529882c65f24b00"/307], &(0x7f0000000280)=""/237, 0x37, 0xed, 0x1}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x15, 0x10, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0x0, 0x1}, 0x40) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)=""/237, 0x37, 0xed, 0x1}, 0x20) r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r5) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f00000000c0)={0x3, 0xa, 0x4, 0x2, 0x3, {0x77359400}, {0x5, 0x1, 0x81, 0x3, 0x0, 0x6d, "4b90e794"}, 0x2, 0x2, @fd=r5, 0x615, 0x0, r3}) r7 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r7, &(0x7f0000000040)=ANY=[@ANYBLOB="3a258211f663a7724bdea56272274814a3f23327edb11e2daf85534aa6f5083067b0248878f07a91df1acc99e6643d3bf349be3cc11cbf51b4f7bff4dbe9c210351ccaefebd642492cfc5ead68cf6a050600000000000000"], 0x5c) sendfile(r7, r7, &(0x7f0000000000), 0x8080fffffffe) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000640)={{{@in6, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@remote}}, &(0x7f0000000200)=0xe8) recvfrom$packet(r6, &(0x7f0000000180)=""/117, 0x75, 0x40002160, &(0x7f0000000240)={0x11, 0xd, r8, 0x1, 0x7, 0x6, @remote}, 0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x15, 0x10, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r4, 0x0, 0x1}, 0x40) r9 = dup2(r2, r4) ioctl$TIOCL_BLANKSCREEN(r9, 0x541c, &(0x7f0000000000)) 10:09:06 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) ioctl$TIOCSTI(r2, 0x5412, 0x800) clock_settime(0x3, &(0x7f0000000100)={0x77359400}) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) pipe2(&(0x7f00000000c0), 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="3a258211f663a7724bdef6a53bfce1e775d7406272274814a3f23327edb11e2daf85534aa6f5083067b0248878f07a91df1acc99e6643d3baad0a9f349be3cc11cbf51b4f7bff473e9c200351ccaefebd642492cfc5ead68cf6a0506"], 0x5c) sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) ioctl$RTC_WIE_OFF(r3, 0x7010) 10:09:06 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0x0) 10:09:06 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)=""/237, 0x37, 0xed, 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x15, 0x10, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r1, 0x0, 0x1}, 0x40) vmsplice(r1, &(0x7f0000000480)=[{&(0x7f00000000c0)="76aa6ca2024f0df71c09d14a96f9ba7638a49439a3ad7f5528eb15edf64a4073f9b3d9cf1f6f8677e91b439a3458962bccd07db9f711cb63a5e765e3ff91695c202fe4a627b59b121819efc40b173fbe043d95dabcfe09b147395be2b9db050c8bf75ef6e08a087ecdab5805f71335bf25195fa8b4246bef93e123db", 0x7c}, {&(0x7f0000000180)="a827f96d6a5c7b03184e32157221b4b91dad4b70d3a84a0f40b3bd66875ad4f87d44545da3a9f6fb17ea756e635530146c3a87c6bc2c9a8f6d6dbca4d32928cba68a293b9f425ae09b8d7ceecb8a6c6e450256a40c00d2a9be5f421d162d1ebbeaee3c7b1fbf6da8f6134c3f669028f714b151f4fddec3226f", 0x79}, {&(0x7f0000000200)="a1fc5a33e7d6f77a6abff7a0c468d544c9ae729f7d3ebf28acad504212d0bcf2580f9dffd927317f5e2fc50cef258e441d930365f7b7f24227264201b80b8a56ee9c02d56862f3fab59ee23b6748087dd66ab549d16c9c9cee", 0x59}, {&(0x7f0000000340)="c5d9f62c7ddc41e2c9874bcbeb5e01df588c35f765fddb3076cf3305126d2e3d542809b1a5a4b45a046a4fe83e00c1052d2834f4872bb8966f01f76aa9714b31e7106bd468ee127dc761167f53c5819e41d24f14336c89217e74a7a4f15e604c5898ca612f65489527ddf56ffb0a7461edfeaa423643614e8de87773d90a307c7f7289b4b7", 0x85}, {&(0x7f0000000400)="f7920e83154f7dfe05dd525cadb465cb3084edeb8bfb49f6831710fee2a812060ea1632e660d4a2944a6e23410b3967bed7e932f365ec66cbe2ff55d7f1399965e1e39b43e82fc489d39f72bbaa8de1587604e078f53848af22dddd2749b3522f436e89ab4371b5f4a6e8be1388daf9a2c94ff8ee8561c3b5442143f68", 0x7d}], 0x5, 0x10) r2 = syz_open_pts(r0, 0x0) readv(r2, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x8, '\x00\x00\x00@\x00'}) 10:09:06 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f00000001c0)) rt_sigqueueinfo(r2, 0x9, &(0x7f0000000340)={0xf, 0x6, 0x800200}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r3, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="3a258211f663a7724bdef6a53bfce1e775d7406272274814a3f23327edb11e2daf85534aa6f5083067b0248878f07a91df1acc99e6643d3baad0a9f349be3cc11cbf51b4f7bff473e9c200351ccaefebd642492cfc5ead68cf6a0506"], 0x5c) sendfile(r4, r4, &(0x7f0000000000), 0x8080fffffffe) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f0000000000)={0x40000, 0x0, [0x0, 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x2000]}) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r4, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x9}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r5, 0x400, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4048840) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="26bba5ca3b729831bc655980cae67ebb55dcfc343557c9a94cbc4b8cf018c24e83a285c741d2d0335f87b2f0de47bcb46771a5e0bd157de644c2a353f43293c5ab0a980998beb705caff4624a65f60041e3bb350c14aa4c3c2a91fff2c8e853651152e4eddfb592c6061ffa76c1ab0b26ef3ca3d88651e2f733f32a2e553dccccf889911eb825247e0669d755f59b351bcf1dd3a33f5157b70171cc55902ae737600babab58fd35e20953034d9879dc9f82a9f6ddafa3fffdcb2", 0xba}], 0x1}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 10:09:07 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0x0) 10:09:07 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000240)='/dev/cachefiles\x00', 0x444a00, 0x0) ioctl$ION_IOC_HEAP_QUERY(r1, 0xc0184908, &(0x7f00000003c0)={0x34, 0x0, &(0x7f0000000380)}) r2 = syz_open_pts(r0, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="3a258211f663a7724bdef6a53bfce1e775d7406272274814a3f23327edb11e2daf85534aa6f5083067b0248878f07a91df1acc99e6643d3baad0a9f349be3cc11cbf51b4f7bff473e9c200351ccaefebd642492cfc5ead68cf6a0506"], 0x5c) sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, 0x0, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000010", @ANYRES32=r6, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200080000001028e6c467144d2fa833"], 0x5}}, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x2c, r4, 0x601, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x14}, 0x4000000) readv(r2, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) 10:09:07 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0x0) 10:09:07 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) r1 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x7fff, 0x40000) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)=""/237, 0x37, 0xed, 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x15, 0x10, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0x0, 0x1}, 0x40) write$binfmt_elf32(r2, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x81, 0x6, 0x0, 0x2, 0x6, 0x0, 0x2d4, 0x38, 0x3d3, 0x9, 0x2, 0x20, 0x2, 0x7ff, 0xe781, 0xcca}, [{0x2, 0x73bf, 0x8, 0xfffffffd, 0x6b7, 0xffff, 0x8000, 0x9}, {0x60000000, 0x6, 0x88f, 0xfffffffe, 0x1, 0x7ff, 0xf06, 0x6}], "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", [[], [], [], [], [], [], []]}, 0x873) getsockopt$EBT_SO_GET_INIT_ENTRIES(r1, 0x0, 0x83, &(0x7f0000000340)={'filter\x00', 0x0, 0x4, 0xf3, [], 0x4, &(0x7f00000000c0)=[{}, {}, {}, {}], &(0x7f0000000180)=""/243}, &(0x7f0000000100)=0x78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r3 = syz_open_pts(r0, 0x0) readv(r3, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) ioctl$TCSETSW(r3, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) 10:09:08 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000280), 0x4) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000005c0)={r4, @in={{0x2, 0x0, @rand_addr=0x400}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x951, 0x0, 0x0, 0x5, 0x3, 0x4]}, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000100)={r4, @in={{0x2, 0x0, @remote}}}, &(0x7f0000000040)=0x90) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000140)={r4, 0x80}, 0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000000)={r4, 0x1, 0x2ee, 0x8, 0x4, 0x7}, 0x14) 10:09:08 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0x0) 10:09:08 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4]}) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)=""/237, 0x37, 0xed, 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x15, 0x10, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r3, 0x0, 0x1}, 0x40) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)=""/237, 0x37, 0xed, 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x15, 0x10, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r4, 0x0, 0x1}, 0x40) r5 = dup3(r3, r4, 0x0) sendmsg$inet_sctp(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="26bba5ca3b729831bc655980cae67eab55dcfc343557c9a94cbc4b8cf018c24e83a285c741da464966eab2f0de47bcb46771a5e0bd157de644c2a353f43293c5ab0a980998beb705caff4624a65f60041e3bb350c14aa4c3c2a91fff2c8e853651152e4eddfb592c6061ef4baa98349693ffa76c1ab0b26ef3ca3d88651e2f733f32a2e554dccccf889911fa825247e0669d755f59b351bcf1dd3a33f5157b7017eddd5902ae737600babab58fd35e60d63034d9879dc9f82a9f", 0xba}], 0x1}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:09:08 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4]}) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="26bba5ca3b729831bc655980cae67ebb55dcfc343557c9a94cbc4b8cf018c24e83a285c741d2d0335f87b2f0de47bcb46771a5e0bd157de644c2a353f43293c5ab0a980998beb705caff4624a65f60041e3bb350c14aa4c3c2a91fff2c8e853651152e4eddfb592c6061ffa76c1ab0b26ef3ca3d88651e2f733f32a2e553dccccf889911eb825247e0669d755f59b351bcf1dd3a33f5157b70171cc55902ae737600babab58fd35e20953034d9879dc9f82a9f6ddafa3fffdcb2", 0xba}], 0x1}, 0x0) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x100, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="2401000000010108000000000000000000000000010000000000000414000f80080003400000e5eb0600000000000000a80001802c00018014000300fe800000a3000000000000000000004314000400fe8800000000000000000000000000010c000280050001008800000006000340000200000c00028005000100210000001400018008000100ac1414aa08000200ac14141f2c00018014000300fe88000000000000000000000000010114000400fe1d6b8708241cedb48000000000000000000000000000bb0c000280050001002f0000000c00028005000100840000000600124000020000440010800800014000000003e7ff03400001000008000340ffffffe10800024000000003080002400000800008000140f00000000800014000000d1a0800024080000000"], 0x124}, 0x1, 0x0, 0x0, 0x44010}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:09:08 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000000)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4]}) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="26bba5ca3b729831bc655980cae67ebb55dcfc343557c9a94cbc4b8cf018c24e83a285c741d2d0335f87b2f0de47bcb46771a5e0bd157de644c2a353f43293c5ab0a980998beb705caff4624a65f60041e3bb350c14aa4c3c2a91fff2c8e853651152e4eddfb592c6061ffa76c1ab0b26ef3ca3d88651e2f733f32a2e553dccccf889911eb825247e0669d755f59b351bcf1dd3a33f5157b70171cc55902ae737600babab58fd35e20953034d9879dc9f82a9f6ddafa3fffdcb2", 0xba}], 0x1}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:09:08 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000240)='/dev/cachefiles\x00', 0x444a00, 0x0) ioctl$ION_IOC_HEAP_QUERY(r1, 0xc0184908, &(0x7f00000003c0)={0x34, 0x0, &(0x7f0000000380)}) r2 = syz_open_pts(r0, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="3a258211f663a7724bdef6a53bfce1e775d7406272274814a3f23327edb11e2daf85534aa6f5083067b0248878f07a91df1acc99e6643d3baad0a9f349be3cc11cbf51b4f7bff473e9c200351ccaefebd642492cfc5ead68cf6a0506"], 0x5c) sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, 0x0, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000010", @ANYRES32=r6, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200080000001028e6c467144d2fa833"], 0x5}}, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x2c, r4, 0x601, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x14}, 0x4000000) readv(r2, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) 10:09:08 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0x0) 10:09:08 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4]}) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000010", @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200080000001028e6c467144d2fa833"], 0x5}}, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, 0x0, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000010", @ANYRES32=r6, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200080000001028e6c467144d2fa833"], 0x5}}, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, 0x0, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000010", @ANYRES32=r8, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200080000001028e6c467144d2fa833"], 0x5}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x94, 0x0, 0x308, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4044083}, 0x4800) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="26bba5ca3b729831bc655980cae67ebb55dcfc343557c9a94cbc4b8cf018c24e83a285c741d2d0335f87b2f0de47bcb46771a5e0bd157de644c2a353f43293c5ab0a980998beb705caff4624a65f60041e3bb350c14aa4c3c2a91fff2c8e853651152e4eddfb592c6061ffa76c1ab0b26ef3ca3d88651e2f733f32a2e553dccccf889911eb825247e0669d755f59b351bcf1dd3a33f5157b70171cc55902ae737600babab58fd35e20953034d9879dc9f82a9f6ddafa3fffdcb2", 0xba}], 0x1}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:09:08 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x80000000040a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) 10:09:09 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0x0) 10:09:09 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x2000c0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4]}) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r3) recvmsg$can_j1939(r3, &(0x7f00000008c0)={&(0x7f0000000040)=@pptp={0x18, 0x2, {0x0, @empty}}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000180)=""/70, 0x46}, {&(0x7f0000000300)=""/233, 0xe9}, {&(0x7f0000000440)=""/154, 0x9a}, {&(0x7f0000000500)=""/218, 0xda}, {&(0x7f0000000600)=""/114, 0x72}, {&(0x7f0000000200)=""/51, 0x33}, {&(0x7f0000000680)=""/27, 0x1b}, {&(0x7f00000006c0)=""/239, 0xef}], 0x8, &(0x7f0000000840)=""/75, 0x4b}, 0x80010022) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="26bba5ca3b729831bc655980cae67ebb55dcfc343557c9a94cbc4b8cf018c24e83a285c741d2d0335f87b2f0de47bcb46771a5e0bd157de644c2a353f43293c5ab0a980998beb705caff4624a65f60041e3bb350c14aa4c3c2a91fff2c8e853651152e4eddfb592c6061ffa76c1ab0b26ef3ca3d88651e2f733f32a2e553dccccf889911eb825247e0669d755f59b351bcf1dd3a33f5157b70171cc55902ae737600babab58fd35e20953034d9879dc9f82a9f6ddafa3fffdcb2", 0xba}], 0x1}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:09:09 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="3a258211f663a7724bdef6a53bfce1e775d7406272274814a3f23327edb11e2daf85534aa6f5083067b0248878f07a91df1acc99e6643d3baad0a9f349be3cc11cbf51b4f7bff473e9c200351ccaefebd642492cfc5ead68cf6a0506"], 0x5c) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000280), 0x4) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000005c0)={r3, @in={{0x2, 0x0, @rand_addr=0x400}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x951, 0x0, 0x0, 0x5, 0x3, 0x4]}, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000100)={r3, @in={{0x2, 0x0, @remote}}}, &(0x7f0000000040)=0x90) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000140)={r3, 0x80}, 0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000100)={r3, 0x10001}, &(0x7f0000000180)=0x8) getsockopt$rose(r1, 0x104, 0x6, &(0x7f0000000000), &(0x7f00000000c0)=0x4) r4 = syz_open_pts(r0, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x5a, &(0x7f00000001c0)={&(0x7f0000000200)={0x24, 0x0, 0x711, 0x0, 0x0, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x54, 0x0, 0x100, 0x70bd27, 0x25dfdc01, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={[], 0x16}}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7f}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3f}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004048}, 0x10) readv(r4, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) ioctl$TCSETSW(r4, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) 10:09:09 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="3a258211f663a7724bdef6a53bfce1e775d7406272274814a3f23327edb11e2daf85534aa6f5083067b0248878f07a91df1acc99e6643d3baad0a9f349be3cc11cbf51b4f7bff473e9c200351ccaefebd642492cfc5ead68cf6a0506"], 0x5c) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2402080}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, r2, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_REG_RULES={0x24, 0x22, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7fff}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x2}]}, @NL80211_ATTR_REG_RULES={0x4}, @NL80211_ATTR_REG_RULES={0x14, 0x22, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7a94}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x9}]}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x7f}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x14) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x1010, r4, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4]}) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="26bba5ca3b729831bc655980cae67ebb55dcfc343557c9a94cbc4b8cf018c24e83a285c741d2d0335f87b2f0de47bcb46771a5e0bd157de644c2a353f43293c5ab0a980998beb705caff4624a65f60041e3bb350c14aa4c3c2a91fff2c8e853651152e4eddfb592c6061ffa76c1ab0b26ef3ca3d88651e2f733f32a2e553dccccf889911eb825247e0669d755f59b351bcf1dd3a33f5157b70171cc55902ae737600babab58fd35e20953034d9879dc9f82a9f6ddafa3fffdcb2", 0xba}], 0x1}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 10:09:09 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000280), 0x4) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000005c0)={r4, @in={{0x2, 0x0, @rand_addr=0x400}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x951, 0x0, 0x0, 0x5, 0x3, 0x4]}, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000100)={r4, @in={{0x2, 0x0, @remote}}}, &(0x7f0000000040)=0x90) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000140)={r4, 0x80}, 0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000000)={r4, 0x1, 0x2ee, 0x8, 0x4, 0x7}, 0x14) 10:09:09 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0x0) 10:09:10 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) 10:09:10 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0x0) 10:09:10 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)=@known='trusted.overlay.impure\x00', &(0x7f0000000300)=""/131, 0x83) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r3) ioctl$VIDIOC_SUBDEV_S_CROP(r3, 0xc038563c, &(0x7f0000000000)={0x1, 0x0, {0x2, 0x3, 0x0, 0x5}}) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4]}) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="26bba5ca3b729831bc655980cae67ebb55dcfc343557c9a94cbc4b8cf018c24e83a285c741d2d0335f87b2f0de47bcb46771a5e0bd157de644c2a353f43293c5ab0a980998beb705caff4624a65f60041e3bb350c14aa4c3c2a91fff2c8e853651152e4eddfb592c6061ffa76c1ab0b26ef3ca3d88651e2f733f32a2e553dccccf889911eb825247e0669d755f59b351bcf1dd3a33f5157b70171cc55902ae737600babab58fd35e20953034d9879dc9f82a9f6ddafa3fffdcb2", 0xba}], 0x1}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:09:10 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x218081, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r1 = syz_open_pts(r0, 0x0) read(r0, &(0x7f00000000c0)=""/90, 0x5a) readv(r1, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="3a258211f663a7724bdef6a53bfce1e775d7406272274814a3f23327edb11e2daf85534aa6f5083067b0248878f07a91df1acc99e6643d3baad0a9f349be3cc11cbf51b4f7bff473e9c200351ccaefebd642492cfc5ead68cf6a0506"], 0x5c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x8080fffffffe) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000240)={0xc, 0x8, 0xfa00, {&(0x7f0000000340)}}, 0x10) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="3a258211f663a7724bdef6a53bfce1e775d7406272274814a3f23327edb11e2daf85534aa6f5083067b0248878f07a91df1acc99e6643d3baad0a9f349be3cc11cbf51b4f7bff473e9c200351ccaefebd642492cfc5ead68cf6a0506"], 0x5c) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r4 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r4) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) timer_gettime(r3, &(0x7f0000000180)) ioctl$TCSBRK(r2, 0x5409, 0xf288) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x20, '\x00\x00\x00@\x00'}) 10:09:10 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="3a258211f663a7724bdef6a53bfce1e775d7406272274814a3f23327edb11e2daf85534aa6f5083067b0248878f07a91df1acc99e6643d3baad0a9f349be3cc11cbf51b4f7bff473e9c200351ccaefebd642492cfc5ead68cf6a0506"], 0x5c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x8080fffffffe) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x3e8, 0x400, 0x70bd28, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x800}, 0x1) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="3a258211f663a7724bdef6a53bfce1e775d7406272274814a3f23327edb11e2daf85534aa6f5083067b0248878f07a91df1acc99e6643d3baad0a9f349be3cc11cbf51b4f7bff473e9c200351ccaefebd642492cfc5ead68cf6a0506"], 0x5c) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000280), 0x4) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000005c0)={r4, @in={{0x2, 0x0, @rand_addr=0x400}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x951, 0x0, 0x0, 0x5, 0x3, 0x4]}, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000100)={r4, @in={{0x2, 0x0, @remote}}}, &(0x7f0000000040)=0x90) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000140)={r4, 0x80}, 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000000)={0x5, 0x4, 0x8008, 0x1, 0x0, 0x1, 0x6b2a, 0xfb9, r4}, &(0x7f00000000c0)=0x20) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) 10:09:10 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4]}) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)=""/237, 0x37, 0xed, 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x15, 0x10, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r3, 0x0, 0x1}, 0x40) r4 = pidfd_getfd(0xffffffffffffffff, r3, 0x0) sendmsg$inet_sctp(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000180)="26bba5ca3b729831bc655980cae67ebb55dcfc343557c9a94cc8ca9f8eca2800f9a285c741d2d1335f09b2f0de47bc1ca7a51c64b46771a5e0bd157de644c2a253f43293c5ab0a980998beb705caff4624a65f60041e3b08000000000000001fff2c8e853651152e4eddfb592c6061ffa76c1aadb26ef3ca3d88651e2f733f32a2e553dccccf889911eb825247e0669d755f59b351bcf1dd3a33f5157b70171cc55902ae737600babab58fd35e20953034d9879dc9f82a9f6ddafa3fffdcb2", 0xbf}], 0x1}, 0x8000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:09:10 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x0, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0x0) 10:09:10 