7f0000003b00)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f0000003f40)=[{&(0x7f0000003b80)=""/244, 0xf4}, {&(0x7f0000003c80)=""/51, 0x33}, {&(0x7f0000003cc0)=""/217, 0xd9}, {&(0x7f0000003dc0)=""/214, 0xd6}, {&(0x7f0000003ec0)=""/31, 0x1f}, {&(0x7f0000003f00)=""/11, 0xb}], 0x6, &(0x7f0000003fc0)=""/195, 0xc3}, 0x7}, {{&(0x7f00000040c0)=@sco, 0x80, &(0x7f0000004280)=[{&(0x7f0000004140)=""/175, 0xaf}, {&(0x7f0000004200)=""/24, 0x18}, {&(0x7f0000004240)=""/33, 0x21}], 0x3, &(0x7f00000042c0)=""/113, 0x71}, 0x69}, {{&(0x7f0000004340)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @initdev}}, 0x80, &(0x7f0000004800)=[{&(0x7f00000043c0)=""/220, 0xdc}, {&(0x7f00000044c0)=""/218, 0xda}, {&(0x7f00000045c0)=""/131, 0x83}, {&(0x7f0000004680)}, {&(0x7f00000046c0)=""/30, 0x1e}, {&(0x7f0000004700)=""/235, 0xeb}], 0x6, &(0x7f0000004880)=""/59, 0x3b}, 0x4}, {{&(0x7f00000048c0)=@tipc=@id, 0x80, &(0x7f0000004b80)=[{&(0x7f0000004940)=""/219, 0xdb}, {&(0x7f0000004a40)=""/210, 0xd2}, {&(0x7f0000004b40)=""/46, 0x2e}], 0x3, &(0x7f0000004bc0)=""/173, 0xad}, 0xef36}], 0x5, 0x1, &(0x7f0000004dc0)={0x0, 0x989680}) lseek(0xffffffffffffffff, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_CPUID2(0xffffffffffffffff, 0xc008ae91, &(0x7f0000000400)={0x6, 0x0, [{}, {}, {}, {}, {}, {}]}) close(0xffffffffffffffff) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) 07:54:46 executing program 5: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000005c0)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000240)='.^\x00', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24000000) syz_genetlink_get_family_id$net_dm(&(0x7f0000000100)='NET_DM\x00') ioctl$LOOP_CLR_FD(r0, 0x4c01) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x2000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x5, 0x800000007, 0x8001}, 0x3c) ioctl$BLKGETSIZE64(r0, 0x80081272, &(0x7f0000000280)) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x4, 0x10000) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x13) pipe(&(0x7f0000000040)) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r2, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) r3 = accept$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) recvmmsg(r3, &(0x7f0000004c80)=[{{&(0x7f00000002c0)=@ipx, 0x80, &(0x7f0000003a40)=[{&(0x7f0000000500)=""/178, 0xb2}, {&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000001780)=""/4096, 0x1000}, {0x0}, {&(0x7f0000002800)=""/131, 0x83}, {&(0x7f00000028c0)=""/186, 0xba}, {&(0x7f0000002980)=""/4096, 0x1000}, {&(0x7f0000003980)=""/192, 0xc0}], 0x8}, 0x8}, {{&(0x7f0000003b00)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f0000003f40)=[{&(0x7f0000003b80)=""/244, 0xf4}, {&(0x7f0000003c80)=""/51, 0x33}, {&(0x7f0000003cc0)=""/217, 0xd9}, {&(0x7f0000003dc0)=""/214, 0xd6}, {&(0x7f0000003ec0)=""/31, 0x1f}, {&(0x7f0000003f00)=""/11, 0xb}], 0x6, &(0x7f0000003fc0)=""/195, 0xc3}, 0x7}, {{&(0x7f00000040c0)=@sco, 0x80, &(0x7f0000004280)=[{&(0x7f0000004140)=""/175, 0xaf}, {&(0x7f0000004200)=""/24, 0x18}, {&(0x7f0000004240)=""/33, 0x21}], 