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_NET_SET_BACKEND(r2, 0xaf02, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r3, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4]}) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="26bba5ca3b729831bc655980cae67ebb55dcfc343557c9a94cbc4b8cf018c24e83a285c741d2d0335f87b2f0de47bcb46771a5e0bd157de644c2a353f43293c5ab0a980998beb705caff4624a65f60041e3bb350c14aa4c3c2a91fff2c8e853651152e4eddfb592c6061ffa76c1ab0b26ef3ca3d88651e2f733f32a2e553dccccf889911eb825247e0669d755f59b351bcf1dd3a33f5157b70171cc55902ae737600babab58fd35e20953034d9879dc9f82a9f6ddafa3fffdcb2", 0xba}], 0x1}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="3a258211f663a7724bdef6a53bfce1e775d7406272274814a3f23327edb11e2daf85534aa6f5083067b0248878f07a91df1acc99e6643d3baad0a9f349be3cc11c6010bb9bce74bf51b4f7bff473e9c200351ccaefebd642492cfc5ead68cf6a0506d2e90217cd4a"], 0x5c) sendfile(r4, r4, &(0x7f0000000000), 0x8080fffffffe) r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r5) setsockopt$IP_VS_SO_SET_DEL(r5, 0x0, 0x484, &(0x7f0000000180)={0x4, @remote, 0x4e23, 0x3, 'nq\x00', 0x0, 0x2, 0x58}, 0x2c) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 10:09:11 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) readv(0xffffffffffffffff, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r5) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r5, 0x800443d2, &(0x7f00000001c0)={0x7, &(0x7f0000001700)=[{@none}, {}, {}, {@none}, {@none}, {@none}, {}]}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r6) syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f0000000100)='./file0\x00', 0x8, 0x6, &(0x7f0000001640)=[{&(0x7f0000000340)="0b865d33ead7866051d315ebba6e23a7bdd9af187809e637a35aee6ea77207bfb6a9b86e79b488c7f7f84499f5b9ec7cad94373294085d339a649a0dbb44deaaae1dc5f67fe5f1d0ee681bdbee1c3961bafc2e40ad017d2dcda79f2d0bc71ef1f2cbd4e9e09050813519d476b2c86fe4c27bedaa266a772eb528e0d62b949a1a6d1ace32c4bd90bf2b5a127cadd0bcda", 0x90, 0x1}, {&(0x7f0000000640)="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", 0x1000, 0x4}, {&(0x7f0000000180)="49d84018ce68363b627e10f5511346d3ca9eafe2ba", 0x15, 0x1}, {&(0x7f00000001c0), 0x0, 0x81}, {&(0x7f0000000400)="f303d9b054e9dd8674574deb42530586ad631653b6f2d5cebf8073ee4f036d3b4951d4b48692a7983f6ad63930d1ff21077ac22b865c7c026949d427def9b9249fa8d2f48cf24aa709a0921301eea4c0e2191eb7069cc434530dbe6fb8ff875ee901c590e97574aafbaa71f7c897278f7d", 0x71, 0x101}, {&(0x7f0000000480)="c37743c21a4c9bb64a49a6780fbbe28db79e8519f8133fd38f826a84b5d8188ab5a8aead2f93ae2bc7935cb1d9520b2f70f89927318d5e2c10a923619a0e0c7da64d0086c6e1c6e0a283e9364e2e02832ea7e9b612a8dd38113fd3cc9e74194d033ed40d157e5b23a58f674c33cef599754e9e81d4cbff9b516fc2c0a3a15ec94a9d0a9df2aea6ff41b7c4b485215042616e38b8815471ab4ff13c81796465d059673ccbc119032e8456bec6033287602d91c075a1d6fd5da9b68ff43bc66dde224b1373633676bc83487d3a9443c29f36aafa4aa0040c", 0xd7, 0x1}], 0x202000, &(0x7f0000000580)={[{@i_version='i_version'}], [{@func={'func', 0x3d, 'FILE_CHECK'}}, {@euid_eq={'euid', 0x3d, r3}}, {@fowner_eq={'fowner', 0x3d, r6}}]}) fchdir(r1) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, &(0x7f0000000000)={0x1, 'bridge0\x00', {}, 0x8000}) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) 10:09:11 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0x0) 10:09:11 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xfb, 0x800) inotify_add_watch(r1, &(0x7f00000000c0)='./file0\x00', 0x104) r2 = syz_open_pts(r0, 0x0) readv(r2, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) 10:09:11 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000000)={0x0, 0x0, [0x800000000, 0x400, 0x4, 0x0, 0x4, 0x2, 0x9]}) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="26bba5ca3b729831bc655980cae67ebb55dcfc343557c9a94cbc4b8cf018c24e83a285c741d2d0335f87b2f0de47bcb46771a5e0bd157de644c2a353f43293c5ab0a980998beb705caff4624a65f60041e3bb350c14aa4c3c2a91fff2c8e853651152e4eddfb592c6061ffa76c1ab0b26ef3ca3d88651e2f733f32a2e553dccccf889911eb825247e0669d755f59b351bcf1dd3a33f5157b70171cc55902ae737600babab58fd35e20953034d9879dc9f82a9f6ddafa3fffdcb2", 0xba}], 0x1}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:09:11 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x0, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0x0) 10:09:11 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000000)={0x0, 0x0, [0x800000000, 0x400, 0x4, 0x0, 0x4, 0x2, 0x9]}) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="26bba5ca3b729831bc655980cae67ebb55dcfc343557c9a94cbc4b8cf018c24e83a285c741d2d0335f87b2f0de47bcb46771a5e0bd157de644c2a353f43293c5ab0a980998beb705caff4624a65f60041e3bb350c14aa4c3c2a91fff2c8e853651152e4eddfb592c6061ffa76c1ab0b26ef3ca3d88651e2f733f32a2e553dccccf889911eb825247e0669d755f59b351bcf1dd3a33f5157b70171cc55902ae737600babab58fd35e20953034d9879dc9f82a9f6ddafa3fffdcb2", 0xba}], 0x1}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:09:11 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000000)={0x0, 0x0, [0x800000000, 0x400, 0x4, 0x0, 0x4, 0x2, 0x9]}) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="26bba5ca3b729831bc655980cae67ebb55dcfc343557c9a94cbc4b8cf018c24e83a285c741d2d0335f87b2f0de47bcb46771a5e0bd157de644c2a353f43293c5ab0a980998beb705caff4624a65f60041e3bb350c14aa4c3c2a91fff2c8e853651152e4eddfb592c6061ffa76c1ab0b26ef3ca3d88651e2f733f32a2e553dccccf889911eb825247e0669d755f59b351bcf1dd3a33f5157b70171cc55902ae737600babab58fd35e20953034d9879dc9f82a9f6ddafa3fffdcb2", 0xba}], 0x1}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:09:13 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000000)={0x0, 0x0, [0x800000000, 0x400, 0x4, 0x0, 0x4, 0x2, 0x9]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:09:13 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0xfe37ee8271a3a3b5, r2, 0xffffd000) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x20003, 0x0, [0xae5d, 0x0, 0x0, 0x0, 0x4]}) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="26bba5ca3b729831bc655980cae67ebb55dcfc343557c9a94cbc4b8cf018c24e83a285c741d2d0335f87b2f0de47bcb46771a5e0bd157de644c2a353f43293c5ab0a980998beb705caff4624a65f60041e3bb350c14aa4c3c2a91fff2c8e853651152e4eddfb592c6061ffa76c1ab0b26ef3ca3d88651e2f733f32a2e553dccccf889911eb825247e0669d755f59b351bcf1dd3a33f5157b70171cc55902ae737600babab58fd35e20953034d9879dc9f82a9f6ddafa3fffdcb2", 0xba}], 0x1}, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="3a258211f663a7724bdef6a53bfce1e775d7406272274814a3f23327edb11e2daf85534aa6f5083067b0248878f07a91df1acc99e6643d3baad0a9f349be3cc11cbf51b4f7bff473e9c200351ccaefebd642492cfc5ead68cf6a0506"], 0x5c) sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) write$UHID_SET_REPORT_REPLY(r3, &(0x7f0000000180)={0xe, {0x3, 0x7, 0x1, 0x9e, "e46f1316fa6b22745829a5ab6024896df02413ec893f16aedf861508d09cc4389ae69c669848b41f89729ddc551eb95202016ad6b76a96a768a824a969b7466b78a6267079e6cf8a09aeaa1594bf504b20b24fd658d125f5464b2f139b685ced3047235637b78a9e4c4eec7e95713e09587797078a15ed2f3b003e293b41b47bc998b55ba0497f1ef702d1cb2b38c5c2f308cb095bd86078a37302d7387f"}}, 0xaa) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000000)) 10:09:13 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x0, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0x0) 10:09:13 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x460000, 0x0) connect$bt_rfcomm(r1, &(0x7f00000000c0)={0x1f, @none, 0xe0}, 0xa) r2 = syz_open_pts(r0, 0x0) readv(r2, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) 10:09:13 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="3a258211f663a7724bdef6a53bfce1e775d7406272274814a3f23327edb11e2daf85534aa6f5083067b0248878f07a91df1acc99e6643d3baad0a9f349be3cc11cbf51b4f7bff473e9c200351ccaefebd642492cfc5ead68cf6a0506"], 0x5c) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) r2 = syz_open_pts(r1, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f00000001c0)) r5 = getpgrp(0x0) tgkill(r4, r5, 0x20) write$P9_RREADLINK(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="3a258211f663a7724bdef6a53bfce1e775d7406272274814a3f23327edb11e2daf85534aa6f5083067b0248878f07a91df1acc99e6643d3baad0a9f349be3cc11cbf51b4f7bff473e9c200351ccaefebd642492cfc5ead68cf6a0506"], 0x5c) sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f0000000180)={0xa20000, 0x0, 0x2, 0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x9909ce, 0x96f7, [], @p_u32=&(0x7f00000000c0)=0xfffffff8}}) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f00000001c0)={0x15, 0x6, 0x3f, 0xfffffffe, 0x8, 0x1}) readv(r2, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$TCSETSW(r7, 0x5403, &(0x7f0000000040)={0x2000000, 0x0, 0x0, 0xb, 0x18, '\x00\x00\x00@\x00'}) 10:09:13 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x0, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0x0) 10:09:13 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:09:13 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:09:14 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:09:14 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000000)={0x0, 0x0, [0x800000000, 0x400, 0x4, 0x0, 0x4, 0x2, 0x9]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:09:14 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x103}, 0x14}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0x0) 10:09:14 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x0, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0x0) 10:09:14 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="3a258211f663a7724bdef6a53bfce1e775d7406272274814a3f23327edb11e2daf85534aa6f5083067b0248878f07a91df1acc99e6643d3baad0a9f349be3cc11cbf51b4f7bff473e9c200351ccaefebd642492cfc5ead68cf6a0506"], 0x5c) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0xb}) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r2 = syz_open_pts(r0, 0x0) readv(r2, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) 10:09:14 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000040)={0x2}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r3, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4]}) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="26bba5ca3b729831bc655980cae67ebb55dcfc343557c9a94cbc4b8cf018c24e83a285c741d2d0335f87b2f0de47bcb46771a5e0bd157de644c2a353f43293c5ab0a980998beb705caff4624a65f60041e3bb350c14aa4c3c2a91fff2c8e853651152e4eddfb592c6061ffa76c1ab0b26ef3ca3d88651e2f733f32a2e553dccccf889911eb825247e0669d755f59b351bcf1dd3a33f5157b70171cc55902ae737600babab58fd35e20953034d9879dc9f82a9f6ddafa3fffdcb2", 0xba}], 0x1}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r4) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f0000000180), &(0x7f00000001c0)=0x4) 10:09:14 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000000)={0x0, 0x0, [0x800000000, 0x400, 0x4, 0x0, 0x4, 0x2, 0x9]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:09:14 executing program 1: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x200000, 0x0) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r2 = syz_open_pts(r1, 0x0) readv(r2, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) 10:09:14 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000000)={0x0, 0x0, [0x800000000, 0x400, 0x4, 0x0, 0x4, 0x2, 0x9]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:09:14 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4]}) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="26bba5ca3b729831bc655980cae67ebb55dcfc343557c9a94cbc4b8cf018c24e83a285c741d2d0335f87b2f0de47bcb46771a5e0bd157de644c2a353f43293c5ab0a980998beb705caff4624a65f60041e3bb350c14aa4c3c2a91fff2c8e853651152e4eddfb592c6061ffa76c1ab0b26ef3ca3d88651e2f733f32a2e553dccccf889911eb825247e0669d755f59b351bcf1dd3a33f5157b70171cc55902ae737600babab58fd35e20953034d9879dc9f82a9f6ddafa3fffdcb2", 0xba}], 0x1}, 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r3) ioctl$sock_netdev_private(r3, 0x89f9, &(0x7f0000000000)="3570245b6632080f6fdcb8cd9065999d7f4e4a100d266c78e95e07486c296328e323a099ec3376b1ea7589251b89334a528a28e9fc06f2e0393df03f3162ff6f40efee4d18a93b1e67065969f8b2c2fc8b239e08fed517ff5a61366823592a58362229f25cfb14a6dfef93a71e441c6ed2dff935") r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x480000, 0x0) ioctl$EVIOCGKEY(r4, 0x80404518, &(0x7f00000001c0)=""/53) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:09:15 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000040)) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap$snddsp_status(&(0x7f0000482000/0x4000)=nil, 0x1000, 0x6, 0x810, 0xffffffffffffffff, 0x82000000) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r3, 0x0) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000000)={0x1, 0x0, &(0x7f00002ab000/0x1000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x8, 0x0, 0x0, 0x4, 0x0, 0x0, 0x101]}) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="26bba5ca3b729831bc655980cae67ebb55dcfc343557c9a94cbc4b8cf018c24e83a285c741d2d0335f87b2f0de47bcb46771a5e0bd157de644c2a353f43293c5ab0a980998beb705caff4624a65f60041e3bb350c14aa4c3c2a91fff2c8e853651152e4eddfb592c6061ffa76c1ab0b26ef3ca3d88651e2f733f32a2e553dccccf889911eb825247e0669d755f59b351bcf1dd3a33f5157b70171cc55902ae737600babab58fd35e20953034d9879dc9f82a9f6ddafa3fffdcb2", 0xba}], 0x1}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 10:09:15 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000000)={0x0, 0x0, [0x800000000, 0x400, 0x4, 0x0, 0x4, 0x2, 0x9]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 10:09:15 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x0, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0x0) 10:09:15 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000000)={0x0, 0x0, [0x800000000, 0x400, 0x4, 0x0, 0x4, 0x2, 0x9]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 10:09:15 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x103, 0x600) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, &(0x7f0000000180)=""/75, &(0x7f0000000040)=0x4b) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r3, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4]}) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="26bba5ca3b729831bc655980cae67ebb55dcfc343557c9a94cbc4b8cf018c24e83a285c741d2d0335f87b2f0de47bcb46771a5e0bd157de644c2a353f43293c5ab0a980998beb705caff4624a65f60041e3bb350c14aa4c3c2a91fff2c8e853651152e4eddfb592c6061ffa76c1ab0b26ef3ca3d88651e2f733f32a2e553dccccf889911eb825247e0669d755f59b351bcf1dd3a33f5157b70171cc55902ae737600babab58fd35e20953034d9879dc9f82a9f6ddafa3fffdcb2", 0xba}], 0x1}, 0x0) r4 = syz_open_dev$audion(&(0x7f0000000200)='/dev/audio#\x00', 0x7, 0x400000) ioctl$SIOCX25SCAUSEDIAG(r4, 0x89ec, &(0x7f0000000300)={0x0, 0x5}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 10:09:15 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x103}, 0x14}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0x0) 10:09:15 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000600), 0x0) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = dup(r0) renameat2(r2, &(0x7f0000000000)='./file0\x00', r3, &(0x7f00000000c0)='./file0\x00', 0x6) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) 10:09:15 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000000)={0x0, 0x0, [0x800000000, 0x400, 0x4, 0x0, 0x4, 0x2, 0x9]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 10:09:15 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="3a258211f663a7724bdef6a53bfce1e775d7406272274814a3f23327edb11e2daf85534aa6f5083067b0248878f07a91df1acc99e6643d3baad0a9f349be3cc11cbf51b4f7bff473e9c200351ccaefebd642492cfc5ead68cf6a0506"], 0x5c) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) ioctl$NS_GET_USERNS(r2, 0xb701, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="3a258211f663a7724bdef6a53bfce1e775d7406272274814a3f23327edb11e2daf85534aa6f5083067b0248878f07a91df1acc99e6643d3baad0a9f349be3cc11cbf51b4f7bff473e9c200351ccaefebd642492cfc5ead68cf6a0506"], 0x5c) sendfile(r4, r4, &(0x7f0000000000), 0x8080fffffffe) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r6) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000118000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000180)="0f66bd9fee82c400baf80c66b8e628f88366efbafc0cedd1800d0066b9800000c00f326635000800000f30f20f2262d24d089cd9800e00650f01d1", 0x3b}], 0x1, 0x0, &(0x7f0000000300)=[@efer={0x2, 0x100}, @dstype3={0x7, 0x1}], 0x2) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r3, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4]}) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="26bba5ca3b729831bc655980cae67ebb55dcfc343557c9a94cbc4b8cf018c24e83a285c741d2d0335f87b2f0de47bcb46771a5e0bd157de644c2a353f43293c5ab0a980998beb705caff4624a65f60041e3bb350c14aa4c3c2a91fff2c8e853651152e4eddfb592c6061ffa76c1ab0b26ef3ca3d88651e2f733f32a2e553dccccf889911eb825247e0669d755f59b351bcf1dd3a33f5157b70171cc55902ae737600babab58fd35e20953034d9879dc9f82a9f6ddafa3fffdcb2", 0xba}], 0x1}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 10:09:15 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3, 0x0, "00000000000008000000000000e100"}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) 10:09:15 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f0000000400)=ANY=[@ANYBLOB="070000000000000001000040020000008000000000010000e7050000000000d03515edf40d22f2000000000047370000080000001f00000004000000000000acb154f252a10618f2c1ad1ebd000700000009000000008000000100010001000000000000000a00000009000000800000000600000001000100000000000d00000006000000a1000000ff7f0000f9ffffff00000000000000c0c70000000002000002000000040000000000faa5f51b75350cfd6c7cf50000"]) fchdir(r1) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0xffffffff}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000280), 0x4) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000005c0)={r3, @in={{0x2, 0x0, @rand_addr=0x400}}, [0x0, 0x1, 0x7, 0x0, 0xfffffffffffffffc, 0x0, 0x8, 0x951, 0x4, 0x0, 0x0, 0x3, 0x4]}, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000100)={r3, @in={{0x2, 0x0, @remote}}}, &(0x7f0000000040)=0x90) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000140)={r3, 0x80}, 0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={r3, 0x2}, 0x8) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r4 = syz_open_pts(r0, 0x0) readv(r4, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ppp\x00', 0x181102, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000780)) ioctl$PPPIOCSACTIVE(r5, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) readv(r5, &(0x7f00000003c0)=[{&(0x7f00000000c0)=""/188, 0x2000017c}], 0x1) 10:09:16 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000000)={0x0, 0x0, [0x800000000, 0x400, 0x4, 0x0, 0x4, 0x2, 0x9]}) ioctl$KVM_RUN(r0, 0xae80, 0x0) 10:09:16 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000000)={0x0, 0x0, [0x800000000, 0x400, 0x4, 0x0, 0x4, 0x2, 0x9]}) ioctl$KVM_RUN(r0, 0xae80, 0x0) 10:09:16 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x103}, 0x14}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0x0) 10:09:16 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000000)={0x0, 0x0, [0x800000000, 0x400, 0x4, 0x0, 0x4, 0x2, 0x9]}) ioctl$KVM_RUN(r0, 0xae80, 0x0) 10:09:16 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x103}, 0x14}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0x0) 10:09:16 executing program 5: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r1, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000000)={0x0, 0x0, [0x800000000, 0x400, 0x4, 0x0, 0x4, 0x2, 0x9]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 10:09:16 executing program 5: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r1, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000000)={0x0, 0x0, [0x800000000, 0x400, 0x4, 0x0, 0x4, 0x2, 0x9]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 10:09:16 executing program 5: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r1, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000000)={0x0, 0x0, [0x800000000, 0x400, 0x4, 0x0, 0x4, 0x2, 0x9]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 10:09:16 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000000)={0x0, 0x0, [0x800000000, 0x400, 0x4, 0x0, 0x4, 0x2, 0x9]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:09:16 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8983, &(0x7f0000000640)={0x7, 'macsec0\x00', {0x6}, 0x7ff}) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000000)) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)=""/237, 0x37, 0xed, 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x15, 0x10, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0x0, 0x1}, 0x40) write$binfmt_aout(r0, &(0x7f00000008c0)=ANY=[@ANYRESHEX=0x0, @ANYPTR=&(0x7f0000000700)=ANY=[@ANYRES16=r1, @ANYRESOCT, @ANYRESHEX=r2, @ANYRES64=r0, @ANYRESDEC, @ANYPTR64=&(0x7f0000000680)=ANY=[@ANYRESHEX, @ANYRES64, @ANYPTR, @ANYRESDEC, @ANYRES64=r0, @ANYPTR64, @ANYRES16=r1, @ANYRES32, @ANYPTR], @ANYRESDEC=r0], @ANYPTR=&(0x7f0000000780)=ANY=[@ANYRES64=r0, @ANYRESOCT, @ANYRESHEX=r0, @ANYBLOB="ad0a7661fbc73d2a48d893417aba49d643a567c775a22c4b3705b8163ec77921e339bed0f4da6516e7dfc59968820027bfd0ab6f70c8c31dfcbef4c93ea60d86dd56b7a1df081cade329ae420250cd44644feea24d7495727f9b8168a3f1682bf653a4e29f6c38193175e063b7b5410140bf71fdb627af030f27904aec76652c8a61b798cd3f21d51100c2ed0274e41a91b6153e228f42d67840265ba11627ce6e5a40d97c75ce04a2c4200b5d85ef7882b5d5c37b7442847628d568aee87ce48afd98715cbe58a8cec818b423b59f8c0350a54293c5889ecee96f9f28821ea8fa83bece79eaf31e811100d69b9d555003bf"]], 0x22) r3 = open(&(0x7f0000000900)='./file0\x00', 0x0, 0xab) fchdir(r3) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000480)=ANY=[@ANYBLOB="08000000000000001f00008007000000050000002344000092df5c7001000000000200000000000000000000000000000100004005000000020000000008000020000000060000000500000000000000000000000000000002000000000800000100000000010000010000000000010000800000000000000000000000000000040000000100000006000000000800003f000000010400000100000000000000000000000000000006000000010001000300000001000000030000000100000003000000000000000000000000000000010000400800000001000000b74d000006000000010000000200000000000000000000000000000007000000040000000700000040000000ec090000140400000100010000000000000000000000000001000080030000000200000009000000fd07000001000000ff0700"/328]) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f00000001c0)={@private, @local}, &(0x7f0000000240)=0xc) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) fcntl$setlease(r1, 0x400, 0x2) r4 = syz_open_pts(r0, 0x0) readv(r4, &(0x7f00000003c0)=[{&(0x7f0000000280)=""/162, 0xfffffffffffffff1}, {&(0x7f0000000340)=""/84, 0x54}], 0x2) ioctl$TCSETSW(r4, 0x5403, &(0x7f0000000040)={0x0, 0x7, 0x0, 0xb, 0x3}) lsetxattr$security_evm(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='security.evm\x00', &(0x7f0000000600)=ANY=[@ANYBLOB], 0xa, 0x2) io_uring_setup(0xda3, &(0x7f00000000c0)={0x0, 0x0, 0x5, 0x2, 0x2a}) mincore(&(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000180)=""/44) 10:09:16 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="3a258211f663a7724bdef6a53bfce1e775d7406272274814a3f23327edb11e2daf85534aa6f5083067b0248878f07a91df1acc99e6643d3baad0a9f349be3cc11cbf51b4f7bff473e9c200351ccaefebd642492cfc5ead68cf6a0506"], 0x5c) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x3fb, 0x400, 0x70bd2c, 0x25dfdbfd, "", ["", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x400}, 0x800) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r3, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4]}) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="26bba5ca3b729831bc655980cae67ebb55dcfc343557c9a94cbc4b8cf018c24e83a285c741d2d0335f87b2f0de47bcb46771a5e0bd157de644c2a353f43293c5ab0a980998beb705caff4624a65f60041e3bb350c14aa4c3c2a91fff2c8e853651152e4eddfb592c6061ffa76c1ab0b26ef3ca3d88651e2f733f32a2e553dccccf889911eb825247e0669d755f59b351bcf1dd3a33f5157b70171cc55902ae737600babab58fd35e20953034d9879dc9f82a9f6ddafa3fffdcb2", 0xba}], 0x1}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 10:09:16 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000000)={0x0, 0x0, [0x800000000, 0x400, 0x4, 0x0, 0x4, 0x2, 0x9]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:09:17 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) r1 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000180)='asymmetric\x00', 0x0, &(0x7f0000000240)="3080", 0x2, r1) keyctl$set_timeout(0xf, r1, 0x825) r2 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, r1) keyctl$set_timeout(0xf, r2, 0xfff) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r3) sendmsg$DCCPDIAG_GETSOCK(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000640)={0x119c, 0x13, 0x1, 0x70bd2c, 0x25dfdbff, {0x27, 0x3, 0x8, 0x2, {0x80, 0x4e23, [0x3, 0x0, 0x40, 0x1], [0xff, 0x6, 0x1e0, 0x6], 0x0, [0xffffffff, 0x7]}, 0x3d, 0xffffffff}, [@INET_DIAG_REQ_BYTECODE={0x7, 0x1, "9a9539"}, @INET_DIAG_REQ_BYTECODE={0x61, 0x1, "c30ca94e9c00cf0de4b6abcbbb017ccdf4a2bff22aaf4024895d730b72a06a2f3242f77822bc05497d1e0131e0105ea058a18f12e680cc05cf427034772f1e82097d85ae3b4a2d6bbf7687f9dcd96757a30ba74354c426074bf56b331e"}, @INET_DIAG_REQ_BYTECODE={0xca, 0x1, "485efe4ca39d9c418a2b5cef1f87f28ff6dff8fda0d0dadf03d087450ecdb25bc6b7d5a8a5dbabd359ea592f64e96abf27a0e87be41769cb7765440f07ab6bf29bb20b9b357269cde4baca7f0c2f13b2d87b2a7c3ff6dc8c7db0846d81454eb67afe72f7ded2818138005f8ec50bb301500077909b016d015f7b0352650241ad453af40286fc8ce49bbb7570dcc6edc34ada0ff04fce5949e2f031e4c4285f5013a3a63381af3a9aabde53f688b93b1185619db7857a87da4fbffb44b4db993ccdaf6702a30d"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x14, 0x1, "04992994273b77e0842725a128dffcb8"}]}, 0x119c}, 0x1, 0x0, 0x0, 0x404c084}, 0x40081) write$P9_RSTAT(r3, &(0x7f0000000340)={0x7b, 0x7d, 0x2, {0x0, 0x74, 0x8, 0x8001, {0x40, 0x3, 0x3}, 0xb8300000, 0x4, 0x2, 0xffffffffffffffff, 0xa, '/dev/ptmx\x00', 0x10, 'nodev\\self}:ppp1', 0x1d, ')em0!\\\\eth1mime_typeqsecurity', 0xa, '/dev/ptmx\x00'}}, 0x7b) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r4 = syz_open_pts(r0, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, r3) readv(r4, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="3a258211f663a7724bdef6a53bfce1e775d7406272274814a3f23327edb11e2daf85534aa6f5083067b0248878f07a91df1acc99e6643d3baad0a9f349be3cc11cbf51b4f7bff473e9c200351ccaefebd642492cfc5ead68cf6a0506"], 0x5c) sendfile(r5, r5, &(0x7f0000000000), 0x8080fffffffe) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) ioctl$TCSETSW(r4, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) 10:09:17 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r1 = syz_open_pts(0xffffffffffffffff, 0x341801) readv(r1, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) 10:09:17 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x103}, 0x14}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0x0) 10:09:17 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000000)={0x0, 0x0, [0x800000000, 0x400, 0x4, 0x0, 0x4, 0x2, 0x9]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:09:17 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x18, 0x30, 0x103, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0x0) 10:09:17 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r1, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000000)={0x0, 0x0, [0x800000000, 0x400, 0x4, 0x0, 0x4, 0x2, 0x9]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 10:09:17 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)=""/237, 0x37, 0xed, 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x15, 0x10, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r1, 0x0, 0x1}, 0x40) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)=""/237, 0x37, 0xed, 0x1}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x15, 0x10, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0x0, 0x1}, 0x40) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)=""/237, 0x37, 0xed, 0x1}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x15, 0x10, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r4, 0x0, 0x1}, 0x40) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)=""/237, 0x37, 0xed, 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x15, 0x10, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r6, 0x0, 0x1}, 0x40) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)=""/237, 0x37, 0xed, 0x1}, 0x20) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x15, 0x10, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r7, 0x0, 0x1}, 0x40) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)=""/237, 0x37, 0xed, 0x1}, 0x20) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x15, 0x10, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r9, 0x0, 0x1}, 0x40) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)=""/237, 0x37, 0xed, 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x15, 0x10, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r11, 0x0, 0x1}, 0x40) write$binfmt_aout(r0, &(0x7f0000000a80)=ANY=[@ANYRESHEX=r0, @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYRES16, @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYRESOCT=r0, @ANYRESOCT, @ANYRESDEC=r0, @ANYRES64=r1, @ANYRESHEX=0x0], @ANYRESDEC=0x0, @ANYPTR64=&(0x7f0000000c40)=ANY=[@ANYBLOB="a6e0200562989d446bf1d9308048f73d46ee95738aa7de97a7477370801ecd9dd846573c0a2ae8367d13e2f83e982e52d5e9b0904adc3336e26382d8acff23fffaf2380ff56a2a3ed7996845cf05820f4c14b994922f2c91b0b87fccc362d5f72b4d353eb145290e78cee4e0cb7b86efac7d2cf5cc1bef3309c996b3852e6f76fdcf872f7476c8c853d0adb57f15d955c01d7698399e9e9d48b0feca3ba7574ddbb8354f5ef3f721258bd5f781941cfe0b51f16a5d79b738c0454673e05e66f97235f1a90cab8dca087c0adc1981db3fd1e0a01a244b78bfb0f4f5aebe16c224af5ee03ba58bac2999e0e6b0d0d4f269e4675e1e58bff55a", @ANYRESDEC, @ANYRESDEC=r0, @ANYRES16=r0], @ANYPTR64=&(0x7f0000000180)=ANY=[@ANYRES32=r4, @ANYRESDEC=r0], @ANYRES64], @ANYRES64, @ANYPTR=&(0x7f0000000640)=ANY=[@ANYPTR=&(0x7f0000000200)=ANY=[@ANYRES16=r6, @ANYPTR, @ANYRESOCT, @ANYRES16=r5, @ANYRESOCT=r3, @ANYPTR64, @ANYRESHEX=r1], @ANYBLOB="47f89661a0e29116d87ee86789266ae6698d803d121d2062cc4539f655506909d497bd259275f4e85129b4ab8d795b668e189aeea5e68ac42a297b9f710177c8c91b23feb8fc13e2be12a30035943d752a6ff632596799469fa16c83d973c115184046a0229ef859c73f0bfbe8c101b2895634e4a4366e2033a6741f9ec035500482622d4a1989b800bd4906a1636e304e91dcf9ec8832787aa6d5c28b88b01b0012aff1d2fed2ce6e8d2aec607df61503a6307be6754d998e7bf1d17386e43f966daf", @ANYBLOB="ba5e80d4f2bafc76bf2ceb48f1c1dc797f21ec60dcea756c46d761deed65c4e93569bcc4170218a9aa9c53dc4ab8006750ba65e95ce971b01f83e18d03d50a25bbef0e1a79e36261f87851b82d4d0e420d7f8f8a147178d882ee", @ANYBLOB="2527cc4587e3b6a445a1ac43224e", @ANYBLOB="7ebf38f5147ccb8d2297c6c41f3562dcf8b1f647c42b26c57e452af712ceefab28853f84e686fbf2314d5b38c4195a528d3a2ff1470893a338247d0a70081b7273fa2aac5522b517be331c96d53bb955f8c435accee983e4c9ac9a09e552e1e13efab0de9825288c64850b14836498082da304eae66d4e3c5522fddbd2dff0fdaf0fc71465922d8e60ec70f271a3b7fcda17162c3a241cd4f0579cda8498630d9a0d17f39863820b3e30102b662f", @ANYPTR64=&(0x7f0000000540)=ANY=[@ANYRES16=r7, @ANYRESHEX=r9, @ANYRES32=0x0, @ANYRESOCT=0x0, @ANYPTR64], @ANYPTR=&(0x7f0000000580)=ANY=[@ANYRESHEX=r11], @ANYPTR64, @ANYBLOB="89e22d816c175514ea0f2d48939064f184bb6162f91e2bf51d011be49a9b812e6dc11f005aab07a09847ac81d4cff8f26cbc2ff8ccaa1cfae5912df218e28c7518eab06b99a311b3b0a8b7dfbb302d14c34fe9f4a29fe36d2cd7ea5bc3c009818df609bef6cdd17476b6430333cf431d7fc995746024b803"], @ANYPTR=&(0x7f0000000b00)=ANY=[@ANYRES16=r9, @ANYPTR=&(0x7f0000000d80)=ANY=[@ANYBLOB="72e1ff6651d8f3c6710285b18b1e38459dce8b23aa9dd209637bb1a729c8f1c3f47d73d3f663274cbb2b3fbc0f9940bdd1f6495eec148d15cac9c457c34bea9830512a3bcda88acb9d6ee2483340cb64a0b7f3c68f371e62f353", @ANYRES64, @ANYBLOB="69d06498", @ANYPTR64, @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYRESOCT], @ANYRES64, @ANYRES16=r7, @ANYRESDEC=r10, @ANYPTR64=&(0x7f0000001000)=ANY=[@ANYRESOCT=r3, @ANYRESDEC=r8, @ANYBLOB="1707a0315c004665e7f3dd7674e0102813b1b839ad2f4902804c637cc717edb672e2d40cbeab2e4229b40b86c7a2108893092b36edf107eeaf5bbc7ff10c35b2ff8cfb8645ac3ff038218feba365d381f7c1059c8c4c5e34d5c45adba4e74f2bb931d453def6ad027a43b3af7ead961e2c272047e5e46883751532124bbeb8b60e408f2ed622c45a82247eb28df5a81c5b4bbe4f6f988dcebb2675b5f56ec33873c7f0c0dbd62a7339e5a274b14342b5affc2c90c800d2374420988328b4beca01d8aa0b417299c143aa9a36e675907a30d7ab05bb5a61fd0b0a1fb76860977f9826c83441b6e1", @ANYRESDEC, @ANYPTR=&(0x7f00000005c0)=ANY=[@ANYRES64=r2, @ANYRESHEX, @ANYRESHEX=0x0], @ANYRES16=r6, @ANYRESHEX, @ANYPTR64=&(0x7f0000000e40)=ANY=[@ANYBLOB="a1c47dfd020509008ceefb60ee2bfac92a4cc19602e00dadff76c7a8e9412817b1e91e55185b435abfb8e90042f6e46d71abe20c7912c58b0b4e11f8205969d20cfa2c85f708dd1e5f3ee1e8a20f8b7ca760369ad94a08d0a70193ea993fa58cad34658457548a4ede001649e29842b8ffc605c1c4903aa0c46e3d1cac424cb3c165c378e94f15d0799537df1ee0db9b4ed50a8f667a94a44b8757b46bb9f80b3000e02ba01c033f3970055d77e5c10bdef07c6007", @ANYRESDEC, @ANYBLOB="c424a8a730d6b2379cb1d50df447a64568085a5cc66ff05d0db19d51eca0ee4c5b34b0bc11ce7ca08f3c028166b21ba35e36368c89522f652d5dcde2f6fcb44d54cd6b722f30", @ANYBLOB="bb05f3ba28f573afe5df93a358649f0553e2afc1e973cd158473046da550fcc1e233ba49e3754d663a023d26089374b25b263fbc5ac61e122916ba7deea0d5a1c2e22569e932607191fec2d901601b21dbb7e0a67204723477714b868388bea1a8794b651065655d30f5746e39809ede38c1c1b0521f8b44012937", @ANYRES16=0x0, @ANYPTR, @ANYRES64, @ANYRESOCT], @ANYRESHEX=r4, @ANYPTR64=&(0x7f00000008c0)=ANY=[@ANYPTR]]], @ANYPTR, @ANYRES32, @ANYBLOB="94ca25b3f49051e7c5ae"], @ANYRESOCT, @ANYPTR64=&(0x7f0000000a40)=ANY=[@ANYPTR64, @ANYPTR64], @ANYPTR64], 0x59) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r12 = syz_open_pts(r0, 0x0) readv(r12, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) ioctl$TCSETSW(r12, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) 10:09:17 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r1, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000000)={0x0, 0x0, [0x800000000, 0x400, 0x4, 0x0, 0x4, 0x2, 0x9]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 10:09:17 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r1 = syz_open_pts(r0, 0x101081) readv(r1, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) 10:09:17 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r1, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000000)={0x0, 0x0, [0x800000000, 0x400, 0x4, 0x0, 0x4, 0x2, 0x9]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 10:09:17 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x3c1080, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000000)={0x800100a, 0x7, 0x1}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000040)='/dev/vcsu#\x00', 0x3, 0x210300) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000000180)=0xffffffff, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r4, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4]}) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="26bba5ca3b729831bc655980cae67ebb55dcfc343557c9a94cbc4b8cf018c24e83a285c741d2d0335f87b2f0de47bcb46771a5e0bd157de644c2a353f43293c5ab0a980998beb705caff4624a65f60041e3bb350c14aa4c3c2a91fff2c8e853651152e4eddfb592c6061ffa76c1ab0b26ef3ca3d88651e2f733f32a2e553dccccf889911eb825247e0669d755f59b351bcf1dd3a33f5157b70171cc55902ae737600babab58fd35e20953034d9879dc9f82a9f6ddafa3fffdcb2", 0xba}], 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 10:09:17 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r1, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000000)={0x0, 0x0, [0x800000000, 0x400, 0x4, 0x0, 0x4, 0x2, 0x9]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 10:09:18 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r2, 0xc0984124, &(0x7f0000000180)) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) 10:09:18 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="3a258211f663a7724bdef6a53bfce1e775d7406272274814a3f23327edb11e2daf85534aa6f5083067b0248878f07a91df1acc99e6643d3baad0a9f349be3cc11cbf51b4f7bff473e9c200351ccaefebd642492cfc5ead68cf6a0506"], 0x5c) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000000)={0x8, 0x7, 0x1694, 0xfffffffb, 0x1a, "15d554c916ec83a75ec2a27af00fee6fae1c31"}) 10:09:18 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x103}, 0x14}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0x0) 10:09:18 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0x141080, 0x0) connect$tipc(r2, &(0x7f00000001c0)=@id={0x1e, 0x3, 0x3, {0x4e24, 0x4}}, 0x10) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000300)={'macvlan1\x00', {0x2, 0x4e24, @multicast1}}) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4]}) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="26bba5ca3b729831bc655980cae67ebb55dcfc343557c9a94cbc4b8cf018c24e83a285c741d2d0335f87b2f0de47bcb46771a5e0bd157de644c2a353f43293c5ab0a980998beb705caff4624a65f60041e3bb350c14aa4c3c2a91fff2c8e853651152e4eddfb592c6061ffa76c1ab0b26ef3ca3d88651e2f733f32a2e553dccccf889911eb825247e0669d755f59b351bcf1dd3a33f5157b70171cc55902ae737600babab58fd35e20953034d9879dc9f82a9f6ddafa3fffdcb2", 0xba}], 0x1}, 0x0) r4 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2c5, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000000)="1d", 0x1, 0xfffffffffffffffd) r6 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2c5, 0xfffffffffffffffe) r7 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000000)="1d", 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r7, r6, r6}, 0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={'tgr160\x00'}}) keyctl$dh_compute(0x17, &(0x7f0000000440)={r5, r7, r4}, 0x0, 0xfffffffffffffe4c, &(0x7f0000000240)={&(0x7f0000000080)={'cryptd(blake2b-256)\x00'}}) keyctl$invalidate(0x15, r5) ioctl$KVM_RUN(r3, 0xae80, 0x0) 10:09:18 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r1, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000000)={0x0, 0x0, [0x800000000, 0x400, 0x4, 0x0, 0x4, 0x2, 0x9]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 10:09:18 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x18, 0x30, 0x103, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0x0) [ 779.404794][T25993] Unknown ioctl 35094 [ 779.500343][T26007] Unknown ioctl 44609 [ 779.520845][T26007] Unknown ioctl 35094 10:09:18 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r1, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000000)={0x0, 0x0, [0x800000000, 0x400, 0x4, 0x0, 0x4, 0x2, 0x9]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) [ 779.562707][T25998] could not allocate digest TFM handle cryptd(blake2b-256) 10:09:18 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x202000, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4]}) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="26bba5ca3b729831bc655980cae67ebb55dcfc343557c9a94cbc4b8cf018c24e83a285c741d2d0335f87b2f0de47bcb46771a5e0bd157de644c2a353f43293c5ab0a980998beb705caff4624a65f60041e3bb350c14aa4c3c2a91fff2c8e853651152e4eddfb592c6061ffa76c1ab0b26ef3ca3d88651e2f733f32a2e553dccccf889911eb825247e0669d755f59b351bcf1dd3a33f5157b70171cc55902ae737600babab58fd35e20953034d9879dc9f82a9f6ddafa3fffdcb2", 0xba}], 0x1}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:09:18 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000000)={0x0, 0x0, [0x800000000, 0x400, 0x4, 0x0, 0x4, 0x2, 0x9]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:09:19 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000000)={0x0, 0x0, [0x800000000, 0x400, 0x4, 0x0, 0x4, 0x2, 0x9]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:09:19 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x80000, 0x0) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000}) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) 10:09:19 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)=""/237, 0x37, 0xed, 0x1}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x15, 0x10, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r1, 0x0, 0x1}, 0x40) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)=""/237, 0x37, 0xed, 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x15, 0x10, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r3, 0x0, 0x1}, 0x40) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYRES16=r2, @ANYRES16, @ANYRES32=r0, @ANYPTR, @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYRESHEX=r3], @ANYBLOB="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"], 0x1018) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="3a258211f663a7724bdef6a53bfce1e775d7406272274814a3f23327edb11e2daf85534aa6f5083067b0248878f07a91df1acc99e6643d3baad0a9f349be3cc11cbf51b4f7bff473e9c200351ccaefebd642492cfc5ead68cf6a0506"], 0x5c) stat(&(0x7f0000000100)='./bus\x00', &(0x7f0000000200)) sendfile(r4, r4, &(0x7f0000000000), 0x8080fffffffe) setsockopt$netrom_NETROM_T4(r4, 0x103, 0x6, &(0x7f00000000c0), 0x4) r5 = syz_open_pts(r0, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)=""/237, 0x11b, 0xed, 0x5}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x15, 0x10, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r6, 0x0, 0x1}, 0x40) fchdir(r6) readv(r5, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) ioctl$TCSETSW(r5, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) 10:09:19 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x18, 0x30, 0x103, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0x0) 10:09:19 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000000)={0x0, 0x0, [0x800000000, 0x400, 0x4, 0x0, 0x4, 0x2, 0x9]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:09:19 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x18, 0x30, 0x103, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0x0) 10:09:19 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x10, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000000)={0x0, 0x0, [0x800000000, 0x400, 0x4, 0x0, 0x4, 0x2, 0x9]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:09:20 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x10, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000000)={0x0, 0x0, [0x800000000, 0x400, 0x4, 0x0, 0x4, 0x2, 0x9]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:09:20 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) r2 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x5, 0x80000) ioctl$KDDELIO(r2, 0x4b35, 0xffff) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) 10:09:20 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6(0xa, 0x80003, 0xff) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r1, &(0x7f0000000640)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="3093b34e1938"}, 0x14) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x13, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000022000000350000000000907c8587e2e813c400009500f8ff00000000"], &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x64deb09e3732d498}, 0x64) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) pipe(&(0x7f0000000600)) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f00000001c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='xfs\x00', 0x0, 0x0) syz_mount_image$iso9660(0x0, &(0x7f0000000500)='./file0\x00', 0x0, 0xc050787274, 0x0, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r4 = syz_open_pts(r0, 0x0) readv(r4, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) ioctl$TCSETSW(r4, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) 10:09:20 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x10, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000000)={0x0, 0x0, [0x800000000, 0x400, 0x4, 0x0, 0x4, 0x2, 0x9]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:09:20 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x18, 0x30, 0x103, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0x0) 10:09:20 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x0, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0x0) 10:09:20 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000000)={0x0, 0x0, [0x800000000, 0x400, 0x4, 0x0, 0x4, 0x2, 0x9]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 781.773379][ T2521] block nbd1: Attempted send on invalid socket [ 781.779759][ T2521] print_req_error: 1 callbacks suppressed [ 781.779779][ T2521] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 781.801757][T26087] XFS (nbd1): SB validate failed with error -5. 10:09:21 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000000)={0x0, 0x0, [0x800000000, 0x400, 0x4, 0x0, 0x4, 0x2, 0x9]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 782.123744][ T2521] block nbd1: Attempted send on invalid socket [ 782.130057][ T2521] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 782.155434][T26090] XFS (nbd1): SB validate failed with error -5. 