0x3, &(0x7f00000042c0)=""/113, 0x71}, 0x69}, {{&(0x7f0000004340)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @initdev}}, 0x80, &(0x7f0000004800)=[{&(0x7f00000043c0)=""/220, 0xdc}, {&(0x7f00000044c0)=""/218, 0xda}, {&(0x7f00000045c0)=""/131, 0x83}, {&(0x7f0000004680)}, {&(0x7f00000046c0)=""/30, 0x1e}, {&(0x7f0000004700)=""/235, 0xeb}], 0x6, &(0x7f0000004880)=""/59, 0x3b}, 0x4}, {{&(0x7f00000048c0)=@tipc=@id, 0x80, &(0x7f0000004b80)=[{&(0x7f0000004940)=""/219, 0xdb}, {&(0x7f0000004a40)=""/210, 0xd2}, {&(0x7f0000004b40)=""/46, 0x2e}], 0x3, &(0x7f0000004bc0)=""/173, 0xad}, 0xef36}], 0x5, 0x1, &(0x7f0000004dc0)={0x0, 0x989680}) lseek(0xffffffffffffffff, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_CPUID2(0xffffffffffffffff, 0xc008ae91, &(0x7f0000000400)={0x6, 0x0, [{}, {}, {}, {}, {}, {}]}) close(0xffffffffffffffff) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) 07:54:46 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000005c0)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000240)='.^\x00', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24000000) syz_genetlink_get_family_id$net_dm(&(0x7f0000000100)='NET_DM\x00') ioctl$LOOP_CLR_FD(r0, 0x4c01) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x2000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x5, 0x800000007, 0x8001}, 0x3c) ioctl$BLKGETSIZE64(r0, 0x80081272, &(0x7f0000000280)) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x4, 0x10000) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x13) pipe(&(0x7f0000000040)) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r2, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) r3 = accept$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) recvmmsg(r3, &(0x7f0000004c80)=[{{&(0x7f00000002c0)=@ipx, 0x80, &(0x7f0000003a40)=[{&(0x7f0000000500)=""/178, 0xb2}, {&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000001780)=""/4096, 0x1000}, {0x0}, {&(0x7f0000002800)=""/131, 0x83}, {&(0x7f00000028c0)=""/186, 0xba}, {&(0x7f0000002980)=""/4096, 0x1000}, {&(0x7f0000003980)=""/192, 0xc0}], 0x8}, 0x8}, {{&(0x7f0000003b00)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f0000003f40)=[{&(0x7f0000003b80)=""/244, 0xf4}, {&(0x7f0000003c80)=""/51, 0x33}, {&(0x7f0000003cc0)=""/217, 0xd9}, {&(0x7f0000003dc0)=""/214, 0xd6}, {&(0x7f0000003ec0)=""/31, 0x1f}, {&(0x7f0000003f00)=""/11, 0xb}], 0x6, &(0x7f0000003fc0)=""/195, 0xc3}, 0x7}, {{&(0x7f00000040c0)=@sco, 0x80, &(0x7f0000004280)=[{&(0x7f0000004140)=""/175, 0xaf}, {&(0x7f0000004200)=""/24, 0x18}, {&(0x7f0000004240)=""/33, 0x21}], 0x3, &(0x7f00000042c0)=""/113, 0x71}, 0x69}, {{&(0x7f0000004340)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @initdev}}, 0x80, &(0x7f0000004800)=[{&(0x7f00000043c0)=""/220, 0xdc}, {&(0x7f00000044c0)=""/218, 0xda}, {&(0x7f00000045c0)=""/131, 0x83}, {&(0x7f0000004680)}, {&(0x7f00000046c0)=""/30, 0x1e}, {&(0x7f0000004700)=""/235, 0xeb}], 0x6, &(0x7f0000004880)=""/59, 0x3b}, 0x4}, {{&(0x7f00000048c0)=@tipc=@id, 0x80, &(0x7f0000004b80)=[{&(0x7f0000004940)=""/219, 0xdb}, {&(0x7f0000004a40)=""/210, 