10:09:21 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000000)={0x0, 0x0, [0x800000000, 0x400, 0x4, 0x0, 0x4, 0x2, 0x9]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:09:21 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x480800, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r2, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x475}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xb500}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x45}, 0x20000000) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r3 = syz_open_pts(r0, 0x0) readv(r3, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) r4 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r4) ioctl$SOUND_OLD_MIXER_INFO(r4, 0x80304d65, &(0x7f00000003c0)) ioctl$TCSETSW(r3, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r5) r6 = pidfd_getfd(r5, r0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000340)={&(0x7f0000000240)=[0x3f, 0x4, 0xff, 0x2, 0x81, 0x0, 0x1], 0x7, 0x6, 0x2, 0x6, 0x9, 0x4, 0x598, {0xb28, 0x7, 0x9, 0x6, 0x20, 0x19d8, 0x4, 0x4000, 0xfff8, 0x40, 0x4, 0x6b8, 0x9f66, 0x101, "3aa0daa352e3fe6c7fb391d04bf76e9b94625aaa03ce50b0a93159c421c1df74"}}) 10:09:21 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000503a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000840)=ANY=[@ANYBLOB="3a258211f663a7724b9256ac81af3fd5b3311c7f71190aafe5f6a57bfce1e775d7406272274814a3f23327edb11e2daa85534aa6f2083067b0248c78f07a91df1acc99e6643d3baa5ebce3e4fd7350197f7721cae0a3d0a9f349be3cc11cbf51b4f7bff473ebd6424936fc5ead68cf6a050600000000000000"], 0x5c) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000005c0)={r3, @in={{0x2, 0x0, @rand_addr=0x400}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x951, 0x0, 0x0, 0x5, 0x3, 0x4]}, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000100)={r3, @in={{0x2, 0x0, @remote}}}, &(0x7f0000000040)=0x90) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000140)={r3, 0x80}, 0x8) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f00000005c0)={r3, 0x9, 0x3, [0x81, 0x8, 0x5]}, &(0x7f0000000780)=0xe) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) r4 = fspick(r2, &(0x7f0000000180)='./file0\x00', 0x1) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000340)={0x2, 0x7, 0x4, 0x2000000, 0x10000, {0x0, 0x2710}, {0x2, 0xc, 0x1f, 0x5, 0x7, 0x1f, "007917a4"}, 0xf4, 0x4, @offset=0x1, 0x40, 0x0, r4}) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r5 = syz_open_pts(r0, 0x0) readv(r5, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) ioctl$TCSETSW(r5, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) r6 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) readv(r2, &(0x7f0000000700)=[{&(0x7f0000000240)=""/58, 0x3a}, {&(0x7f00000003c0)=""/191, 0xbf}, {&(0x7f0000000480)=""/216, 0xd8}, {&(0x7f0000000580)=""/32, 0x20}, {&(0x7f0000000640)=""/175, 0xaf}], 0x5) getsockopt$inet_udp_int(r6, 0x11, 0x65, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 10:09:21 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x18, 0x30, 0x103, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0x0) 10:09:21 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:09:21 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x0, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0x0) 10:09:21 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:09:21 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:09:22 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000000)={0x0, 0x0, [0x800000000, 0x400, 0x4, 0x0, 0x4, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:09:22 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000000)={0x0, 0x0, [0x800000000, 0x400, 0x4, 0x0, 0x4, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:09:22 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x9, 0x0, 0x0, 0xb, 0xd, '\x00\x00\x00@\x00'}) 10:09:22 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x8000, 0x0) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f00000000c0)) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r2 = syz_open_pts(r0, 0x0) readv(r2, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) 10:09:22 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x0, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0x0) 10:09:22 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000000)={0x0, 0x0, [0x800000000, 0x400, 0x4, 0x0, 0x4]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 783.529125][T26174] QAT: Invalid ioctl 10:09:22 executing program 0: r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000004c0)='NLBL_CALIPSO\x00') sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, r4, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) sendmsg$NLBL_CALIPSO_C_ADD(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, r4, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4008a0}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r4, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x22000014) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) getpeername(r1, &(0x7f0000000340)=@generic, &(0x7f00000003c0)=0x80) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0xfffffffffffffffc) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r7, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4]}) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="26bba5ca3b729831bc655980cae67ebb55dcfc343557c9a94cbc4b8cf018c24e83a285c741d2d0335f87b2f0de47bcb46771a5e0bd157de644c2a353f43293c5ab0a980998beb705caff4624a65f60041e3bb350c14aa4c3c2a91fff2c8e853651152e4eddfb592c6061ffa76c1ab0b26ef3ca3d88651e2f733f32a2e553dccccf889911eb825247e0669d755f59b351bcf1dd3a33f5157b70171cc55902ae737600babab58fd35e20953034d9879dc9f82a9f6ddafa3fffdcb2", 0xba}], 0x1}, 0x0) r8 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r8) ioctl$KVM_REGISTER_COALESCED_MMIO(r8, 0x4010ae67, &(0x7f0000000000)={0xf000, 0x8000}) ioctl$KVM_RUN(r7, 0xae80, 0x0) 10:09:22 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x0, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0x0) 10:09:22 executing program 0: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendto(r0, &(0x7f0000001440)="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", 0x1000, 0x40, &(0x7f0000000300)=@in6={0xa, 0x4e20, 0x1591, @private0={0xfc, 0x0, [], 0x1}, 0x4}, 0x80) write$P9_RREADLINK(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="3a258211f663a7724bdef6a53bfce1e775d7406272274814a3f23327edb11e2daf85534aa6f5083067b0248878f07a91df1acc99e6643d3baad0a9f349be3cc11cbf51b4f7bff473e9c200351ccaefebd642492cfc5ead68cf6a0506"], 0x5c) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) ioctl$SNDCTL_DSP_RESET(r0, 0x5000, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r3, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4]}) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="26bba5ca3b729831bc655980cae67ebb55dcfc343557c9a94cbc4b8cf018c24e83a285c741d2d0335f87b2f0de47bcb46771a5e0bd157de644c2a353f43293c5ab0a980998beb705caff4624a65f60041e3bb350c14aa4c3c2a91fff2c8e853651152e4eddfb592c6061ffa76c1ab0b26ef3ca3d88651e2f733f32a2e553dccccf889911eb825247e0669d755f59b351bcf1dd3a33f5157b70171cc55902ae737600babab58fd35e20953034d9879dc9f82a9f6ddafa3fffdcb2", 0xba}, {&(0x7f0000000180)="22f65bb7dd74a0593ba0ca2623428b6977ea3c025ddcb95341e139d07e238cbdf1940e4691ce79942f1d979947778342829244bb4cc75c88c73d213bdd69f008512a1c25aa92ec944947d62c64bedf55446e6b6c4d31311b035bab573a623dc044cc8e1ff9f23c4288d6740dabd951424e849153f0a097a2d7a79a68e102dedfd4ebfba06bc6c9578ec41674f3aa16668baf41f4c45eb6ea", 0x98}, {&(0x7f0000000440)="c96ef6136f96c454bba6927b2e78930c161688599df389d80332ec63d75371dc79e75dedb058f4c3f6d0d8c9ab14d6417cac673d96f1479763470b743ae0cb4ace8ab8db8f9ae0fea8225399ac19a0521255d87e672e819611ff29e683d4a78d6dcd05e2a5f312ea954642e81f327ac66c16c6639bf3341f8f50d2b8c5b25ed2dbfefc1079527f0b124be3870e0506d32082827d04eed874884a94781efef6f2b4d94c47f8a56d4edbfba339d1081db4b3a81efcb2de777fc394852728688b6100757c07b3a27d9ecc55e3cb892d0f55aff5a86143ca521793f7e0116f2c11ca2b358c7a0f1ce1b1cf8927aa775559c514444742b2bc5784b8d224f66fc279845f16687feb746327afd262804288163424c40612c85a7e061b90c7f1eb0238a7f9b4923ecd554b5311b48d47e1311750f0f4584f6d58bb24e10ce78a4b54112573d317f1113c64b1793938368d346d376fb50dfb387dbbb94dd6611bc12109e122989884720c66ae48a53f79641c4666d5e433f89c46b1a7b54ad5e135e90cbf89b391b328117e6f37fb5c67af238e65fef8551fd22b0066c84306b271bf406974b5e530afcb82bcaefd3d22f47ae92c1b69fc6a864d04cab1271c07a4b012d64ced08b71ea8392e5c3735df62c932b1844200e57f9edf7ffca80f370c6a67e0d4d2826653d7d898a8617075418cc3aa12a2b9cffda1609dfd96e6af71b57795a37e345093dcd87c2e4abfb83fb699a6e91ef5bec45ae0d075e1037e839e336e6e8702c75794e89e000dcd0a79c2774553d305d58c51e79f43b14b301e88cb8031f2d3372358545b90a7d63e190f6b85181dea7d7dc07d5975d8f0234b195c37a565c87d91fdd17760df529094542e20f7aaf13577fbe46ae1340817cdd6f8bf4d33d1e451910aa7788e1481f50c2b896bf1f027a56fa9e2b6437096477a6d5cf0b7d3e4bab329a9881bddb3cb121252be4d334d5f306194bcd8e4c0f69c0757fa204ba15d99389a11f40f3c3a1e767eec1250a4ab53c8c97e2ff0fb91c09b0eb081527a38ffaaf1cbdf301e3d133d8763565087552b4b61e33dda8f73387f78835eeab1746aef3c99a1d0b7b88f692b3dc27ae72e0a5b9c11b472e821ca18991c6525a96141f9ac2559ac8dac93f4e36417e84591a9ab7c95e11e3c368b8da27be04d14f16e03b6286b5cc385774ee0c4793485f37adc0c2eb59e45019394ca9c809dd6f2e1e72d2bd85832ab624e81fbac7890d71004ec0827d13e92cdfc27d48ae9bf8bc34ff51e6e7cea48e526e8b3a6823f3c0cb6ecb45f185fd506319e5d83e302640921221cef79fdcbb4b1dc12fdb20c61756c7780ea379ed4d4f434ea57d2a659c5dfa939fc5249dc3d02dc3b2e18e8e80e41ede5e7d5452547de00327dc578b62ac200c4da969f1e20269a0605a025a639657235d191a2dd7d7cb23d4987ff52d8e8fa5e205fce095d659ae17fc871fe7935a163b6a97467ca65b518467998906739b8d44793d4b1547c9ddb1d4aa54740c1f6553490b8f71374c8b5e67e3c1c694254de06565fc9fa359f4535af4bb6520c004d0e1ace78fd0cf15ef9c9c861ccf70b57ed6eddfc9b397de8913f6130d2b15c0e2f56dcd0dfd0bc08fd74d025c0af05f9d5324a000a1350fada5f7610726293a7699f9a73146558db87dda697906847948a9e326f408c49bb470061c2e16396fa0c12c51728eb5742db7b440a32edcc56d37acbf303f5ebdfdc8c4aa23e2fc1de42141f20d5fc500f0d126a79f3b6b97cf968cb5250d049f223a56ae85f0c78433471de1a8b7c1651daea5ad8d0e2ee8e12855db5efcf3b007196e630b46ca4d243e0566b11b45fbb2d21260b3613479672f2e392de4952c768eb25eb5931b8e7c44225954d622c1f2e9782a4f1318cd68653cdcb359bd71f066ed36768cb2692b896c9974873b9fd2fe624b6a68ea5a21dc5d25de2284ab4d8e1f7d3bd6809c0c9d58fa8153456e20e3ba0a32a7ed7b5babc026fc4c235d3f143057ad03d44e6181269d58dac8e3048ee51e513288bfe032c2512c2f429d1100cd120749c96fc32d0a0c5030a28ca591df342a90f8e6e523fbe2765a9e704bb6b52550e1ff6f428110c98ef2ac976c99b170df1334e305a2d5d0447bdb0f6924c4e7630df6a1995583dd183ef2ecdd625097409812867bd323c93cc688f1404e74bd0454763d8c5b15a32a924ba92d217f0ac105ea6a1258cbd936dedef8ed3160a354c24f82e6bb8182a70de7bcf8de1a14fad59f5937e646045bbe76832bf533ebb0a64675e6828304b48e7d820a605c0ac4f622946f287a027fce35539c6a1e59deb47f15b4b912d9dc39740902e70715f0d753c50539e87e324b210732db382e06421d40c4673b416e48d781b522d5f6fbc251b4b3c77db630b2cf2c4e094a5a4f114769a19d1a5221fb353239ad86e9d1880f4846b0fcc3bff81f3ba09ba4ec5f3061ebec52f0f9df722b2e5788b9013041418cc26721116ab4025a3d63fac8a7085dbb7cff5a071699f9937d438e3dfde7773f5b8c7c87e5ecdaa75cd37e7ebd7a07b357a824a647f24ab6a8f49f17ebe129e365391a45d279503971e1cba2edcd13ce8b544ac9290befdfda13e90feeb05a0f196360a69fbbad19e74f7ca005c269d2a045c7fecc2d239431c1a2c0e9ef9f279e3c5de201b83e749b78d367519f4356c2748f2b1db5c9e825bedac1bb032dd644e2f240be6155fa97c535cca90c55d01927934d44651d23e0bb0587412f0f75a5f143fe9b1bbac7e8a2695c83ae2b7d3e1060f24d6c42a22aa054a4b3296b79360ec2f874b69682b0492ac2b062140be5afab8e270556301f5aa5d7944cabcd87bc89ed4602cf6a4287e05615048fa31de8f489fc33a706e922825c0b2fc84dfe4f40762669370a944a659587c7474a6c5598ccb8986980393c17991fa660ece7438aab00e672966d6e29e009db407c6475f299387f00bcd32362aac622a0197151249f35040b58f49f0b4c0dd561f354ad4088d582987a7c37e6cd382848e5a5c41f04b5551e73d2a68eb715502d2b82a3df78744d615ba61a83946d3bf955af9e4dc609fcaeb72996522f840a960491d665994e961e5ed8a1da209248659db65f3bef0bcaf8392914a6c63d8794f5f838f5f87d18adc52844ad2e42a6429a95b822d0c072bfef1c38fa2359224f202248d89f31f8bfa969c76f1baa14371935ce1dedd9580c991b5778bc29a18d6034c2fde8361d94848d288eec2876c9437a8baf354ccb6fe510237cc16d529969db189162716b9b60b82b24471d870f9dfb592948b4c7c40a2bee1866d981824d4fd84d6a2d2c14ca2f167f6a214b6802e395976d5d3ad94e20ddec19a313de1d08cb684b292e97889c72dcf9338514bd7fd1252665b039f55deab694374feb908dda7a56f7000bc77861ce7a984f3392549ce9a1e1d486d34d61bd715180fa74b9fa5776c1e9dc78cb029640dfee19af78027d0554fbb005ae4551efe30c1b05d38e4df80c2f5f2a0acbe580b5ccbf3332561b07b0bb8d394dfbbbfebd960d150f24d330969a5ae59de70ab536870884031489870097f3576e9f8408280ff44040d91b6242e67bfd5410eec9eb2917336178c18903e0e58d26e675029a43e40763eb8deca19f7d8a9574c83fead8cbcf689e11161917ee5ba9e2ede4a92182e53da6e7405e1b07e364c1b5bcb3755f19f9c9c5837cfc8657521f7c847eb0fe75fbd82f93a10441b270a329f7496b51dc6c59418eb460392bc3021854b08acf7113089dddcedf3063217583c64a983cc2e418757b4d69967925a251d855e8bba80857362220f29159f6b00c739401aa6bd5ee899c7add32c117c65ea41641e16e5cb88b5287fd763c4d85128a183be1c0d9f283034d2aa321d099830ae0d2f831d701ce9f4512072353d190292aa6fbaca35cfadd2d3541747bf0069ebfcc9baa5a78bdd82d1ee6cc0948c026508d9daa9f7cb8172d3b2f9511fad71c51802f1f6c57714e91a1b61dd1d414c7b8ecde89bf86cc5e5f617e89c38f98216229f8fe18313d430ed8c1482318fe9808d04ac8b34b84b0a86aa4234add7ddf5e40e583ecf7b1fba11171137fe0fb94fb37f469019b1d6c5f00f961e5fd648749d2d53ce4fdbbb2fa5fc0f146e74925ebb018bada4c5152a582d95c5149ec5d57cce57cab2182a2975233c59f950c7323bdfb9f3dafb4936d0a40b237e2c9bf97721ea3373e29a2cb1255df43e4cf82293aff513f71eef102b1e2d426f41949d9f3dc7fab44498a1358e21b93af042b4a24654cdec0b3b073dbe554950142f1aa252ba5a70ad3bcc709be1c771230e68cc97c03acd78e12d3dd2485115b38b3226b937128ed74c4367c553a60f77b8ce900b35165876f21fa2eeb04198dd2c25db601edbe82b752e8ba471c70ce44deb86abe0c12a1c83ddb02302fe7b7112697fd109b91ceadc7a71467f83429a759086574470cae70b5ec869ea809f4e395e8ef3f68449f77bf0bcc9b8ed6be2d5f6005924dcaf613d4dad8ab7ad434dbe2577ea54651b19cbf6dbd663e1e06f69fd2a6e6ef3670b4ff9f2da995d50c297b341233f7775d3365a7beccb15551da032af94e8b0c78bcde02f43e28d15c49700ce8bc1269dd5fadc043250449aaca53e206c6b09820bf96f3b9c217bdf5775a03f5cc7d9414f2e4a30535ec04a184e6f34490f18420974e9a09cad5e2c5b657286e37c8cc382a06004a09620a23e540ff143c6d63bbf0c1eee9ae35c3e3f25c6fd1429a632426b43401524ed5a9b70d794962a54aa96fe4983a2ec30c875cf4ab44051884c089e55cc1ce3978a7ed61a42597b01859d5cb02d6a979e31b45f8d93784e0ae7dfd1267a2a4708c1eccac72c778eeef10edd7207a565f1e7eef8f896903ba7f084912bd9c20de83d2ccd4c2a2475881e672351a01d0b11b9be644e0b82ac3d6f87c560110412976d0a124b3288b458284c992769120b2aec9e923d600263378b83bb72dd3f585101a82253025a3865ecb300530a99f765e25f81220c77361e21ac356e9277f51acca68ab180f94fa2d58a85ffee3b76dcede512c5911f7c83fbdd35250ffe91ebaa257ef9227cf774aab293cc7e31e2066237dbf34cb93d7b1bd36042ad0f541d4c80f4c70c52e115b16e49a802955f750289b5132a4ff09b01e6636ee4646a5e53d6dd9ce2747b1f002d35db27146ef84a16b1fdd4796c09d8d1e1c4768010a616ea83ef98c88ea780dafe74152b6bdfe6ed12a6274a52771a663d6816786c71d535d97fa3765165c37461424edbc0885a4f954d1d33dd9273fae1949720a14dac2e4feba650f277247ae58ecafb84b2e6a668a13e280dfe50a43c55f021ff760dc194939784df1299c9d068fd95ed9b9ec0ce993d56bf547eb7a9db2a6e7bd8d44b5dab917a6b9e2971a528492cd546dd645accd5bf70c5750be400ebba51ccfa8d18c15a79cf440fc9be6569f18ca7af42264c84e3a29549a58f98ffcf757db20875fb5fb8c2bf8714429bdece8b3375c2213324d42b2264e0b87afc6056a98d50f9ea5c3a6833a475d0040b92c397bab94963805e013ea1a18d397cbe3510379e25a2409a50a7c8e5f0cf5e59dd4fe63cb18103c16ec1eaeb1e3f893918c57b56c5a73d529efd0e18afc00b03a934e7a57f8dc0f5ff9d6d62c92e5f31734b06316ad8a799346330d0ab0fff2fbfd3020bbbe263f45bda57f6a160b81104459eb06e9418cd17fe0d2e1643fa5513e76405b92a23d22bcf972bf4a92b0b7e", 0x1000}], 0x3}, 0xd684cd0c703ba49e) ioctl$KVM_RUN(r3, 0xae80, 0x0) 10:09:22 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000000)={0x0, 0x0, [0x800000000, 0x400, 0x4, 0x0, 0x4]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:09:23 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000000)={0x0, 0x0, [0x800000000, 0x400, 0x4, 0x0, 0x4]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:09:23 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000000)={0x0, 0x0, [0x800000000, 0x400, 0x4]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:09:23 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000000)={0x0, 0x0, [0x800000000, 0x400]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 784.313150][T26181] QAT: Invalid ioctl 10:09:23 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f00000001c0)) r3 = syz_open_procfs(r2, &(0x7f0000000000)='syscall\x00') ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f00000000c0)={0x2, 0x200, 0x1, 0x7, 0x19, "9ff87ea784d90c77b4b5236614739eb0ed4419"}) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) 10:09:23 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x0, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0x0) 10:09:23 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000000)={0x0, 0x0, [0x800000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:09:23 executing program 1: r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = syz_genetlink_get_family_id$netlbl_unlabel(0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="c800", @ANYRES16=r1, @ANYBLOB="00022abd7000fedbdf25040000002b00070073797374656d5f753a6f626a6563745f723a7373685f6b657967656e5f657865635f743a733000003300070073797374656d5f753a6f626a6563745f723a756e636f6e66698a65645f657865636d656d5f657865635f743a73300000080005007f00000114000200ff010000000000000000000000000001080005000000"], 0x3}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xfffffffffffffee9, &(0x7f0000000500)={&(0x7f0000000440)={0x84, r1, 0x0, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x2d, 0x2, @ipv4={[], [], @multicast2}}, @NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:public_content_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IFACE={0xb, 0x6, 'dummy0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x1}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xffffff78) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="3a258211f663a7724bdef6a53bfce1e775d7406a72274814a327edb11e2daf85534aa6f5083067b0248878f07a91df1a4c99e6643d3baad0a9f349be3cc11cbf51b4f7bff473e9c280351ccbefebd642492cfc5ead68cf6a0506f137fe0ef32e98becc03d2ad92859d5cb4318193518471ecde4adee3"], 0x5c) sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) ioctl$VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f00000000c0)={0xc5bb, 0xa, 0x4, 0x200000, 0xc990, {0x0, 0x2710}, {0x4, 0x5b80667647a9855a, 0x20, 0x0, 0x81, 0x40, 'q+\f\"'}, 0x2, 0x4, @offset=0x4, 0x910}) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="3a258211f663a7724bdef6a53bfce1e775d7406272274814a3f23327edb11e2daf85534aa6f5083067b0248878f07a91df1acc99e6643d3baad0a9f349be3cc11cbf51b4f7bff473e9c200351ccaefebd642492cfc5ead68cf6a0506"], 0x5c) sendfile(r4, r4, &(0x7f0000000000), 0x8080fffffffe) ioctl$sock_x25_SIOCADDRT(r4, 0x890b, &(0x7f0000000340)={@remote={[], 0x2}, 0xd, 'veth0_vlan\x00'}) r5 = syz_open_pts(r2, 0x0) readv(r5, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) ioctl$TCSETSW(r5, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, "0000004000f119000000000000000000dfff00"}) 10:09:23 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x34, 0x30, 0x103, 0x0, 0x0, {}, [{0x20, 0x1, [@m_bpf={0x1c, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0xc, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}]}, {0x4}}}]}]}, 0x34}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0x0) 10:09:23 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000000)={0x0, 0x0, [0x800000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:09:23 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="3a258211f663a7724bdef6293bfce1e775d740627227481499f23327edb11e2daf85534aa6f5083067b0248878f07a91df1acc99e6643d3b0000000049be3cc11cbf51b4f7bff473e9c200351ccaefebd642492cfc5ead68cf6a0506"], 0x5c) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f00000001c0)={0x0, r2, 0x1}) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000200)='NLBL_MGMT\x00') r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r3, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4]}) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="26bba5ca3b729831bc655980cae67ebb55dcfc343557c9a94cbc4b8cf018c24e83a285c741d2d0335f87b2f0de47bcb46771a5e0bd157de644c2a353f43293c5ab0a980998beb705caff4624a65f60041e3bb350c14aa4c3c2a91fff2c8e853651152e4eddfb592c6061ffa76c1ab0b26ef3ca3d88651e2f733f32a2e553dccccf889911eb825247e0669d755f59b351bcf1dd3a33f5157b70171cc55902ae737600babab58fd35e20953034d9879dc9f82a9f6ddafa3fffdcb2", 0xba}], 0x1}, 0x0) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000040)={0x0, 0xfffffeff, 0xbed, &(0x7f0000000000)=0x6}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 10:09:24 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000000)={0x0, 0x0, [0x800000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:09:24 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000000)={0x0, 0x0, [0x0, 0x400]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:09:24 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000000)={0x0, 0x0, [0x0, 0x400]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 10:09:24 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x0, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0x0) 10:09:24 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="3a258211f663a7724bdef6a53bfce1e775d7406272274814a3f23327edb11e2daf85534aa6f5083067b0248878f07a91df1acc99e6643d3baad0a9f349be3cc11cbf51b4f7bff473e9c200351ccaefebd642492cfc5ead68cf6a0506"], 0x5c) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) ioctl$TIOCGETD(r1, 0x5424, &(0x7f0000000000)) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r2 = syz_open_pts(r0, 0x0) readv(r2, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) 10:09:24 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x34, 0x30, 0x103, 0x0, 0x0, {}, [{0x20, 0x1, [@m_bpf={0x1c, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0xc, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}]}, {0x4}}}]}]}, 0x34}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0x0) 10:09:24 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000000)={0x0, 0x0, [0x0, 0x400]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 10:09:24 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)=""/237, 0x37, 0xed, 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x6, 0x10, 0x4, 0x0, 0x4, 0xffffffffffffffff, 0x0, [], 0x0, r1, 0xfffffffd, 0x2}, 0x40) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYRES16=r1], 0x2) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000180)=""/143, 0x8f}, {&(0x7f00000000c0)=""/85, 0x55}], 0x3, 0x7ff) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r2 = syz_open_pts(r0, 0x0) readv(r2, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r3) setsockopt$IP_VS_SO_SET_EDITDEST(r3, 0x0, 0x489, &(0x7f0000000340)={{0xff, @private=0xa010100, 0x4e24, 0x0, 'fo\x00', 0xc, 0x335, 0x28}, {@multicast2, 0x4e24, 0x10000, 0x7ff000, 0x6, 0x9}}, 0x44) 10:09:25 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000000)={0x0, 0x0, [0x0, 0x400]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 10:09:25 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4]}) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="26bba5ca3b729831bc655980cae67ebb55dcfc343557c9a94cbc4b8cf018c24e83a285c741d2d0335f87b2f0de47bcb46771a5e0bd157de644c2a353f43293c5ab0a980998beb705caff4624a65f60041e3bb350c14aa4c3c2a91fff2c8e853651152e4eddfb592c6061ffa76c1ab0b26ef3ca3d88651e2f733f32a2e553dccccf889911eb825247e0669d755f59b351bcf1dd3a33f5157b70171cc55902ae737600babab58fd35e20953034d9879dc9f82a9f6ddafa3fffdcb2", 0xba}], 0x1}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r3) ioctl$RTC_WKALM_RD(r3, 0x80287010, &(0x7f0000000000)) 10:09:25 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)=""/237, 0x37, 0xed, 0x1}, 0x20) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000010", @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200080000001028e6c467144d2fa833"], 0x5}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x15, 0x10, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], r3, r1, 0x2, 0x1, 0x3}, 0x40) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r0, @ANYRESDEC=0x0, @ANYRESDEC=r1, @ANYRES16=r4], 0x3c) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r5 = syz_open_pts(r0, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r6, 0x8982, &(0x7f0000000180)={0x2, 'erspan0\x00', {0x7}, 0x6}) readv(r5, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) ioctl$TCSETSW(r5, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x2, '\x00\x00\x00@\x00'}) 10:09:25 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)=""/237, 0x37, 0xed, 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x15, 0x10, 0x84, 0x8000000, 0x0, 0xffffffffffffffff, 0x705b, [], 0x0, r1, 0x0, 0x1}, 0x40) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)=""/237, 0x37, 0xed, 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x15, 0x10, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0x0, 0x1}, 0x40) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)=""/237, 0x37, 0xed, 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x15, 0x10, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r3, 0x0, 0x1}, 0x40) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRESOCT=r1, @ANYRES16], &(0x7f0000000280)=""/236, 0x125, 0xec, 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x15, 0x10, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r4, 0x0, 0x1}, 0x40) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x288000, &(0x7f0000000680)=ANY=[@ANYBLOB="3570706572643286a969723d2e2f66db44d700f50bdf0800806469723d2e2f6275732c775bf0cd64696fc04b846dd29be2eee3a360fd7fd7f47e3f94067418fdf9a7b31ad712fcb75efd76e8db2e5f5677e32952613e243c31119e5af8b24627643c852a6828808f8574d62cf4573b86c03eb0b176e49b04da23ec50b0e75b50225e1f833e65f08fff2140ad85f6806735a9b9779cd6cbd68cc1e0f8a8a7987937864acf79e46084ca7cf59abf80afafbe64dcce988251ab51592615deddd1b830b146a902817b290528c6ebd7ee9d20f3f4b79d99171fc8a5ae73bedff08dee1e8c76bfafc67bbc17dd754c6825f16a3e25d244ad50566caa4f04d9492754b847ceb33ea47cfeffcc1dd9db27288e2ad5ae33ef31a1f55c8772e6bb", @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYRES16=r2, @ANYRES32=r3, @ANYRESOCT=r4]]) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r6, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4]}) syz_genetlink_get_family_id$wireguard(&(0x7f0000000200)='wireguard\x00') sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="26bba5ca3b729831bc655980cae67ebb55dcfc343557c9a94cbc4b8cf018c24e83a285c741d2d0335f87b2f0de47bcb46771a5e0bd157de644c2a353f43293c5ab0a980998beb705caff4624a65f60041e3bb350c14aa4c3c2a91fff2c8e853651152e4eddfb592c6061ffa76c1ab0b26ef3ca3d88651e2f733f32a2e553dccccf889911eb825247e0669d755f59b351bcf1dd3a33f5157b70171cc55902ae737600babab58fd35e20953034d9879dc9f82a9f6ddafa3fffdcb2", 0xba}], 0x1}, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 10:09:25 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x34, 0x30, 0x103, 0x0, 0x0, {}, [{0x20, 0x1, [@m_bpf={0x1c, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0xc, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}]}, {0x4}}}]}]}, 0x34}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0x0) 10:09:25 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)=""/237, 0x37, 0xed, 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x6, 0x10, 0x4, 0x0, 0x4, 0xffffffffffffffff, 0x0, [], 0x0, r1, 0xfffffffd, 0x2}, 0x40) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYRES16=r1], 0x2) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000180)=""/143, 0x8f}, {&(0x7f00000000c0)=""/85, 0x55}], 0x3, 0x7ff) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r2 = syz_open_pts(r0, 0x0) readv(r2, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r3) setsockopt$IP_VS_SO_SET_EDITDEST(r3, 0x0, 0x489, &(0x7f0000000340)={{0xff, @private=0xa010100, 0x4e24, 0x0, 'fo\x00', 0xc, 0x335, 0x28}, {@multicast2, 0x4e24, 0x10000, 0x7ff000, 0x6, 0x9}}, 0x44) 10:09:25 executing program 5: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendto(r0, &(0x7f0000001440)="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", 0x1000, 0x40, &(0x7f0000000300)=@in6={0xa, 0x4e20, 0x1591, @private0={0xfc, 0x0, [], 0x1}, 0x4}, 0x80) write$P9_RREADLINK(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="3a258211f663a7724bdef6a53bfce1e775d7406272274814a3f23327edb11e2daf85534aa6f5083067b0248878f07a91df1acc99e6643d3baad0a9f349be3cc11cbf51b4f7bff473e9c200351ccaefebd642492cfc5ead68cf6a0506"], 0x5c) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) ioctl$SNDCTL_DSP_RESET(r0, 0x5000, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r3, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4]}) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="26bba5ca3b729831bc655980cae67ebb55dcfc343557c9a94cbc4b8cf018c24e83a285c741d2d0335f87b2f0de47bcb46771a5e0bd157de644c2a353f43293c5ab0a980998beb705caff4624a65f60041e3bb350c14aa4c3c2a91fff2c8e853651152e4eddfb592c6061ffa76c1ab0b26ef3ca3d88651e2f733f32a2e553dccccf889911eb825247e0669d755f59b351bcf1dd3a33f5157b70171cc55902ae737600babab58fd35e20953034d9879dc9f82a9f6ddafa3fffdcb2", 0xba}, {&(0x7f0000000180)="22f65bb7dd74a0593ba0ca2623428b6977ea3c025ddcb95341e139d07e238cbdf1940e4691ce79942f1d979947778342829244bb4cc75c88c73d213bdd69f008512a1c25aa92ec944947d62c64bedf55446e6b6c4d31311b035bab573a623dc044cc8e1ff9f23c4288d6740dabd951424e849153f0a097a2d7a79a68e102dedfd4ebfba06bc6c9578ec41674f3aa16668baf41f4c45eb6ea", 0x98}, {&(0x7f0000000440)="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", 0x1000}], 0x3}, 0xd684cd0c703ba49e) ioctl$KVM_RUN(r3, 0xae80, 0x0) 10:09:25 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x34, 0x30, 0x103, 0x0, 0x0, {}, [{0x20, 0x1, [@m_bpf={0x1c, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0xc, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}]}, {0x4}}}]}]}, 0x34}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0x0) 10:09:25 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000010", @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200080000001028e6c467144d2fa833"], 0x5}}, 0x0) sendmmsg$inet6(r2, &(0x7f0000005900)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x2, @private2={0xfc, 0x2, [], 0x1}, 0x9}, 0x1c, &(0x7f0000000100)=[{&(0x7f00000000c0)="8eeedd7e8bd713a06536ceae16e17be9b34918a29b5c96ff9d7fb39bff00c84898f2029fb5f8db6781e77706e30ca1631a77ad995130303c5b7f6393", 0x3c}], 0x1, &(0x7f0000000340)=[@rthdrdstopts={{0xa0, 0x29, 0x37, {0x87, 0x11, [], [@calipso={0x7, 0x18, {0x3, 0x4, 0x3, 0x7, [0x101, 0xfb9]}}, @calipso={0x7, 0x30, {0x2, 0xa, 0x6, 0x6, [0x4, 0x8, 0x7, 0x2, 0x24]}}, @calipso={0x7, 0x18, {0x3, 0x4, 0x6, 0x9a5, [0x2, 0x4]}}, @ra={0x5, 0x2, 0xf2f}, @hao={0xc9, 0x10, @loopback}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @enc_lim, @ra={0x5, 0x2, 0x20}]}}}, @hopopts={{0x88, 0x29, 0x36, {0x33, 0xd, [], [@hao={0xc9, 0x10, @remote}, @enc_lim={0x4, 0x1, 0x7f}, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x4}, @calipso={0x7, 0x40, {0x1, 0xe, 0x0, 0x20, [0xfffffffffffffc01, 0x908, 0xfffffffffffffeff, 0x6, 0x5, 0x689, 0x100]}}, @jumbo={0xc2, 0x4, 0x7ff}, @jumbo={0xc2, 0x4, 0x3f}]}}}], 0x128}}, {{&(0x7f0000000180)={0xa, 0x4e24, 0x1, @loopback, 0x5}, 0x1c, &(0x7f0000000640)=[{&(0x7f00000001c0)="fa53d7af28f2ef225df0bdfa0446d3a0fb1a95b6673557cfb37ba0024ca9e720b88b3ad06cce868cbc09efb4d09604e894c51cb300394291c8bcaa96dbb780418bd57a68550fd5d3019c6b1a9f5d5e6de9bd49b819d750193258c45b6540accb05bb5ea0545de26a01eaf5735676b70a173e43b0d5f35ea35ad694a0318616e15de6c57aef2b4fcc3314182f79d4b59df75a8a39bdb731b58e1d55", 0x9b}, {&(0x7f0000000480)="96fec046bc00aae6f671356a52b5884c567e3fb86270094259a3535c7d0f052966b302758cbe20bb7303e8f1f45172b15c53b7cb2ded6a849cb86898a8a7be84f8fadfcd81fc10000a98dd09d36950efe624100d94986f305ccc4397b0f5047fdf24bfb7ab245ab4fc7fcfd622e56bbcd43908616dd6c5bfe48b66cad5b5fc9946dbcdf12627f2f523354d3f53b3a2b1dfb6cfce6db5ba", 0x97}, {&(0x7f0000000540)="2e576686b46d16b78494c5e4fb992c45307db485fd5d9ef8486fe11ccb6f86826d52cc9c56fbddc201c0fca87fc5bccf048ef6e95a9a38604db5e96e8e9d33b459bc0098bbb46bb630e9ed74495258a28fa54576dd0ca637b9f87d74f10a1c358ed8327606ac398241e061e5b2ba28a5189e1b8ec27a473750b79208b2feb861f39f60bc1a6a0a958cb6cfab055dcb27f94af6e3fb44e021902acd0185af26", 0x9f}], 0x3}}, {{&(0x7f0000000680)={0xa, 0x4e22, 0x100, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x8}, 0x1c, &(0x7f0000001b00)=[{&(0x7f00000006c0)="c9af15c9ec5006a64604fa2db76ed9c122d9fbbef8e6528f517c12911615f8dada3bdf439f0aed66541be84d40966f4a", 0x30}, {&(0x7f0000000700)="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", 0x1000}, {&(0x7f0000001700)="a4b67f159968e15489c868f868a9f00d7c9e96a7d2543f9a2196ba8bfbd3105d1033e94de4e015316649cfdcb020be93498883b7187d9cec9738f0a083d8f7e064de2aa7caf440f4da36ca5c60d77c65c6828f6f9ae88aa83764df52f2a6c04ece9fd8cfeb78a4d9658742f2fa5da1574ccdaf1eca5f0f7233ca1317a1d1d5d3131aebccf5b72728bdfdb3940226a3367b5eb4374d4be5b87dfe2d4198c1679bc7a47190b4667c29c37d3c8086199ccc20c982fba4a9127eb570b96cc1c4e3365a69090247f52cccfd", 0xc9}, {&(0x7f0000001800)="b83917543fdf7d1545b5f1af4d862b897a5f2529522b9c9901f886c26e1147d2f543bebca8c11b1340009b805ffbe3e08fc8e3be28fe4f56553e7cf2e9b9f19cab0e61d6", 0x44}, {&(0x7f0000001880)="4086b4cbfd59d55ef2db0baa4663e05b2e97a0e7e9f5cf718e38", 0x1a}, {&(0x7f00000018c0)="da47b7e9b902b63081cf5004ce22ae7ac07a486b22e6255078040642c988331acdb7f194a8eaaf372161b04d15d6b31e6df39f805c18a44983ffdd89a2e79a9e6bc9d5c8546169ed7d6c495491661ad6074fa6b77e3bcdcd4e9de89181f945885538098e51e22cb88fb1d479b7fcd3d8f492dda18e52fc4c7a4c1295e224a873e7485f5fb3ce0f54ac20e88df78db67ba27ba3d504c96e5d012f76299fa1ff5e45e6069dff37ddaa236b5a0bf0bded7f782b159703e34a1bfef11cef44d5b9c26f2e928384e707bf2f5ce00c4af7c2e68e6fb92fdd2d66e395", 0xd9}, {&(0x7f00000019c0)="d79677bda4861700194ec926aca64c5fe0d350f39cdb011f0346bca4a25e376a62fc85811315c3cecfe098c34352ad523318d44b85e3728a3ae9492406d873792ef452059199ef07137b59e0316fa8e1861d51d7d04ccc8afc893f3900895a19f606e330bd039b72d49cb3c5df3e8bd95cb345abd15516b9a96992cf364c48fa744ffa645e8a07bf341a2864053e3d6c6a78d9aa6680e0d38391d706ef5a0d355033629a5b8302788a19fa34b0599f043ca3727612c0174ad758a875dcee13e3eb", 0xc1}, {&(0x7f0000001ac0)}], 0x8, &(0x7f0000001b80)=[@flowinfo={{0x14, 0x29, 0xb, 0x6}}], 0x18}}, {{&(0x7f0000001bc0)={0xa, 0x4e22, 0xdbf, @mcast1, 0x2}, 0x1c, &(0x7f0000002c00)=[{&(0x7f0000001c00)="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", 0x1000}], 0x1, &(0x7f0000002c40)=[@dstopts_2292={{0x100, 0x29, 0x4, {0x0, 0x1c, [], [@jumbo, @calipso={0x7, 0x50, {0x2, 0x12, 0x4, 0x6, [0xdc, 0x0, 0x2d, 0x400, 0x81, 0x5, 0x2, 0x3ac2, 0x69]}}, @pad1, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x50, {0x2, 0x12, 0x6, 0x1ff, [0x90f, 0xbeb, 0x4, 0x100, 0x34, 0x4, 0x4, 0x5, 0x6]}}, @calipso={0x7, 0x20, {0x0, 0x6, 0x9d, 0x4, [0x40, 0xe3b, 0x4]}}, @jumbo={0xc2, 0x4, 0xfffffffa}, @ra={0x5, 0x2, 0x420}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0xffffd903}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x1f}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x21, 0x4, 0x0, 0x5, 0x0, [@mcast1, @empty]}}}, @pktinfo={{0x24, 0x29, 0x32, {@remote}}}, @hopopts_2292={{0x30, 0x29, 0x36, {0x11, 0x2, [], [@jumbo={0xc2, 0x4, 0x7f}, @ra={0x5, 0x2, 0x1}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@mcast2, r4}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x800}}], 0x200}}, {{&(0x7f0000002e40)={0xa, 0x4e21, 0x6, @private1={0xfc, 0x1, [], 0x1}, 0xffffe149}, 0x1c, &(0x7f0000004300)=[{&(0x7f0000002e80)="8519124f9614f6a98744480d457fd1a16e28b1803184785a9b4d8e5f42e4412bb68de682de23cec1eab88ec7c834a6a9e13737c23217ae57fd83", 0x3a}, {&(0x7f0000002ec0)="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", 0x1000}, {&(0x7f0000003ec0)="71fabd3d96af2fcde5213638f983429a5f42d15259e4edfbc10ef21519047416149273e79e54bc0f19a7edf69cff2f4e861963d376c6d2fd827e44fe6382c8d4369ea22b49a988b359fa4be710cdb584c1e30c555c2c5034e229768ca13418d6e00c3968ec1a2694820d439ea0c82be53890bc28d1349f0abd34b4d2afd77bf2d0bd81cd4c8284840dee7c04f188694348191097e81874e87396010a5aedc24a63c78c846d26167fdaeef86f15e044daaebcb804598806ba", 0xb8}, {&(0x7f0000003f80)="e167dfc392b5bab2eea47f6ee10ac26b830f497e900634c5e76f0358933b18ea7514bba61af183113f0bce8754c8c8c2a5d006a01f593ac48c9267fde7a3201c52a11bee500b6a07f710c31ef6ddff7dcf89ff2080e0d67ab40b3ee61e69a66c709457fabf80b62fe494c5900eb8b697bb0cf72a316baf87559dd600a9d1b3bb74e2d4c0df2db4b020c3a68d1696b871c612ec5e2e789f891fac92a8532d3805a5a70aa035ee20e7c36f629ca2dc3e", 0xaf}, {&(0x7f0000004040)="afb9edf3a4329f8c66d13add173e2feecef24928b51b56f2ffd5ef747146b92ad6e5a3f7c297959a150173fca16b39719fa713575609f038e720196f8864a14b22106cb1b84a2d9e574f12259906e28ee2480c1d0b590348339c798ceebf2a165e0478e8c43dfc877a4b29b66639c1f8b761171a9744966cfb4bd86e9284010d2724aa303ea48abc81d9c27435698faba6802723debe5144305e6f3a30f144a7910bab3798c7d3da81bc72fe", 0xac}, {&(0x7f0000004100)="47d0d5413f2cb33184550853e9b0a9fd6474ce85df05f6fe37654e54b15202583fdfe52907586e789cefb5dee4b123d8e068a87f651984e75f6d74f0a9b6e8ecccbca5cf2936dd1fcedc608d746471ff28eaa40077bf7341a85c5e5eb1cf53adb7", 0x61}, {&(0x7f0000004180)="80668cd0f34876eae1ca0dda2e1e1c79638b89921dc5fc576db86fa93cf2ab1b4199eee13f23c95b6d47897c06272468f664ac651d891b0343e61506d664f8f078ea213747c4ecd21f6937a6abbac7809dda332b37e73e5aae41c16f029251d43569918a7f0bfe5918326b2a4a62fba9302b2f2cafe1e3be6e709cdeefd0728771bcc311b0d200b4b16da47e70ef802fe4dbe317da4beb00d1ea1258246a24c165e9876c534963c73569a60baac661db7505142234dce9446bd425bdb90a8ebf09f14501cdbeb9161d73f8d35edf", 0xce}, {&(0x7f0000004280)="cbe400e099d659fe0003c4f3ceb8b3ea6d1194aa7d6452ef278572ebec3c85a6a4eae85db5fac934e1d5055723aa24b7a7a40807396b1614498a60a5e253317e08bc29a7f4f2479e9c3ff0aeeffd4a2d14ab4d39aadc920fdf7f81969a2024bbcbb99b", 0x63}], 0x8, &(0x7f0000004380)=[@hopopts={{0xb8, 0x29, 0x36, {0x2e, 0x13, [], [@jumbo={0xc2, 0x4, 0x400}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x7, 0x8f, "52ec95aa8aad9e19fec9e95d9826759d03ef36b830262a0cd7b2ccf4faeb45e7354997cdfe2c9f817efbfb846cddcaf1755200391c6814cffa5347d312e801ff3c2440bcea616900e4264db7503260b8fc9e3b3dde2b4b77c577ef911528b728e20c85a2e60ee79f73192d6e2a9fc30bdd7b73ba9c801e7fb458d6f0d533e5ddb4bffead7b0282a6812e4b8603a379"}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x9b68}}, @hopopts={{0x178, 0x29, 0x36, {0x2e, 0x2b, [], [@jumbo={0xc2, 0x4, 0x5}, @enc_lim={0x4, 0x1, 0x5}, @generic={0x6, 0xb2, "59d56f3d6608e479ddde397a25a98a2aada6db6d558d1c6917a1c93f8b0b5a8aed8058185dd3d6f8c2741f58576f6364b1fb0abaad9b8649f8cb4b3d3b6a4a5a98ea8878d475eb5c0572151c2aa7d4d2fc20d0782618ddc7958451e37c5ed253217b7df61404e094f738c7459117677bbf4b4dec2764456b3b9e36ddf10377e386ae3d4f69dcec4384007304ef5a6cb7ad9f39f130d33d3a5cdae84cfaefb40f62f4312655d2048f855dfbed283999786f68"}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00'}, @padn={0x1, 0x1, [0x0]}, @generic={0x7f, 0x76, "172c6519e6f88c4c98997501beb50da7a2e64b61023d22c973cfc5035865267cc2bf2cd4825b329cf0047493fa0fecfd0139f7751c40d9fb9c49691579c0ded9d31f9435792e25cb1cf63293a49ba382c67b094b26aa74b89f9b984409e5b27b6fae739a276caa9061ea00a93dca6f256fee61f2efb7"}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0xfff}, @generic={0x7}]}}}], 0x248}}, {{&(0x7f0000004600)={0xa, 0x4e22, 0x6776, @private1={0xfc, 0x1, [], 0x1}, 0x401}, 0x1c, &(0x7f0000005800)=[{&(0x7f0000004640)="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", 0x1000}, {&(0x7f0000005640)="36597562a7b06e6e3c2e0e0c1cdafb7b2c5cf162d4289ccc964d592186f970643eb1c4d01424e9eb2c0143b9023665eb44e0177f977622aa078b78bc2b849f4dc7b3498db17d01fb521436405b6936eb24a184561953126dec844366ac16831af4051b3c620ebba726e23094cc4aa887eb3a418565ad88488e26dfa2d399d0e6fd2aa4ba405369a4fab480fec838620ed9bfd4c7e2b119626ba214a95058c98fa225b223c070893980839c72c87949276fb3f2109a7ebe9b3eb354e7ed780a812d24a62992d555985ecc2fef50f9a7924c56a94e6c96cde61f954212533433057067a6ff7dea2a8796b6017b6824bc0c5f8d", 0xf2}, {&(0x7f0000005740)="525f22dd202287454a136138aaba2620176ed614dcde38567577f37dfd5aad6de1232296b459b05a56ea90de78c188550c35feb94dce4fcffc322894c83a37f718546f98f6502d76689ad441e45a324545953c257a637662c15e8f2453b133e90c617514f3329bb3f1a06df87974555e3893ce88ddfae3bd9e7976c99ecb493e384b0d044007215ae6dd8b7621", 0x8d}], 0x3, &(0x7f0000005840)=[@dstopts_2292={{0xa8, 0x29, 0x4, {0x92, 0x11, [], [@ra={0x5, 0x2, 0xff}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @ra={0x5, 0x2, 0x1}, @jumbo={0xc2, 0x4, 0x1}, @hao={0xc9, 0x10, @mcast2}, @hao={0xc9, 0x10, @ipv4={[], [], @rand_addr=0x64010101}}, @hao={0xc9, 0x10, @empty}, @calipso={0x7, 0x30, {0x0, 0xa, 0x7, 0x7, [0x1, 0x4, 0xb050, 0x1, 0x6]}}, @pad1]}}}], 0xa8}}], 0x6, 0x48000) 10:09:25 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="3a258211f663a7724bdef6a53bfce1e775d7406272274814a3f23327edb11e2daf85534aa6f5083067b0248878f07a91df1acc99e6643d3baad0a9f349be3cc11cbf51b4f7bff473e9c200351ccaefebd642492cfc5ead68cf6a0506"], 0x5c) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x20, r4, 0x709, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) sendmsg$NL80211_CMD_GET_INTERFACE(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r4, 0x8, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40080}, 0x8000) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r5, 0x0) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x14c000, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r6, 0x4048ae9b, &(0x7f0000000100)={0x90000, 0x0, [0x80000000000, 0x0, 0x0, 0x0, 0x4]}) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="26bba5ca3b729831bc655980cae67ebb55dcfc343557c9a94cbc4b8cf018c24e83a285c741d2d0335f87b2f0de47bcb46771a5e0bd157de644c2a353f43293c5ab0a980998beb705caff4624a65f60041e3bb350c14aa4c3c2a91fff2c8e853651152e4eddfb592c6061ffa76c1ab0b26ef3ca3d88651e2f733f32a2e553dccccf889911eb825247e0669d755f59b351bcf1dd3a33f5157b70171cc55902ae737600babab58fd35e20953034d9879dc9f82a9f6ddafa3fffdcb2", 0xba}], 0x1}, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 10:09:26 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x10, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="3a258211f663a7724bdef6a53bfce1e775d7406272274814a3f23327edb11e2daf85534aa6f5083067b0248878f07a91df1acc99e6643d3baad0a9f349be3cc11cbf51b4f7bff473e9c200351ccaefebd642492cfc5ead68cf6a0506"], 0x5c) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) add_key(&(0x7f00000000c0)='big_key\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000200)="b56c72626e2961df5addc5380903a5184aa4232f55de38f156a8c10239c919ca121b7f1e8d58bc1bb891d0dc3622449768fdfa19b4f1d4b7bdc6934fc114be97ae30107214610401fe1d1a2a66b007ab5f2f948082", 0x55, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa) r2 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2c5, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000000)="1d", 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r2, r2}, 0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={'tgr160\x00'}}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000180)='id_legacy\x00', &(0x7f0000000400)=@builtin='builtin_trusted\x00') r4 = syz_open_pts(r1, 0x0) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="3a258211f663a7724bdef6a53bfce1e775d7406272274814a3f23327edb11e2daf85534aa6f5083067b0248878f07a91df1acc99e6643d3baad0a9f349be3cc11cbf51b4f7bff473e9c200351ccaefebd642492cfc5ead68cf6a0506"], 0x5c) sendfile(r5, r5, &(0x7f0000000000), 0x8080fffffffe) write$P9_RLINK(r5, &(0x7f0000000000)={0x7, 0x47, 0x1}, 0x7) readv(r4, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) ioctl$TCSETSW(r4, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) 10:09:26 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x34, 0x30, 0x103, 0x0, 0x0, {}, [{0x20, 0x1, [@m_bpf={0x1c, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0xc, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}]}, {0x4}}}]}]}, 0x34}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0x0) 10:09:26 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x44, 0x30, 0x103, 0x0, 0x0, {}, [{0x30, 0x1, [@m_bpf={0x2c, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x44}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0x0) 10:09:26 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)=""/237, 0x37, 0xed, 0x1}, 0x20) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000010", @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200080000001028e6c467144d2fa833"], 0x5}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x15, 0x10, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], r3, r1, 0x2, 0x1, 0x3}, 0x40) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r0, @ANYRESDEC=0x0, @ANYRESDEC=r1, @ANYRES16=r4], 0x3c) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r5 = syz_open_pts(r0, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r6, 0x8982, &(0x7f0000000180)={0x2, 'erspan0\x00', {0x7}, 0x6}) readv(r5, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) ioctl$TCSETSW(r5, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x2, '\x00\x00\x00@\x00'}) 10:09:26 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="3a258211f663a7724bdef6a53bfce1e775d7406272274814a3f23327edb11e2daf85534aa6f5083067b0248878f07a91df1acc99e6643d3baad0a9f349be3cc11cbf51b4f7bff473e9c200351ccaefebd642492cfc5ead68cf6a0506"], 0x5c) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) ioctl$IMGETCOUNT(r1, 0x80044943, &(0x7f0000000000)) r2 = syz_open_pts(r0, 