0xd2}, {&(0x7f0000004b40)=""/46, 0x2e}], 0x3, &(0x7f0000004bc0)=""/173, 0xad}, 0xef36}], 0x5, 0x1, &(0x7f0000004dc0)={0x0, 0x989680}) lseek(0xffffffffffffffff, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_CPUID2(0xffffffffffffffff, 0xc008ae91, &(0x7f0000000400)={0x6, 0x0, [{}, {}, {}, {}, {}, {}]}) close(0xffffffffffffffff) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) 07:54:46 executing program 4: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000005c0)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000240)='.^\x00', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24000000) syz_genetlink_get_family_id$net_dm(&(0x7f0000000100)='NET_DM\x00') ioctl$LOOP_CLR_FD(r0, 0x4c01) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x2000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x5, 0x800000007, 0x8001}, 0x3c) ioctl$BLKGETSIZE64(r0, 0x80081272, &(0x7f0000000280)) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x4, 0x10000) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB="1300200065ff30795329239483daff5f2467a9deff21d171df3054a47727a647d724e2268e418d8f8d99ec5204dc39c9c144f8e55be6b90efe8d0e6032fda555e3c0ff534e789c1e56e29ec437819ce40e9c2145c76eec4d4e8b7edd6c3bd37131b8cf1413d5c94e69b08190512c803447295baf456d2fff0b60702154e37f0b939fdca9432ce6e986c81214d18ddb2108c66bac3a2ee19fa71a2233d2e8f12df49b6cffba4ba1fd4a591a5f308c755692643d11ba47baed5fbeffd884714a644a36a5b00528d973e8a283249643ead30ff359b653bc40e22764a7f97c9632c6009f324918b124ea074a4a3a0f83a2a452dcf13aa4ac01785f947cadb57f48f5e33b7b4364a731b097dd7ad4b8f7836431d04ce1236b7f05b6babdfb265ae93b8b64"], 0x13) pipe(&(0x7f0000000040)) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r2, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) r3 = accept$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) recvmmsg(r3, &(0x7f0000004c80)=[{{&(0x7f00000002c0)=@ipx, 0x80, &(0x7f0000003a40)=[{&(0x7f0000000500)=""/178, 0xb2}, {&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000001780)=""/4096, 0x1000}, {0x0}, {&(0x7f0000002800)=""/131, 0x83}, {&(0x7f00000028c0)=""/186, 0xba}, {&(0x7f0000002980)=""/4096, 0x1000}, {&(0x7f0000003980)=""/192, 0xc0}], 0x8}, 0x8}, {{&(0x7f0000003b00)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f0000003f40)=[{&(0x7f0000003b80)=""/244, 0xf4}, {&(0x7f0000003c80)=""/51, 0x33}, {&(0x7f0000003cc0)=""/217, 0xd9}, {&(0x7f0000003dc0)=""/214, 0xd6}, {&(0x7f0000003ec0)=""/31, 0x1f}, {&(0x7f0000003f00)=""/11, 0xb}], 0x6, &(0x7f0000003fc0)=""/195, 0xc3}, 0x7}, {{&(0x7f00000040c0)=@sco, 0x80, &(0x7f0000004280)=[{&(0x7f0000004140)=""/175, 0xaf}, {&(0x7f0000004200)=""/24, 0x18}, {&(0x7f0000004240)=""/33, 0x21}], 0x3, &(0x7f00000042c0)=""/113, 0x71}, 0x69}, {{&(0x7f0000004340)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @initdev}}, 0x80, &(0x7f0000004800)=[{&(0x7f00000043c0)=""/220, 0xdc}, {&(0x7f00000044c0)=""/218, 0xda}, {&(0x7f00000045c0)=""/131, 0x83}, {&(0x7f0000004680)}, {&(0x7f00000046c0)=""/30, 0x1e}, {&(0x7f0000004700)=""/235, 0xeb}], 0x6, &(0x7f0000004880)=""/59, 0x3b}, 