0x0) readv(r2, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) 10:09:26 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="3a258211f663a7724bdef6a53bfce1e775d7406272274814a3f23327edb11e2daf85534aa6f5083067b0248878f07a91df1acc99e6643d3baad0a9f349be3cc11cbf51b4f7bff473e9c200351ccaefebd642492cfc5ead68cf6a0506"], 0x5c) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, &(0x7f0000000000)='/dev/kvm\x00', &(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r3, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4]}) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="26bba5ca3b729831bc655980cae67ebb55dcfc343557c9a94cbc4b8cf018c24e83a285c741d2d0335f87b2f0de47bcb46771a5e0bd157de644c2a353f43293c5ab0a980998beb705caff4624a65f60041e3bb350c14aa4c3c2a91fff2c8e853651152e4eddfb592c6061ffa76c1ab0b26ef3ca3d88651e2f733f32a2e553dccccf889911eb825247e0669d755f59b351bcf1dd3a33f5157b70171cc55902ae737600babab58fd35e20953034d9879dc9f82a9f6ddafa3fffdcb2", 0xba}], 0x1}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 10:09:27 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x34, 0x30, 0x103, 0x0, 0x0, {}, [{0x20, 0x1, [@m_bpf={0x1c, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0xc, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}]}, {0x4}}}]}]}, 0x34}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0x0) 10:09:27 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x800, 0x0, 0x0, 0xfffffff9, 0x0, "0000b8410977f2ce47a42000"}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) sched_setattr(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x41, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x3e, &(0x7f0000000280)=0x8, 0x4) bind$llc(r2, &(0x7f0000000040)={0x1a, 0x320, 0x0, 0x0, 0x4, 0x0, @dev={[], 0x31}}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r4 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r4) bind$l2tp(r4, &(0x7f0000000340)={0x2, 0x0, @broadcast, 0x1}, 0x10) connect$x25(r3, &(0x7f0000000100)={0x9, @remote={[], 0x3}}, 0x12) ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f00000000c0)={0x8001, 0x9, 0x1, 0x401, 0x203, 0x800}) write$P9_RREADLINK(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="3a258211f663a7724bdef6a53bfce1e775d7406272274814a3f23327edb11e2daf85534aa6f5083067b0248878f07a91df1acc99e6643d3baad0a9f349be3cc11cbf51b4f7bff473e9c200351ccaefebd642492cfc5ead68cf6a0506"], 0x5c) sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) 10:09:27 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x44, 0x30, 0x103, 0x0, 0x0, {}, [{0x30, 0x1, [@m_bpf={0x2c, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x44}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0x0) 10:09:27 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="3a258211f663a7724bdef6a53bfce1e775d7406272274814a3f23327edb11e2daf85534aa6f5083067b0248878f07a91df1acc99e6643d3baad0a9f349be3cc11cbf51b4f7bff473e9c200351ccaefebd642492cfc5ead68cf6a0506"], 0x5c) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) ioctl$TIOCGETD(r1, 0x5424, &(0x7f0000000000)) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r2 = syz_open_pts(r0, 0x0) readv(r2, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) 10:09:27 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000340)={0x63, 0x2, 'client0\x00', 0x6, "693a19c492c75f52", "634826407008f30e959eb98ba795e7d2d536f0b1a36206aa8d8e27684ddb8720", 0x101, 0x3f}) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000400)='/dev/btrfs-control\x00', 0x101240, 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000440)) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r5) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_ATTR(r2, &(0x7f0000000180)={0x78, 0x0, 0x7, {0x8, 0x2, 0x0, {0x1, 0x8, 0x1, 0xaa, 0x3f, 0x3, 0x1, 0x800, 0x10001, 0x200, 0x9, r5, r6, 0x101, 0x9a}}}, 0x78) r7 = syz_open_pts(r0, 0x0) readv(r7, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) 10:09:28 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x420000, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x8) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4]}) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="26bba5ca3b729831bc655980cae67ebb55dcfc343557c9a94cbc4b8cf018c24e83a285c741d2d0335f87b2f0de47bcb46771a5e0bd157de644c2a353f43293c5ab0a980998beb705caff4624a65f60041e3bb350c14aa4c3c2a91fff2c8e853651152e4eddfb592c6061ffa76c1ab0b26ef3ca3d88651e2f733f32a2e553dccccf889911eb825247e0669d755f59b351bcf1dd3a33f5157b70171cc55902ae737600babab58fd35e20953034d9879dc9f82a9f6ddafa3fffdcb2", 0xba}], 0x1}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:09:28 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x44, 0x30, 0x103, 0x0, 0x0, {}, [{0x30, 0x1, [@m_bpf={0x2c, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x44}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0x0) 10:09:28 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000216a03, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0xffffffff, 0x0, 0x0, 0x0, 0x0, "00000000360000005eb39cf40000dd9a004000"}) r1 = syz_open_pts(r0, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)=""/237, 0x37, 0xed, 0x1}, 0x20) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x2100, 0x0) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000180)={0x9, 0xc, 0x4, 0x200000, 0x4, {}, {0x3, 0x8, 0x2, 0x7, 0x1f, 0x40, "905367fe"}, 0x8, 0x3, @offset=0x7, 0x682, 0x0, r0}) fsync(r3) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x15, 0x10, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0x0, 0x1}, 0x40) readv(r2, &(0x7f00000000c0)=[{&(0x7f0000000540)=""/102400, 0x19000}], 0x1) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) 10:09:28 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0x101, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x25) ioctl$TIOCGRS485(r2, 0x542e, &(0x7f00000000c0)) 10:09:28 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x44, 0x30, 0x103, 0x0, 0x0, {}, [{0x30, 0x1, [@m_bpf={0x2c, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x44}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0x0) 10:09:28 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4]}) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="26bba5ca3b729831bc655980cae67ebb55dcfc343557c9a94cbc4b8cf018c24e83a285c741d2d0335f87b2f0de47bcb46771a5e0bd157de644c2a353f43293c5ab0a980998beb705caff4624a65f60041e3bb350c14aa4c3c2a91fff2c8e853651152e4eddfb592c6061ffa76c1ab0b26ef3ca3d88651e2f733f32a2e553dccccf889911eb825247e0669d755f59b351bcf1dd3a33f5157b70171cc55902ae737600babab58fd35e20953034d9879dc9f82a9f6ddafa3fffdcb2", 0xba}], 0x1}, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="3a258211f663a7724bdef6a53bfce1e775d7406272274814a3f23327edb11e2daf85534aa6f5083067b0248878f07a91df1acc99e6643d3baad0a9f349be3cc11cbf51b4f7bff473e9c200351ccaefebd642492cfc5ead68cf6a0506"], 0x5c) r4 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r4) ioctl$GIO_CMAP(r4, 0x4b70, &(0x7f0000000180)) sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000380)='/dev/full\x00', 0x40000, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r6, 0xae04) fchdir(r5) getsockname$netlink(r5, &(0x7f0000000300), &(0x7f0000000340)=0xc) write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, &(0x7f0000000040)={0x12, 0x10, 0xfa00, {&(0x7f0000000000), 0xffffffffffffffff, r5}}, 0x18) ioctl$KVM_RUN(r2, 0xae80, 0x0) accept$inet(r6, &(0x7f00000003c0)={0x2, 0x0, @empty}, &(0x7f0000000440)=0x10) 10:09:28 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x111180, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) ioctl$TCGETX(r0, 0x5432, &(0x7f0000000000)) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="3a258211f663a7724bdef6a53bfce1e775d7406272274814a3f23327edb11e2daf85534aa6f5083067b0248878f07a91df1acc99e6643d3baad0a9f349be3cc11cbf51b4f7bff473e9c200351ccaefebd642492cfc5ead68cf6a0506"], 0x5c) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000100)=0x14, 0x80000) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000180)={'vxcan0\x00', r3}) 10:09:28 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="3a258211f663a7724bdef6a53bfce1e775d7406272274814a3f23327edb11e2daf85534aa6f5083067b0248878f07a91df1acc99e6643d3baad0a9f349be3cc11cbf51b4f7bff473e9c200351ccaefebd642492cfc5ead68cf6a0506"], 0x5c) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, &(0x7f0000000000)='/dev/kvm\x00', &(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r3, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4]}) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="26bba5ca3b729831bc655980cae67ebb55dcfc343557c9a94cbc4b8cf018c24e83a285c741d2d0335f87b2f0de47bcb46771a5e0bd157de644c2a353f43293c5ab0a980998beb705caff4624a65f60041e3bb350c14aa4c3c2a91fff2c8e853651152e4eddfb592c6061ffa76c1ab0b26ef3ca3d88651e2f733f32a2e553dccccf889911eb825247e0669d755f59b351bcf1dd3a33f5157b70171cc55902ae737600babab58fd35e20953034d9879dc9f82a9f6ddafa3fffdcb2", 0xba}], 0x1}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 10:09:29 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x44, 0x30, 0x103, 0x0, 0x0, {}, [{0x30, 0x1, [@m_bpf={0x2c, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x44}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0x0) 10:09:29 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r1, 0x0, 0x4ffe7, 0x0) 10:09:29 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x9, 0xa, '\x00\x00\x00@\x00'}) 10:09:29 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4]}) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="26bba5ca3b729831bc655980cae67ebb55dcfc343557c9a94cbc4b8cf018c24e83a285c741d2d0335f87b2f0de47bcb46771a5e0bd157de644c2a353f43293c5ab0a980998beb705caff4624a65f60041e3bb350c14aa4c3c2a91fff2c8e853651152e4eddfb592c6061ffa76c1ab0b26ef3ca3d88651e2f733f32a2e553dccccf889911eb825247e0669d755f59b351bcf1dd3a33f5157b70171cc55902ae737600babab58fd35e20953034d9879dc9f82a9f6ddafa3fffdcb2", 0xba}], 0x1}, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x38000, 0x0) pread64(r3, &(0x7f0000000040)=""/23, 0x17, 0x8000) r4 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r4) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000180)={0x4, 0x7, 0x1, 0xbc, 0x80, 0x7, 0x3f, 0x0, 0x2, 0x9, 0x0, 0x6, 0xfc, 0xff}, 0xe) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:09:29 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) r1 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x6, 0x101600) sendmsg$NFT_MSG_GETOBJ_RESET(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)={0x60, 0x15, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x40001) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="3a258211f663a7724bdef6a53bfce1e775d7406272274814a3f23327edb11e2daf85534aa6f5083067b0248878f07a91df1acc99e6643d3baad0a9f349be3cc11cbf51b4f7bff473e9c200351ccaefebd642492cfc5ead68cf6a0506"], 0x5c) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, r3, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20004880}, 0x4000000) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r0) r4 = syz_open_pts(r0, 0x0) readv(r4, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r5) ioctl$TCSETSW(r5, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x8, 0xb, 0xfd, '\x00\x00\x00@\x00'}) 10:09:30 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = syz_open_pts(r1, 0x4000) readv(r2, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r1, 0xc0406619, &(0x7f0000000000)={{0x2, 0x0, @identifier="333bf5cec02c888b3b11dbf3b0d678e7"}}) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) ioctl$CAPI_GET_ERRCODE(r1, 0x80024321, &(0x7f00000000c0)) 10:09:30 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="3a258211f663a7724bdef6a53bfce1e775d7406272274814a3f23327edb11e2daf85534aa6f5083067b0248878f07a91df1acc99e6643d3baad0a9f349be3cc11cbf51b4f7bff473e9c200351ccaefebd642492cfc5ead68cf6a0506"], 0x5c) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) ioctl$TIOCGETD(r1, 0x5424, &(0x7f0000000000)) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r2 = syz_open_pts(r0, 0x0) readv(r2, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) 10:09:30 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x20c440, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x2, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4]}) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="26bba5ca3b729831bc655980cae67ebb55dcfc343557c9a94cbc4b8cf018c24e83a285c741d2d0335f87b2f0de47bcb46771a5e0bd157de644c2a353f43293c5ab0a980998beb705caff4624a65f60041e3bb350c14aa4c3c2a91fff2c8e853651152e4eddfb592c6061ffa76c1ab0b26ef3ca3d88651e2f733f32a2e553dccccf889911eb825247e0669d755f59b351bcf1dd3a33f5157b70171cc55902ae737600babab58fd35e20953034d9879dc9f82a9f6ddafa3fffdcb2", 0xba}], 0x1}, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="3a258211f663a7724bdef6a53bfce1e775d7406272274814a3f23327edb11e2daf85534aa6f5083067b0248878f07a91df1acc99e6643d3baad0a9f349be3cc11cbf51b4f7bff473e9c200351ccaefebd642492cfc5ead68cf6a0506"], 0x5c) sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getpeername$packet(r9, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$BATADV_CMD_GET_GATEWAYS(r7, &(0x7f0000000140)={0x0, 0x5a, &(0x7f00000001c0)={&(0x7f0000000200)={0x24, r4, 0x711, 0x0, 0x0, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r10}]}, 0x24}}, 0x0) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r4, 0x8, 0x70bd29, 0x25dfdbf8, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8000}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x804) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:09:30 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x44, 0x30, 0x103, 0x0, 0x0, {}, [{0x30, 0x1, [@m_bpf={0x2c, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x44}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0x0) 10:09:30 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="3a258211f663a7724bdef6a53bfce1e775d7406272274814a3f23327edb11e2daf85534aa6f5083067b0248878f07a91df1acc99e6643d3baad0a9f349be3cc11cbf51b4f7bff473e9c200351ccaefebd642492cfc5ead68cf6a0506"], 0x5c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x8080fffffffe) r2 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x6, 0x430043) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2) fchdir(r1) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x0, 0x40, '\x00\x00\x00\x00\x00\x00\b\x00'}) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="3a258211f663a7724bdef6a53bfce1e775d7406272274814a3f23327edb11e2daf85534aa6f5083067b0248878f07a91df1acc99e6643d3baad0a9f349be3cc11cbf51b4f7bff473e9c200351ccaefebd642492cfc5ead68cf6a0506"], 0x5c) sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) bind$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x2, {0x1, 0x1, 0x4}}, 0x10) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="3a258211f663a7724bdef6a53bfce1e775d7406272274814a3f23327edb11e2daf85534aa6f5083067b0248878f07a91df1acc99e6643d3baad0a9f349be3cc11cbf51b4f7bff473e9c200351ccaefebd642492cfc5ead68cf6a0506"], 0x5c) sendfile(r4, r4, &(0x7f0000000000), 0x8080fffffffe) ioctl$sock_rose_SIOCRSCLRRT(r4, 0x89e4) r5 = syz_open_pts(r0, 0x0) readv(r5, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) ioctl$TCSETSW(r5, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) 10:09:30 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r1, 0x0, 0x4ffe7, 0x0) 10:09:30 executing program 2: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="3a258211f663a7724bdef6a53bfce1e775d7406272274814a3f23327edb11e2daf85534aa6f5083067b0248878f07a91df1acc99e6643d3baad0a9f349be3cc11cbf51b4f7bff473e9c200351ccaefebd642492cfc5ead68cf6a0506"], 0x5c) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) ioctl$SIOCX25GFACILITIES(r0, 0x89e2, &(0x7f0000000000)) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r1, 0xc06c4124, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) r2 = syz_open_pts(0xffffffffffffffff, 0x0) readv(r2, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) 10:09:31 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0xffffffffffffffeb, 0x301000) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="3a258211f663a7724bdef6a53bfce1e775d7406272274814a3f23327edb11e2daf85534aa6f5083067b0248878f07a91df1acc99e6643d3baad0a9f349be3cc11cbf51b4f7bff473e9c200351ccaefebd642492cfc5ead68cf6a0506"], 0x5c) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)=""/237, 0x37, 0xed, 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x15, 0x10, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r3, 0x0, 0x1}, 0x40) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000180)={0x5, 0x2, 0x4, 0x70000, 0x7, {0x0, 0x2710}, {0x4, 0x8, 0x4, 0x5, 0x1, 0x8, "c31279cc"}, 0x6, 0x3, @fd=r2, 0xffffffff, 0x0, r3}) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r5, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4]}) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="26bba5ca3b729831bc655980cae67ebb55dcfc343557c9a94cbc4b8cf018c24e83a285c741d2d0335f87b2f0de47bcb46771a5e0bd157de644c2a353f43293c5ab0a980998beb705caff4624a65f60041e3bb350c14aa4c3c2a91fff2c8e853651152e4eddfb592c6061ffa76c1ab0b26ef3ca3d88651e2f733f32a2e553dccccf889911eb825247e0669d755f59b351bcf1dd3a33f5157b70171cc55902ae737600babab58fd35e20953034d9879dc9f82a9f6ddafa3fffdcb2", 0xba}], 0x1}, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 10:09:31 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x0, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0x0) 10:09:31 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r1, 0x0, 0x4ffe7, 0x0) 10:09:31 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r1, 0x0, 0x4ffe7, 0x0) 10:09:31 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="3a258211f663a7724bdef6a53bfce1e775d7406272274814a3f23327edb11e2daf85534aa6f5083067b0248878f07a91df1acc99e6643d3baad0a9f349be3cc11cbf51b4f7bff473e9c200351ccaefebd642492cfc5ead68cf6a0506"], 0x5c) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="3a258211f663a7724bdef6a53bfce1e775d7406272274814a3f23327edb11e2daf85534aa6f5083067b0248878f07a91df1acc99e6643d3baad0a9f349be3cc11cbf51b4f7bff473e9c200351ccaefebd642492cfc5ead68cf6a0506"], 0x5c) sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)=""/237, 0x37, 0xed, 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x15, 0x10, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r4, 0x0, 0x1}, 0x40) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000000c0)={0x0, 0x2, 0x4, 0x1000, 0x81, {0x0, 0x2710}, {0x1, 0x2, 0xff, 0xf6, 0x0, 0x40, "9d9cacfd"}, 0x1, 0x1, @fd=r3, 0x0, 0x0, r4}) write$binfmt_misc(r5, &(0x7f0000000180)={'syz0', "a3633ce5dbb613baf19f169cb1a70b3c503916ffd33d4ac86b9e429f184fd31e611ea9f81ab28c5832e0ed4d24e9d28bc40618e17b1204c0c6134dcb6b0d0f696af1c24f8d7e504dbc3b0c1b0c86bf00abb5f16972d1242336222dc8b1136b9536341e1e520981ff9d1d0e6667ce09a0d4707351801eefc5ef3e2f91857d9020249b3f5413572332c834c9476e153199b582dacaad72ce4f77544c1ee30c134622507de842621d5e"}, 0xac) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) 10:09:31 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) getsockopt$inet_tcp_buf(r1, 0x6, 0xd, &(0x7f0000000180)=""/2, &(0x7f00000001c0)=0x2) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r2 = syz_open_pts(r0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000100)={0x29, 0x401, 0x3, 0x3, 0x7, "a76e363599258002bfe4a7821d0360898f6b6c"}) readv(r2, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) 10:09:32 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6(0xa, 0x80003, 0xff) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r1, &(0x7f0000000640)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="3093b34e1938"}, 0x14) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x13, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000022000000350000000000907c8587e2e813c400009500f8ff00000000"], &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x64deb09e3732d498}, 0x64) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) pipe(&(0x7f0000000600)) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f00000001c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='xfs\x00', 0x0, 0x0) syz_mount_image$iso9660(0x0, &(0x7f0000000500)='./file0\x00', 0x0, 0xc050787274, 0x0, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r4 = syz_open_pts(r0, 0x0) readv(r4, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) ioctl$TCSETSW(r4, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) 10:09:32 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r1, 0x0, 0x4ffe7, 0x0) 10:09:32 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcsu\x00', 0xa0000, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x747242, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="3a258211f663a7724bdef6a53bfce1e775d7406272274814a3f23327edb11e2daf85534aa6f5083067b0248878f07a91df1acc99e6643d3baad0a9f349be3cc11cbf51b4f7bff473e9c200351ccaefebd642492cfc5ead68cf6a0506"], 0x5c) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x6, 0x0, 0x4, 0x0, 0x4]}) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="26bba5ca3b729831bc655980cae67ebb55dcfc343557c9a94cbc4b8cf018c24e83a285c741d2d0335f87b2f0de47bcb46771a5e0bd157de644c2a353f43293c5ab0a980998beb705caff4624a65f60041e3bb350c14aa4c3c2a91fff2c8e853651152e4eddfb592c6061ffa76c1ab0b26ef3ca3d88651e2f733f32a2e553dccccf889911eb825247e0669d755f59b351bcf1dd3a33f5157b70171cc55902ae737600babab58fd35e20953034d9879dc9f82a9f6ddafa3fffdcb2", 0xba}], 0x1}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="3a258211f663a7724bdef6a53bfce1e775d7406272274814a3f23327edb11e2daf85534aa6f5083067b0248878f07a91df1acc99e6643d3baad0a9f349be3cc11cbf51b4f7bff473e9c200351ccaefebd642492cfc5ead68cf6a0506"], 0x5c) sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) setsockopt$inet_tcp_buf(r3, 0x6, 0x1a, &(0x7f0000000180)="fbb81f780cb320048afc19244a97870dc44ae8b503f3c7fd4efd8402bd478a866ab9b6b47590c3b5e4e350e1e9681bd1a45e06fa884db79547fea911543b05436a1bf1b255647e863911d0351874ec890a58cd1394d19de5f788513bcf16d0ce543faafdba19beaebaa0e1424aea57ca93bb103ca798eaeb9668f47b400a723cf351b4744ccdf59ad0b21a17d8b401", 0x8f) 10:09:32 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0x0) [ 793.588942][ T2521] block nbd5: Attempted send on invalid socket [ 793.596126][ T2521] blk_update_request: I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 793.611272][T26544] XFS (nbd5): SB validate failed with error -5. 10:09:32 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x5, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) 10:09:32 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000600)=[{&(0x7f0000000280)=""/138, 0x8a}], 0x1) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) 10:09:33 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r1, 0x0, 0x4ffe7, 0x0) 10:09:33 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4]}) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="26bba5ca3b729831bc655980cae67ebb55dcfc343557c9a94cbc4b8cf018c24e83a285c741d2d0335f87b2f0de47bcb46771a5e0bd157de644c2a353f43293c5ab0a980998beb705caff4624a65f60041e3bb350c14aa4c3c2a91fff2c8e853651152e4eddfb592c6061ffa76c1ab0b26ef3ca3d88651e2f733f32a2e553dccccf889911eb825247e0669d755f59b351bcf1dd3a33f5157b70171cc55902ae737600babab58fd35e20953034d9879dc9f82a9f6ddafa3fffdcb2", 0xba}], 0x1}, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="3a258211f663a7724bdef6a53bfce1e775d7406272274814a3f23327edb11e2daf85534aa6f5083067b0248878f07a91df1acc99e6643d3baad0a9f349be3cc11cbf51b4f7bff473e9c200351ccaefebd642492cfc5ead68cf6a0506"], 0x5c) sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000000)={0x16, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x1, 'nq\x00', 0x14, 0x200, 0x49}, 0x2c) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:09:33 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6(0xa, 0x80003, 0xff) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r1, &(0x7f0000000640)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="3093b34e1938"}, 0x14) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x13, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000022000000350000000000907c8587e2e813c400009500f8ff00000000"], &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x64deb09e3732d498}, 0x64) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) pipe(&(0x7f0000000600)) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f00000001c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='xfs\x00', 0x0, 0x0) syz_mount_image$iso9660(0x0, &(0x7f0000000500)='./file0\x00', 0x0, 0xc050787274, 0x0, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r4 = syz_open_pts(r0, 0x0) readv(r4, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) ioctl$TCSETSW(r4, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) 10:09:33 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0x0) 10:09:33 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6(0xa, 0x80003, 0xff) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r1, &(0x7f0000000640)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="3093b34e1938"}, 0x14) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x13, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000022000000350000000000907c8587e2e813c400009500f8ff00000000"], &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x64deb09e3732d498}, 0x64) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) pipe(&(0x7f0000000600)) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f00000001c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='xfs\x00', 0x0, 0x0) syz_mount_image$iso9660(0x0, &(0x7f0000000500)='./file0\x00', 0x0, 0xc050787274, 0x0, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r4 = syz_open_pts(r0, 0x0) readv(r4, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) ioctl$TCSETSW(r4, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) [ 794.508023][ T2522] block nbd5: Attempted send on invalid socket [ 794.514474][ T2522] blk_update_request: I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 794.526313][T26582] XFS (nbd5): SB validate failed with error -5. 10:09:33 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) getsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000000)=[{}, {}], &(0x7f00000000c0)=0x10) [ 794.802653][ T2521] block nbd5: Attempted send on invalid socket [ 794.809067][ T2521] blk_update_request: I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 794.821628][T26602] XFS (nbd5): SB validate failed with error -5. 10:09:33 executing program 2: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="3a258211f663a7724bdef6a53bfce1e775d7406272274814a3f23327edb11e2daf85534aa6f5083067b0248878f07a91df1acc99e6643d3baad0a9f349be3cc11cbf51b4f7bff473e9c200351ccaefebd642492cfc5ead68cf6a0506"], 0x5c) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, &(0x7f00000000c0)={0x7, 'veth0_to_hsr\x00', {0xb0}, 0x1}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r1, 0x80184132, &(0x7f0000000100)) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x101000, 0x0) r2 = syz_open_pts(r1, 0x0) readv(r2, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x19, '\x00\x00\x00@\x00'}) 10:09:34 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0x0) 10:09:34 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0x0) 10:09:34 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x0) fchdir(r2) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000000)=0x2) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000180)=0xff, 0x4) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r3, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4]}) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="26bba5ca3b729831bc655980cae67ebb55dcfc343557c9a94cbc4b8cf018c24e83a285c741d2d0335f87b2f0de47bcb46771a5e0bd157de644c2a353f43293c5ab0a980998beb705caff4624a65f60041e3bb350c14aa4c3c2a91fff2c8e853651152e4eddfb592c6061ffa76c1ab0b26ef3ca3d88651e2f733f32a2e553dccccf889911eb825247e0669d755f59b351bcf1dd3a33f5157b70171cc55902ae737600babab58fd35e20953034d9879dc9f82a9f6ddafa3fffdcb2", 0xba}], 0x1}, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getpeername$packet(r9, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$BATADV_CMD_GET_GATEWAYS(r7, &(0x7f0000000140)={0x0, 0x5a, &(0x7f00000001c0)={&(0x7f0000000200)={0x24, r4, 0x711, 0x0, 0x0, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r10}]}, 0x24}}, 0x0) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0x2c, r4, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x2c}}, 0x80c4) ioctl$KVM_RUN(r3, 0xae80, 0x0) 10:09:34 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x400d02, 0x0) syz_open_pts(r1, 0x101000) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000009180)={&(0x7f0000000000)={0x18, r3, 0x8e6767b8eef245b5, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x4}]}, 0x18}}, 0x0) sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x74, r3, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8000}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x11}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xe}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x8c1}, 0x10) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r4 = syz_open_pts(r0, 0x0) readv(r4, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) ioctl$TCSETSW(r4, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) 10:09:34 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0xffffffffffffffeb, 0x301000) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="3a258211f663a7724bdef6a53bfce1e775d7406272274814a3f23327edb11e2daf85534aa6f5083067b0248878f07a91df1acc99e6643d3baad0a9f349be3cc11cbf51b4f7bff473e9c200351ccaefebd642492cfc5ead68cf6a0506"], 0x5c) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)=""/237, 0x37, 0xed, 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x15, 0x10, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r3, 0x0, 0x1}, 0x40) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000180)={0x5, 0x2, 0x4, 0x70000, 0x7, {0x0, 0x2710}, {0x4, 0x8, 0x4, 0x5, 0x1, 0x8, "c31279cc"}, 0x6, 0x3, @fd=r2, 0xffffffff, 0x0, r3}) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r5, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4]}) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="26bba5ca3b729831bc655980cae67ebb55dcfc343557c9a94cbc4b8cf018c24e83a285c741d2d0335f87b2f0de47bcb46771a5e0bd157de644c2a353f43293c5ab0a980998beb705caff4624a65f60041e3bb350c14aa4c3c2a91fff2c8e853651152e4eddfb592c6061ffa76c1ab0b26ef3ca3d88651e2f733f32a2e553dccccf889911eb825247e0669d755f59b351bcf1dd3a33f5157b70171cc55902ae737600babab58fd35e20953034d9879dc9f82a9f6ddafa3fffdcb2", 0xba}], 0x1}, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 10:09:34 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r3) ioctl$KVM_SET_TSS_ADDR(r3, 0xae47, 0xd000) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x10000, 0x0) syz_kvm_setup_cpu$x86(r4, r3, &(0x7f00000c6000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000040)="0f20830fc7710036ad0fe4eaba2100ecd9f9640fecf3d13a660fc735baa000b0dbee", 0x22}], 0x1, 0x18, &(0x7f00000001c0)=[@dstype3={0x7, 0x2}], 0x1) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000380)={0x0, 0x0, [0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x1309fe56]}) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000280), 0x4) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000005c0)={r5, @in={{0x2, 0x0, @rand_addr=0x400}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x951, 0x0, 0x0, 0x5, 0x3, 0x4]}, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000100)={r5, @in={{0x2, 0x0, @remote}}}, &(0x7f0000000040)=0x90) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000140)={r5, 0x80}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000300)={r5, 0x5, 0x1f}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000440)={r6, @in={{0x2, 0x4e24, @private=0xa010101}}}, 0x84) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="26bba5ca3b729831bc655980cae67ebb55dcfc343557c9a94cbc4b8cf018c24e83a285c741d2d0335f87b2f0de47bcb46771a5e0bd157de644c2a353f43293c5ab0a980998beb705caff4624a65f60041e3bb350c14aa4c3c2a91fff2c8e853651152e4eddfb592c6061ffa76c1ab0b26ef3ca3d88651e2f733f32a2e553dccccf889911eb825247e0669d755f59b351bcf1dd3a33f5157b70171cc55902ae737600babab58fd35e20953034d9879dc9f82a9f6ddafa3fffdcb2", 0xba}], 0x1}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:09:35 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) r2 = syz_open_pts(r0, 0x0) readv(r2, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="3a258211f663a7724bdef6a53bfce1e775d7406272274814a3f23327edb11e2daf85534aa6f5083067b0248878f07a91df1acc99e6643d3baad0a9f349be3cc11cbf51b4f7bff473e9c200351ccaefebd642492cfc5ead68cf6a0506"], 0x5c) sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) ioctl$RTC_RD_TIME(r3, 0x80247009, &(0x7f0000000100)) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000040)={0xffffffff, 0xfffffffb, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) clock_settime(0x7, &(0x7f0000000000)={0x0, 0x1c9c380}) 10:09:35 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000280), 0x4) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000005c0)={r3, @in={{0x2, 0x0, @rand_addr=0x400}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x951, 0x0, 0x0, 0x5, 0x3, 0x4]}, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000100)={r3, @in={{0x2, 0x0, @remote}}}, &(0x7f0000000040)=0x90) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000140)={r3, 0x80}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000180)={r3, 0x9, 0x20}, 0xc) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r5, 0x5818c000) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x2, 0x0, 0x0, 0x9, 0x4, 0x0, 0x5]}) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x202000, 0x0) write$P9_RREADLINK(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="3a258211f663a7724bdef6a53bfce1e775d7406272274814a3f23327edb11e2daf85534aa6f5083067b0248878f07a91df1acc99e6643d3baad0a9f349be3cc11cbf51b4f7bff473e9c200351ccaefebd642492cfc5ead68cf6a0506"], 0x5c) sendfile(r6, r6, &(0x7f0000000000), 0x8080fffffffe) sendmsg$inet_sctp(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="26bba5ca3b729831bc655980cae67ebb55dcfc343557c9a94cbc4b8cf018c24e83a285c741d2d0335f87b2f0de47bcb46771a5e0bd157de644c2a353f43293c5ab0a980998beb705caff2bc79a8860041e3bb350c14aa4c3c2a91fff2c8e853651152e4eddfb592c6061ffa76c1ab0b26ef3ca3d88651e2f733f32a2e553dccccf889d11eb825247e0669d755f59b351bcf1dd3a33f5157b70171cc5d902ae607600babab58fd35e20953034d9879dc9f82a9f6ddafa3fffdcb2", 0xba}], 0x1}, 0x1) ioctl$KVM_RUN(r5, 0xae80, 0x0) 10:09:35 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0x0) 10:09:35 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)=""/237, 0x37, 0xed, 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x15, 0x10, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r1, 0x0, 0x1}, 0x40) close(r1) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mmap(&(0x7f00004df000/0x2000)=nil, 0x2000, 0x7ffff7, 0x40010, r3, 0xa1d87000) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0x4]}) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0c, &(0x7f0000000400)=[{&(0x7f0000000240)="26bba5ca3b729831bc655980cae67ebb55dcfc343557c9a94cbc4b8cf018c24e83a285c741d2d0335f87b2f0de47bcb46771a5e0bd157de644c2a353f43293c5ab0a980998beb705caff4624a65f60041e3bb350c14aa4c3c2a91fff2c8e853651152e4eddfb592c6061ffa76c1ab0b26ef3ca3d88651e2f733f32a2e553dccccf889911eb825247e0669d755f59b351bcf1dd3a33f5157b70171cc55902ae737600babab58fd35e20953034d9879dc9f82a9f6ddafa3fffdcb2", 0xba}], 0x1}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 10:09:35 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x4ffe7, 0x0) 10:09:35 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4]}) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self\x00', 0x298080, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="26bba5ca3b729831bc655980cae67ebb55dcfc343557c9a94cbc4b8cf018c24e83a285c741d2d0335f87b2f0de47bcb46771a5e0bd157de644c2a353f43293c5ab0a980998beb705caff4624a65f60041e3bb350c14aa4c3c2a91fff2c8e853651152e4eddfb592c6061ffa76c1ab0b26ef3ca3d88651e2f733f32a2e553dccccf889911eb825247e0669d755f59b351bcf1dd3a33f5157b70171cc55902ae737600babab58fd35e20953034d9879dc9f82a9f6ddafa3fffdcb2", 0xba}], 0x1}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:09:35 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x323880, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) ioctl$USBDEVFS_RESETEP(r1, 0x80045503, &(0x7f0000000180)={0x9, 0x1}) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) ioctl$SNDCTL_DSP_GETCAPS(r1, 0x8004500f, &(0x7f0000000100)) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000001001000001000000770000000bdf00409330b3e7d8aa94129a373d62c292b8c6ed127caa87f75478759207d10604ec95ff7bcb0d639b125ec85a3678be4f50111f0a03dbd1b4dea05a8b5b29e84e4fadaa6ebe000000004dc6505d25234826a267f75c743db965041c09c59047f7f794fdffff80b6d724c8f356b5db363ef24b23c5cc93b1a5c3438495d929ce2f1ae893afaf3f05d32d0bfa67b3da43ab981313e755223886b180a269917db5430ef9aec071e44cd19cb18e4e0528acd134638ab577d1786271f44d80d21ed5de4b4ca31f4269a88115bece676d0fbf165b08c35178e5989379cc9df9e121a95731d088d62b0adcd501485f490b48633a73442d52503070fd87064f6f176b72c25387c7513d3dcc2973e417eb8fbce95c97a0779e196456079c0c6c8b94c3bf9ff3b4ba8e71ec29a20903e807b69765f796e45d278e6742d5f1f5540fbcf690812892d3aa5bdc26d200fe25"], 0x18, 0x4800000000000000}}], 0x1, 0x0) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0xfffffffffffffd95, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000001001000001000000ec00000000000000937feecb07ab37918264a4d93e8d35b474759f7ed7bfa4efc7d97eea5b75d724f66b24973e8147c043e25d60825c9f14fbbc2e39b1484d4f1501b113d7d6030680a7fdea6f07ecd48502d57dda0132b56308a41dbbba950e76ccba8562b6464a6f0a25c2d2ad823114b062750a4e96fa8be9ac82b2e4c391b88414287109fb11aa71f2de1c73b24c9a28e628ad33cf7539"], 0x18}}], 0x1, 0x0) r3 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r3, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) sendmmsg(r3, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x18, 0x4800000000000000}}], 0x1, 0x0) r4 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r4, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) sendmmsg(r4, &(0x7f0000005c00), 0x400000000000162, 0x0) close(r3) syz_open_pts(r0, 0x0) 10:09:35 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000040)=@flushsa={0x28, 0x1c, 0x100, 0x70bd2a, 0x25dfdbfc, {0x32}, [@srcaddr={0x14, 0xd, @in6=@private0={0xfc, 0x0, [], 0x1}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4051}, 0xc0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4]}) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000180)="26bba5ca3b729831bc655980cae67ebb55dcfc343557c9a94cbc4b8bd418c24e83a285c741d2d0335f87b2f0de47bcb46771a5e0bd157de644c2a353f43293caff4624a65f60041e3bb350c14aa4c3c2a91fff2c8e853651152e4eddfb592c6061ffa76c1ab0b26ef3ca3d88651e2f733f32a2e553dccccf889911eb825247e0669d755f59b351bcf1dd3a33f5157b70171cc55902ae737600ba050000005e2095010000009dc9f8e8dbd04ce1c32a9f6ddafa3fffdcb2b41fa390018b26a4143a190e91f2b46be4e6be07565238ff6d58da46c63aef7d2ed88a175bc2f3bf345b235cab08f5db1551262452021ae421c332e9bd494de6af77eef9194c385dd5f6e89a8e98737b95c1cc5cd3019219657eb61304485e7a14bfb24dbbd7e38e4f5d66c10551ef88aa5dc3b28a7bc4e9b5d3a2f02a5cabc22cf043e94e007fda4309840a1fbc320a2b0fe35ad3ec1de04840007dd784e0d8bc4f2fe0f2fae4c8c982d658d85c0747b31c5a8b3def787ee8b894858174c3371ea3bd69c6885ad24fa28de01c788f1ecb5503d6", 0x18b}], 0x1}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:09:35 executing program 0: r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r3, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4]}) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="26bba5ca3b729831bc655980cae67ebb55dcfc343557c9a94cbc4b8cf018c24e83a285c741d2d0335f87b2f0de47bcb46771a5e0bd157de644c2a353f43293c5ab0a980998beb705caff4624a65f60041e3bb350c14aa4c3c2a91fff2c8e853651152e4eddfb592c6061ffa76c1ab0b26ef3ca3d88651e2f733f32a2e553dccccf889911eb825247e0669d755f59b351bcf1dd3a33f5157b70171cc55902ae737600babab58fd35e20953034d9879dc9f82a9f6ddafa3fffdcb2", 0xba}], 0x1}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 10:09:36 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x400d02, 0x0) syz_open_pts(r1, 0x101000) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000009180)={&(0x7f0000000000)={0x18, r3, 0x8e6767b8eef245b5, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x4}]}, 0x18}}, 0x0) sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x74, r3, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8000}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x11}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xe}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x8c1}, 0x10) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r4 = syz_open_pts(r0, 0x0) readv(r4, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) ioctl$TCSETSW(r4, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) 10:09:36 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="3a258211f663a7724bdef6a53bfce1e775d7406272274814a3f23327edb11e2daf85534aa6f5083067b0248878f07a91df1acc99e6643d3baad0a9f349be3cc11cbf51b4f7bff473e9c200351ccaefebd642492cfc5ead68cf6a0506"], 0x5c) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r2 = syz_open_pts(r0, 0x0) readv(r2, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) 10:09:36 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0x0) 10:09:36 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4]}) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="26bba5ca3b729831bc655980cae67ebb55dcfc343557c9a94cbc4b8cf018c24e83a285c741d2d0335f87b2f0de47bcb46771a5e0bd157de644c2a353f43293c5ab0a980998beb705caff4624a65f60041e3bb350c14aa4c3c2a91fff2c8e853651152e4eddfb592c6061ffa76c1ab0b26ef3ca3d88651e2f733f32a2e553dccccf889911eb825247e0669d755f59b351bcf1dd3a33f5157b70171cc55902ae737600babab58fd35e20953034d9879dc9f82a9f6ddafa3fffdcb2", 0xba}], 0x1}, 0x0) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000000)={0x4000, 0x2000, 0xffffffff, 0x4, 0x9}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:09:36 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r1 = syz_open_pts(r0, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="3a258211f663a7724bdef6a53bfce1e775d7406272274814a3f23327edb11e2daf855348a6f5083067b0248878f07a91df1acc1ecf643d3baad0a9112dbe3cc11cbf51b4f7bff473e9c200351ccaefebd642492cfc5ead68cf6a0506"], 0x5c) sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r4, 0x29, 0x1, &(0x7f0000000280), 0x4) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000005c0)={r5, @in={{0x2, 0x0, @remote}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x951, 0x0, 0x0, 0x5, 0x3, 0x4]}, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000100)={r5, @in={{0x2, 0x0, @remote}}}, &(0x7f0000000040)=0x90) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000140)={r5, 0x80}, 0x8) recvfrom$inet6(r2, &(0x7f0000000200)=""/78, 0x4e, 0x2042, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f00000000c0)=@assoc_id=r5, &(0x7f0000000100)=0x4) getsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000180)=@assoc_id=r6, &(0x7f00000001c0)=0x4) readv(r1, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) 10:09:36 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x4ffe7, 0x0) 10:09:36 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4]}) r3 = semget$private(0x0, 0x207, 0x0) semctl$GETALL(r3, 0x0, 0xd, &(0x7f00000000c0)=""/103) semop(r3, &(0x7f0000000000)=[{0x1, 0x4, 0x1800}], 0x1) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="26bba5ca3b729831bc655980cae67ebb55dcfc343557c9a94cbc4b8cf018c24e83a285c741d2d0335f87b2f0de47bcb46771a5e0bd157de644c2a353f43293c5ab0a980998beb705caff4624a65f60041e3bb350c14aa4c3c2a91fff2c8e853651152e4eddfb592c6061ffa76c1ab0b26ef3ca3d88651e2f733f32a2e553dccccf889911eb825247e0669d755f59b351bcf1dd3a33f5157b70171cc55902ae737600babab58fd35e20953034d9879dc9f82a9f6ddafa3fffdcb2", 0xba}], 0x1}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:09:36 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4]}) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="26bba5ca3b729831bc655980cae67ebb55dcfc343557c9a94cbc4b8cf018c24e83a285c741d2d0335f87b2f0de47bcb46771a5e0bd157de644c2a353f43293c5ab0a980998beb705caff4624a65f60041e3bb350c14aa4c3c2a91fff2c8e853651152e4eddfb592c6061ffa76c1ab0b26ef3ca3d88651e2f733f32a2e553dccccf889911eb825247e0669d755f59b351bcf1dd3a33f5157b70171cc55902ae737600babab58fd35e20953034d9879dc9f82a9f6ddafa3fffdcb2", 0xba}], 0x1}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:09:36 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4]}) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="26bba5ca3b729831bc655980cae67ebb55dcfc343557c9a94cbc4b8cf018c24e83a285c741d2d0335f87b2f0de47bcb4677184996e687de644c6a353f43293c5ab0a980998beb705caff4624a65f60041e3bb350c14aa4c3c2a91fff2c8e853651152e4eddfb592c6061ffa76c1ab0b26ef3ca3d88651e2f733f32a2e553dccccf889911eb825247e0668a755f59b351bcf1dd3a33f5157b70171cc55902ae737600babab58fd35e20953034d9879dc9f82a9f6ddafa3fffdcb2", 0xba}], 0x1}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:09:37 