0x4}, {{&(0x7f00000048c0)=@tipc=@id, 0x80, &(0x7f0000004b80)=[{&(0x7f0000004940)=""/219, 0xdb}, {&(0x7f0000004a40)=""/210, 0xd2}, {&(0x7f0000004b40)=""/46, 0x2e}], 0x3, &(0x7f0000004bc0)=""/173, 0xad}, 0xef36}], 0x5, 0x1, &(0x7f0000004dc0)={0x0, 0x989680}) lseek(0xffffffffffffffff, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_CPUID2(0xffffffffffffffff, 0xc008ae91, &(0x7f0000000400)={0x6, 0x0, [{}, {}, {}, {}, {}, {}]}) close(0xffffffffffffffff) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) 07:54:46 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000005c0)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000240)='.^\x00', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24000000) syz_genetlink_get_family_id$net_dm(&(0x7f0000000100)='NET_DM\x00') ioctl$LOOP_CLR_FD(r0, 0x4c01) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x2000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x5, 0x800000007, 0x8001}, 0x3c) ioctl$BLKGETSIZE64(r0, 0x80081272, &(0x7f0000000280)) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x4, 0x10000) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x13) pipe(&(0x7f0000000040)) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r2, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) r3 = accept$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) recvmmsg(r3, &(0x7f0000004c80)=[{{&(0x7f00000002c0)=@ipx, 0x80, &(0x7f0000003a40)=[{&(0x7f0000000500)=""/178, 0xb2}, {&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000001780)=""/4096, 0x1000}, {0x0}, {&(0x7f0000002800)=""/131, 0x83}, {&(0x7f00000028c0)=""/186, 0xba}, {&(0x7f0000002980)=""/4096, 0x1000}, {&(0x7f0000003980)=""/192, 0xc0}], 0x8}, 0x8}, {{&(0x7f0000003b00)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f0000003f40)=[{&(0x7f0000003b80)=""/244, 0xf4}, {&(0x7f0000003c80)=""/51, 0x33}, {&(0x7f0000003cc0)=""/217, 0xd9}, {&(0x7f0000003dc0)=""/214, 0xd6}, {&(0x7f0000003ec0)=""/31, 0x1f}, {&(0x7f0000003f00)=""/11, 0xb}], 0x6, &(0x7f0000003fc0)=""/195, 0xc3}, 0x7}, {{&(0x7f00000040c0)=@sco, 0x80, &(0x7f0000004280)=[{&(0x7f0000004140)=""/175, 0xaf}, {&(0x7f0000004200)=""/24, 0x18}, {&(0x7f0000004240)=""/33, 0x21}], 0x3, &(0x7f00000042c0)=""/113, 0x71}, 0x69}, {{&(0x7f0000004340)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @initdev}}, 0x80, &(0x7f0000004800)=[{&(0x7f00000043c0)=""/220, 0xdc}, {&(0x7f00000044c0)=""/218, 0xda}, {&(0x7f00000045c0)=""/131, 0x83}, {&(0x7f0000004680)}, {&(0x7f00000046c0)=""/30, 0x1e}, {&(0x7f0000004700)=""/235, 0xeb}], 0x6, &(0x7f0000004880)=""/59, 0x3b}, 0x4}, {{&(0x7f00000048c0)=@tipc=@id, 0x80, &(0x7f0000004b80)=[{&(0x7f0000004940)=""/219, 0xdb}, {&(0x7f0000004a40)=""/210, 0xd2}, {&(0x7f0000004b40)=""/46, 0x2e}], 0x3, &(0x7f0000004bc0)=""/173, 0xad}, 0xef36}], 0x5, 0x1, &(0x7f0000004dc0)={0x0, 0x989680}) lseek(0xffffffffffffffff, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_CPUID2(0xffffffffffffffff, 0xc008ae91, &(0x7f0000000400)={0x6, 0x0, [{}, {}, {}, {}, {}, {}]}) close(0xffffffffffffffff) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) 07:54:46 executing program 2: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000005c0)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000240)='.^\x00', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24000000) syz_genetlink_get_family_id$net_dm(&(0x7f0000000100)='NET_DM\x00') ioctl$LOOP_CLR_FD(r0, 0x4c01) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x2000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x5, 0x800000007, 0x8001}, 0x3c) ioctl$BLKGETSIZE64(r0, 0x80081272, &(0x7f0000000280)) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x4, 0x10000) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x13) pipe(&(0x7f0000000040)) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r2, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) r3 = accept$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) recvmmsg(r3, &(0x7f0000004c80)=[{{&(0x7f00000002c0)=@ipx, 0x80, &(0x7f0000003a40)=[{&(0x7f0000000500)=""/178, 0xb2}, {&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000001780)=""/4096, 0x1000}, {0x0}, {&(0x7f0000002800)=""/131, 0x83}, {&(0x7f00000028c0)=""/186, 0xba}, {&(0x7f0000002980)=""/4096, 0x1000}, {&(0x7f0000003980)=""/192, 0xc0}], 0x8}, 0x8}, {{&(0x7f0000003b00)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f0000003f40)=[{&(0x7f0000003b80)=""/244, 0xf4}, {&(0x7f0000003c80)=""/51, 0x33}, {&(0x7f0000003cc0)=""/217, 0xd9}, {&(0x7f0000003dc0)=""/214, 0xd6}, {&(0x7f0000003ec0)=""/31, 0x1f}, {&(0x7f0000003f00)=""/11, 0xb}], 0x6, &(0x7f0000003fc0)=""/195, 0xc3}, 0x7}, {{&(0x7f00000040c0)=@sco, 0x80, &(0x7f0000004280)=[{&(0x7f0000004140)=""/175, 0xaf}, {&(0x7f0000004200)=""/24, 0x18}, {&(0x7f0000004240)=""/33, 0x21}], 0x3, &(0x7f00000042c0)=""/113, 0x71}, 0x69}, {{&(0x7f0000004340)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @initdev}}, 0x80, &(0x7f0000004800)=[{&(0x7f00000043c0)=""/220, 0xdc}, {&(0x7f00000044c0)=""/218, 0xda}, {&(0x7f00000045c0)=""/131, 0x83}, {&(0x7f0000004680)}, {&(0x7f00000046c0)=""/30, 0x1e}, {&(0x7f0000004700)=""/235, 0xeb}], 0x6, &(0x7f0000004880)=""/59, 0x3b}, 0x4}, {{&(0x7f00000048c0)=@tipc=@id, 0x80, &(0x7f0000004b80)=[{&(0x7f0000004940)=""/219, 0xdb}, {&(0x7f0000004a40)=""/210, 0xd2}, {&(0x7f0000004b40)=""/46, 0x2e}], 0x3, &(0x7f0000004bc0)=""/173, 0xad}, 0xef36}], 0x5, 0x1, &(0x7f0000004dc0)={0x0, 0x989680}) lseek(0xffffffffffffffff, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_CPUID2(0xffffffffffffffff, 0xc008ae91, &(0x7f0000000400)={0x6, 0x0, [{}, {}, {}, {}, {}, {}]}) close(0xffffffffffffffff) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) [ 82.625001][ T7142] ================================================================== [ 82.633223][ T7142] BUG: KCSAN: data-race in generic_fillattr / shmem_mknod [ 82.640328][ T7142] [ 82.642658][ T7142] read to 0xffff8881268776c0 of 8 bytes by task 7141 on cpu 1: [ 82.650192][ T7142] generic_fillattr+0xf5/0x1e0 [ 82.654948][ T7142] vfs_getattr_nosec+0x160/0x170 [ 82.659872][ T7142] vfs_getattr+0x54/0x70 [ 82.664106][ T7142] vfs_statx+0x102/0x190 [ 82.668337][ T7142] __do_sys_newstat+0x51/0xb0 [ 82.673009][ T7142] __x64_sys_newstat+0x3a/0x50 [ 82.677770][ T7142] do_syscall_64+0xcc/0x370 [ 82.682278][ T7142] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 82.688157][ T7142] [ 82.690486][ T7142] write to 0xffff8881268776c0 of 8 bytes by task 7142 on cpu 0: [ 82.698114][ T7142] shmem_mknod+0x112/0x180 [ 82.702520][ T7142] shmem_create+0x34/0x50 [ 82.706847][ T7142] path_openat+0x2b4d/0x36e0 [ 82.711426][ T7142] do_filp_open+0x11e/0x1b0 [ 82.715918][ T7142] do_sys_open+0x3b3/0x4f0 [ 82.720325][ T7142] __x64_sys_open+0x55/0x70 [ 82.724825][ T7142] do_syscall_64+0xcc/0x370 [ 82.729328][ T7142] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 82.735205][ T7142] [ 82.737518][ T7142] Reported by Kernel Concurrency Sanitizer on: [ 82.743664][ T7142] CPU: 0 PID: 7142 Comm: udevd Not tainted 5.4.0-rc3+ #0 [ 82.750672][ T7142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 82.760721][ T7142] ================================================================== [ 82.768773][ T7142] Kernel panic - not syncing: panic_on_warn set ... [ 82.775385][ T7142] CPU: 0 PID: 7142 Comm: udevd Not tainted 5.4.0-rc3+ #0 [ 82.782391][ T7142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 82.792442][ T7142] Call Trace: [ 82.795735][ T7142] dump_stack+0xf5/0x159 [ 82.799975][ T7142] panic+0x210/0x640 [ 82.803895][ T7142] ? vprintk_func+0x8d/0x140 [ 82.810508][ T7142] kcsan_report.cold+0xc/0x10 [ 82.815192][ T7142] __kcsan_setup_watchpoint+0x32e/0x4a0 [ 82.820741][ T7142] __tsan_write8+0x32/0x40 [ 82.825159][ T7142] shmem_mknod+0x112/0x180 [ 82.829577][ T7142] shmem_create+0x34/0x50 [ 82.833905][ T7142] ? shmem_mkdir+0x70/0x70 [ 82.838326][ T7142] path_openat+0x2b4d/0x36e0 [ 82.842933][ T7142] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 82.848820][ T7142] ? __kcsan_setup_watchpoint+0x6b/0x4a0 [ 82.854482][ T7142] do_filp_open+0x11e/0x1b0 [ 82.858991][ T7142] ? __alloc_fd+0x316/0x4c0 [ 82.863497][ T7142] do_sys_open+0x3b3/0x4f0 [ 82.867917][ T7142] __x64_sys_open+0x55/0x70 [ 82.872427][ T7142] do_syscall_64+0xcc/0x370 [ 82.876934][ T7142] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 82.883257][ T7142] RIP: 0033:0x7f288669c120 [ 82.887675][ T7142] Code: 48 8b 15 1b 4d 2b 00 f7 d8 64 89 02 83 c8 ff c3 90 90 90 90 90 90 90 90 90 90 83 3d d5 a4 2b 00 00 75 10 b8 02 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 31 c3 48 83 ec 08 e8 5e 8c 01 00 48 89 04 24 [ 82.907467][ T7142] RSP: 002b:00007ffcd17b02b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 82.915883][ T7142] RAX: ffffffffffffffda RBX: 000000000148a3f0 RCX: 00007f288669c120 [ 82.923881][ T7142] RDX: 00000000000001b6 RSI: 0000000000080241 RDI: 00007ffcd17b07a0 [ 82.931869][ T7142] RBP: 00007ffcd17b0330 R08: 0000000000000004 R09: 0000000000000001 [ 82.939837][ T7142] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000004 [ 82.947818][ T7142] R13: 0000000000420721 R14: 00007ffcd17b03a0 R15: 0000000000000001 [ 82.957272][ T7142] Kernel Offset: disabled [ 82.961592][ T7142] Rebooting in 86400 seconds..