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e002553e7dc888cc5b2640165ebda6e94f8504e9ad2890fc350669824a3adc007e52440a45df1f2f84995b27d015847da5f653595973826a3ee9842531effd00e951567260b7f9508bccb73769129e168b7b5030a7a54319e3c9538c8c4452ffd9774f9950367986be848f7bbf1708af8a330fd7402d66ee3546fe24cc196080cf0bb77014e058bfb45902e26d165fd0962343d49bc7d16ab409b7058c0b60b2ff7ca456ad5ff636cdbc30f737f6ed21ec904bb9e5678ebd06892ade290cbe97c4506a348aa878b688cd4c80ea23c0200000000000000ff64f9ddd0367ac42a122d62e5ea70"], &(0x7f0000000280)=""/237, 0x37, 0xed, 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x15, 0x10, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r1, 0x0, 0x1}, 0x40) close(r1) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mmap(&(0x7f00004df000/0x2000)=nil, 0x2000, 0x7ffff7, 0x40010, r3, 0xa1d87000) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0x4]}) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff0c, &(0x7f0000000400)=[{&(0x7f0000000240)="26bba5ca3b729831bc655980cae67ebb55dcfc343557c9a94cbc4b8cf018c24e83a285c741d2d0335f87b2f0de47bcb46771a5e0bd157de644c2a353f43293c5ab0a980998beb705caff4624a65f60041e3bb350c14aa4c3c2a91fff2c8e853651152e4eddfb592c6061ffa76c1ab0b26ef3ca3d88651e2f733f32a2e553dccccf889911eb825247e0669d755f59b351bcf1dd3a33f5157b70171cc55902ae737600babab58fd35e20953034d9879dc9f82a9f6ddafa3fffdcb2", 0xba}], 0x1}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 10:09:37 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) r1 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) fchdir(r1) ioctl$VT_RELDISP(r1, 0x5605) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x5, 0x0, 0x0, 0x0, 0x8, '\x00\x00\x00\x00\x00\x00\b\x00'}) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000000000)={0x81}, 0x1) r3 = syz_open_pts(r0, 0x0) readv(r3, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) ioctl$TIOCSTI(r3, 0x5412, 0x4) ioctl$TCSETSW(r3, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) 10:09:37 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4]}) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="26bba5ca3b729831bc655980cae67ebb55dcfc343557c9a94cbc4b8cf018c24e83a285c741d2d0335f87b2f0de47bcb46771a5e0bd157de644c2a353f43293c5ab0a980998beb705caff4624a65f60041e3bb350c14aa4c3c2a91fff2c8e853651152e4eddfb592c6061ffa76c1ab0b26ef3ca3d88651e2f733f32a2e553dccccf889911eb825247e0669d755f59b351bcf1dd3a33f5157b70171cc55902ae737600babab58fd35e20953034d9879dc9f82a9f6ddafa3fffdcb2", 0xba}], 0x1}, 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r3) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r3, 0xc2604111, &(0x7f0000001580)={0x1, [[0x5, 0x7ff, 0x9, 0x3, 0x1f, 0x4, 0x7, 0x8dc], [0x3, 0x8, 0x9, 0x2b, 0x6, 0xffff, 0x9, 0x71], [0x8, 0x4, 0x6, 0x2, 0xfffffffe, 0x5, 0x3f, 0x58e9be6f]], [], [{0x400, 0x2, 0x1, 0x0, 0x1, 0x1}, {0x2, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x8000, 0x7, 0x0, 0x0, 0x0, 0x1}, {0x9, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x9, 0xed7, 0x1, 0x0, 0x0, 0x1}, {0x6, 0x18000000, 0x0, 0x1}, {0x3, 0x400}, {0x9, 0xffffffff, 0x0, 0x1, 0x1, 0x1}, {0x3, 0xd332ad2, 0x0, 0x1}, {0xff, 0x5, 0x0, 0x0, 0x1, 0x1}, {0x8, 0x20, 0x0, 0x0, 0x1}, {0x6, 0x6, 0x0, 0x1, 0x1}], [], 0x1f}) r4 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r4) sendmsg$nfc_llcp(r4, &(0x7f00000003c0)={&(0x7f0000000180)={0x27, 0x1, 0x1, 0x5, 0x20, 0x1, "319d5dbbedaa0e53c1b08b655de5c610da580a4e74e4f6d1a62c5673e43ed164d3ce2d7102ce7b098e26d033aeb03c0bff340d4a34aa8d015f7cd99c87f284", 0x4}, 0x60, &(0x7f0000000040)=[{&(0x7f0000000300)="78c3d8c408edde2a0fec1ab00e31e9b34a1b53e394f11dffea7e1dd91f75c1ff2e64cca874e783edbec2f5804021f5cd303dd50571a9c1c58e68e6b43f1029827389fee6c8f60e342f93059add84db0c5025a60a31e896c537362539dd0c280cb6db935533d7b00d28528721029488d012224339f003d59bd40d5d14be2671cd0a84ccc73ac3b418f7e8bf48a4e7bc6abe609b447a3ec6dd45a9d890555de2a8daeb581bfc454ea30401f321c330d946ee0aae6f04", 0xb5}, {&(0x7f0000000440)="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", 0x1000}], 0x2, &(0x7f0000001440)={0x108, 0x1, 0x7f, "55bc3d6f238ec86cc852d3a87a1b5d55a02c329be12bb18bf0fa12c6d2b3c348afa8a7af3170c1d2cc218e7e22e747285437a3592fa58c31cc6e4b8b78c54500933722ed4286fa24c300e6a8bac7345e5e4f8accc44d3ffd09932ac9bb9c1823340df5ca4f8336b2be8c1d9c829a2a738ae0001e608e76b65a65f93b7fd3797f9466b14a16325e9a62fc81ff2a53a25770f0b07cc8374c66276483551d21f6c8f07cd05b8edcfa6555d9ad60eb004dc40b779d1b75f9e899704f053a3a0595aa12d0b8d3539add7209e2ca01c77b6ed5de751eb5157e21e074662bcbf3939e5918eabf8b40d926b686806074f1df944321"}, 0x108, 0x41080}, 0x800) r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) ioperm(0x9884, 0x7, 0x9) fchdir(r5) ioctl$TIOCGDEV(r5, 0x80045432, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:09:37 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x4ffe7, 0x0) 10:09:37 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6(0xa, 0x80003, 0xff) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r1, &(0x7f0000000640)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="3093b34e1938"}, 0x14) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x13, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000022000000350000000000907c8587e2e813c400009500f8ff00000000"], &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x64deb09e3732d498}, 0x64) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) pipe(&(0x7f0000000600)) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f00000001c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='xfs\x00', 0x0, 0x0) syz_mount_image$iso9660(0x0, &(0x7f0000000500)='./file0\x00', 0x0, 0xc050787274, 0x0, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r4 = syz_open_pts(r0, 0x0) readv(r4, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) ioctl$TCSETSW(r4, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) 10:09:37 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)=""/237, 0x37, 0xed, 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x15, 0x10, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r1, 0x0, 0x1}, 0x40) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)=""/237, 0x37, 0xed, 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x15, 0x10, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0x0, 0x1}, 0x40) r3 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x400000, 0x0) poll(&(0x7f00000000c0)=[{r1, 0x2084}, {r2, 0x8480}, {0xffffffffffffffff, 0x1042}, {}, {r3, 0x38}], 0x5, 0x3) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r4 = syz_open_pts(r0, 0x0) readv(r4, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) ioctl$TCSETSW(r4, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) 10:09:37 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x4ffe7, 0x0) 10:09:37 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4]}) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="26bba5ca3b729831bc655980cae67ebb55dcfc343557c9a94cbc4b8cf018c24e83a285c741d2d0335f87b2f0de47bcb46771a5e0bd157de644c2a353f43293c5ab0a980998beb705caff4624a65f60041e3bb350c14aa4c3c2a91fff2c8e853651152e4eddfb592c6061ffa76c1ab0b26ef3ca3d88651e2f733f32a2e553dccccf889911eb825247e0669d755f59b351bcf1dd3a33f5157b70171cc55902ae737600babab58fd35e20953034d9879dc9f82a9f6ddafa3fffdcb2", 0xba}], 0x1}, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) 10:09:37 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000280), 0x4) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000005c0)={r4, @in={{0x2, 0x0, @rand_addr=0x400}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x951, 0x0, 0x0, 0x5, 0x3, 0x4]}, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000100)={r4, @in={{0x2, 0x0, @remote}}}, &(0x7f0000000040)=0x90) unshare(0x18020b00) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000140)={r4, 0x80}, 0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000000)={r4, 0x9481, 0x1, [0x4]}, 0xa) 10:09:37 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="3a258211f663a7724bdef6a53bfce1e775d7406272274814a3f23327edb11e2daf85534aa6f5083067b0248878f07a91df1acc99e6643d3baad0a9f349be3cc11cbf51b4f7bff473e9c200351ccaefebd642492cfc5ead68cf6a0506"], 0x5c) sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) ioctl$KVM_REINJECT_CONTROL(r3, 0xae71, &(0x7f0000000000)={0x9}) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4]}) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="26bba5ca3b729831bc655980cae67ebb55dcfc343557c9a94cbc4b8cf018c24e83a285c741d2d0335f87b2f0de47bcb46771a5e0bd157de644c2a353f43293c5ab0a980998beb705caff4624a65f60041e3bb350c14aa4c3c2a91fff2c8e853651152e4eddfb592c6061ffa76c1ab0b26ef3ca3d88651e2f733f32a2e553dccccf889911eb825247e0669d755f59b351bcf1dd3a33f5157b70171cc55902ae737600babab58fd35e20953034d9879dc9f82a9f6ddafa3fffdcb2", 0xba}], 0x1}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 798.745072][ T2522] block nbd5: Attempted send on invalid socket [ 798.751377][ T2522] blk_update_request: I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 798.764329][T26764] XFS (nbd5): SB validate failed with error -5. 10:09:37 executing program 2: write$binfmt_aout(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r0 = syz_open_pts(0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) 10:09:37 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r1 = syz_open_pts(r0, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="3a258211f663a7724bdef6a53bfce1e775d7406272274814a3f23327edb11e2daf855348a6f5083067b0248878f07a91df1acc1ecf643d3baad0a9112dbe3cc11cbf51b4f7bff473e9c200351ccaefebd642492cfc5ead68cf6a0506"], 0x5c) sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r4, 0x29, 0x1, &(0x7f0000000280), 0x4) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000005c0)={r5, @in={{0x2, 0x0, @remote}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x951, 0x0, 0x0, 0x5, 0x3, 0x4]}, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000100)={r5, @in={{0x2, 0x0, @remote}}}, &(0x7f0000000040)=0x90) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000140)={r5, 0x80}, 0x8) recvfrom$inet6(r2, &(0x7f0000000200)=""/78, 0x4e, 0x2042, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f00000000c0)=@assoc_id=r5, &(0x7f0000000100)=0x4) getsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000180)=@assoc_id=r6, &(0x7f00000001c0)=0x4) readv(r1, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) 10:09:37 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x53cd90124a730c3f, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x180, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) syz_open_pts(r0, 0x10c40) write$P9_RREADLINK(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="3a258211f663a7724bdef6a53bfce1e775d7406272274814a3f23327edb11e2daf85534aa6f5083067b0248878f07a91df1acc99e6643d3baad0a9f349be3cc11cbf51b4f7bff473e9c200351ccaefebd642492cfc5ead68cf6a0506"], 0x5c) sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e002553e7dc888cc5b2640165ebda6e94f8504e9ad2890fc350669824a3adc007e52440a45df1f2f84995b27d015847da5f653595973826a3ee9842531effd00e951567260b7f9508bccb73769129e168b7b5030a7a54319e3c9538c8c4452ffd9774f9950367986be848f7bbf1708af8a330fd7402d66ee3546fe24cc196080cf0bb77014e058bfb45902e26d165fd0962343d49bc7d16ab409b7058c0b60b2ff7ca456ad5ff636cdbc30f737f6ed21ec904bb9e5678ebd06892ade290cbe97c4506a348aa878b688cd4c80ea23c0200000000000000ff64f9ddd0367ac42a122d62e5ea70"], &(0x7f0000000280)=""/237, 0x37, 0xed, 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x15, 0x10, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r4, 0x0, 0x1}, 0x40) r5 = pidfd_getfd(r3, r4, 0x0) sendto$llc(r5, &(0x7f0000000340)="842065a72677495334f970d7d08e489b283aaac37e4dec02e4d8466917cfdc55899d3d35df1fc7773c88f8d380d056b9ecb771c379c3f9896389aee5edb9d8f00418821766bb0781cfe3b4285af5c90968473fd0fe2e3225427489edc3b3ea87bdebde1b48285c8f22a4a9ed4676f096937d9355376e30df214adc18df923b5735e854cf55e3121857127ce9c2ef7e9ff8571ed26d6da28ee9268b520174735aa91c5fba574f5aa066152edb8c44f902d8c3f93bf4a0ed572f75ab9b", 0xbc, 0x4010, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x8, 0x5f, 0x6, @multicast}, 0x10) r6 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r6) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f00000000c0)={0x6c, @private=0xa010102, 0x4e22, 0x3, 'dh\x00', 0x29, 0x3, 0xf}, 0x2c) ioctl$TIOCCONS(r2, 0x541d) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x40000000, 0x0, 0x0, 0xe, 0x0, '\x00\x00\x00@\x00'}) 10:09:38 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x4ffe7, 0x0) 10:09:38 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe7, 0x0) 10:09:38 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) prctl$PR_GET_THP_DISABLE(0x2a) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) 10:09:38 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4]}) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="26bba5ca3b729831bc655980cae67ebb55dcfc343557c9a94cbc4b8cf018c24e83a285c741d2d0335f87b2f0de47bcb46771a5e0bd157de644c2a353f43293c5ab0a980998beb705caff4624a65f60041e3bb350c14aa4c3c2a91fff2c8e853651152e4eddfb592c6061ffa76c1ab0b26ef3ca3d88651e2f733f32a2e553dccccf889911eb825247e0669d755f59b351bcf1dd3a33f5157b70171cc55902ae737600babab58fd35e20953034d9879dc9f82a9f6ddafa3fffdcb2", 0xba}], 0x1}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)=""/237, 0x37, 0xed, 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x15, 0x10, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r3, 0x0, 0x1}, 0x40) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) splice(r3, &(0x7f0000000000)=0x8, r4, &(0x7f0000000180), 0x4, 0x4) 10:09:38 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x4c0c83, 0x0) write$P9_RREAD(r2, &(0x7f0000000180)={0xa4, 0x75, 0x2, {0x99, "7a526a732b8bd0377d81ee0d5ea84ef94080078294863ad08cd9d950ac84e19ecbf239b7a520e85b4f4ee20c6780eefbda090983d317c4e2de3d96565ab38f56b590425b1531b967ad7ac83eaf7e6682c58021beb52af6137477740e5279746d41c8953555f54d8fd84e3fc7c5c735855b4e7c91718dbf9c2b20302aa33dd02db1300a4470e7480b3314173acaad155e2e6bfd065d26b401c8"}}, 0xa4) 10:09:39 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6(0xa, 0x80003, 0xff) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r1, &(0x7f0000000640)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="3093b34e1938"}, 0x14) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x13, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000022000000350000000000907c8587e2e813c400009500f8ff00000000"], &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x64deb09e3732d498}, 0x64) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) pipe(&(0x7f0000000600)) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f00000001c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='xfs\x00', 0x0, 0x0) syz_mount_image$iso9660(0x0, &(0x7f0000000500)='./file0\x00', 0x0, 0xc050787274, 0x0, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r4 = syz_open_pts(r0, 0x0) readv(r4, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) ioctl$TCSETSW(r4, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) 10:09:39 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f0000000180)={0x40, 0x1}) write$P9_RREADLINK(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="3a258211f663a7724bdef6a53bfce1e775d7406272274814a3f23327edb11e2daf85534aa6f5083067b0248878f07a91df1acc99e6643d3baad0a9f349be3cc11cbf51b4f7bff473e9c200351ccaefebd642492cfc5ead68cf6a0506"], 0x5c) sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) setsockopt$TIPC_CONN_TIMEOUT(r3, 0x10f, 0x82, &(0x7f0000000000)=0x8, 0x4) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4]}) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="26bba5ca3b729831bc655980cae67ebb55dcfc343557c9a94cbc4b8cf018c24e83a285c741d2d0335f87b2f0de47bcb46771a5e0bd157de644c2a353f43293c5ab0a980998beb705caff4624a65f60041e3bb350c14aa4c3c2a91fff2c8e853651152e4eddfb592c6061ffa76c1ab0b26ef3ca3d88651e2f733f32a2e553dccccf889911eb825247e0669d755f59b351bcf1dd3a33f5157b70171cc55902ae737600babab58fd35e20953034d9879dc9f82a9f6ddafa3fffdcb2", 0xba}], 0x1}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:09:39 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x4ffe7, 0x0) 10:09:39 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe7, 0x0) [ 800.296963][ T2522] block nbd5: Attempted send on invalid socket [ 800.304010][ T2522] blk_update_request: I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 800.316200][T26841] XFS (nbd5): SB validate failed with error -5. 10:09:39 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0x141080, 0x0) connect$tipc(r2, &(0x7f00000001c0)=@id={0x1e, 0x3, 0x3, {0x4e24, 0x4}}, 0x10) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000300)={'macvlan1\x00', {0x2, 0x4e24, @multicast1}}) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4]}) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="26bba5ca3b729831bc655980cae67ebb55dcfc343557c9a94cbc4b8cf018c24e83a285c741d2d0335f87b2f0de47bcb46771a5e0bd157de644c2a353f43293c5ab0a980998beb705caff4624a65f60041e3bb350c14aa4c3c2a91fff2c8e853651152e4eddfb592c6061ffa76c1ab0b26ef3ca3d88651e2f733f32a2e553dccccf889911eb825247e0669d755f59b351bcf1dd3a33f5157b70171cc55902ae737600babab58fd35e20953034d9879dc9f82a9f6ddafa3fffdcb2", 0xba}], 0x1}, 0x0) r4 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2c5, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000000)="1d", 0x1, 0xfffffffffffffffd) r6 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2c5, 0xfffffffffffffffe) r7 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000000)="1d", 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r7, r6, r6}, 0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={'tgr160\x00'}}) keyctl$dh_compute(0x17, &(0x7f0000000440)={r5, r7, r4}, 0x0, 0xfffffffffffffe4c, &(0x7f0000000240)={&(0x7f0000000080)={'cryptd(blake2b-256)\x00'}}) keyctl$invalidate(0x15, r5) ioctl$KVM_RUN(r3, 0xae80, 0x0) 10:09:39 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x48380, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) [ 800.608090][T26866] Unknown ioctl 35094 10:09:39 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0x141080, 0x0) connect$tipc(r2, &(0x7f00000001c0)=@id={0x1e, 0x3, 0x3, {0x4e24, 0x4}}, 0x10) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000300)={'macvlan1\x00', {0x2, 0x4e24, @multicast1}}) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4]}) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="26bba5ca3b729831bc655980cae67ebb55dcfc343557c9a94cbc4b8cf018c24e83a285c741d2d0335f87b2f0de47bcb46771a5e0bd157de644c2a353f43293c5ab0a980998beb705caff4624a65f60041e3bb350c14aa4c3c2a91fff2c8e853651152e4eddfb592c6061ffa76c1ab0b26ef3ca3d88651e2f733f32a2e553dccccf889911eb825247e0669d755f59b351bcf1dd3a33f5157b70171cc55902ae737600babab58fd35e20953034d9879dc9f82a9f6ddafa3fffdcb2", 0xba}], 0x1}, 0x0) r4 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2c5, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000000)="1d", 0x1, 0xfffffffffffffffd) r6 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2c5, 0xfffffffffffffffe) r7 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000000)="1d", 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r7, r6, r6}, 0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={'tgr160\x00'}}) keyctl$dh_compute(0x17, &(0x7f0000000440)={r5, r7, r4}, 0x0, 0xfffffffffffffe4c, &(0x7f0000000240)={&(0x7f0000000080)={'cryptd(blake2b-256)\x00'}}) keyctl$invalidate(0x15, r5) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 800.860386][T26875] Unknown ioctl 35094 10:09:39 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) 10:09:40 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0x141080, 0x0) connect$tipc(r2, &(0x7f00000001c0)=@id={0x1e, 0x3, 0x3, {0x4e24, 0x4}}, 0x10) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000300)={'macvlan1\x00', {0x2, 0x4e24, @multicast1}}) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4]}) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="26bba5ca3b729831bc655980cae67ebb55dcfc343557c9a94cbc4b8cf018c24e83a285c741d2d0335f87b2f0de47bcb46771a5e0bd157de644c2a353f43293c5ab0a980998beb705caff4624a65f60041e3bb350c14aa4c3c2a91fff2c8e853651152e4eddfb592c6061ffa76c1ab0b26ef3ca3d88651e2f733f32a2e553dccccf889911eb825247e0669d755f59b351bcf1dd3a33f5157b70171cc55902ae737600babab58fd35e20953034d9879dc9f82a9f6ddafa3fffdcb2", 0xba}], 0x1}, 0x0) r4 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2c5, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000000)="1d", 0x1, 0xfffffffffffffffd) r6 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2c5, 0xfffffffffffffffe) r7 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000000)="1d", 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r7, r6, r6}, 0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={'tgr160\x00'}}) keyctl$dh_compute(0x17, &(0x7f0000000440)={r5, r7, r4}, 0x0, 0xfffffffffffffe4c, &(0x7f0000000240)={&(0x7f0000000080)={'cryptd(blake2b-256)\x00'}}) keyctl$invalidate(0x15, r5) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 801.096446][T26887] Unknown ioctl 35094 10:09:40 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000507000/0x2000)=nil, 0x2000, 0x7fffff, 0x11, r1, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4]}) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="26bba5ca3b729831bc655980cae67ebb55dcfc343557c9a94cbc4b8cf018c24e83a285c741d2d0335f87b2f0de47bcb46771a5e0bd157de644c2a353f43293c5ab0a980998beb705caff4624a65f60041e3bb350c14aa4c3c2a91fff2c8e853651152e4eddfb592c6061ffa76c1ab0b26ef3ca3d88651e2f733f32a2e553dccccf889911eb825247e0669d755f59b351bcf1dd3a33f5157b70171cc55902ae737600babab58fd35e20953034d9879dc9f82a9f6ddafa3fffdcb2", 0xba}], 0x1}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:09:40 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe7, 0x0) 10:09:40 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r1 = syz_open_pts(r0, 0x101081) readv(r1, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) 10:09:40 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe7, 0x0) 10:09:40 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$SIOCGIFMTU(r2, 0x8921, &(0x7f0000000000)) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r3) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000100)={0x2, 0x0, [0x0, 0x0, 0x8, 0xfffffffffffffffe, 0x4]}) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="26bba5ca3b729831bc655980cae67ebb55dcfc343557c9a94cbc4b8cf018c24e83a285c741d2d0335f87b2f0de47bcb46771a5e0bd157de644c2a353f43293c5ab0a980998beb705caff4624a65f60041e3bb350c14aa4c3c2a91fff2c8e853651152e4eddfb592c6061ffa76c1ab0b26ef3ca3d88651e2f733f32a2e553dccccf889911eb825247e0669d755f59b351bcf1dd3a33f5157b70171cc55902ae737600babab58fd35e20953034d9879dc9f82a9f6ddafa3fffdcb2", 0xba}], 0x1}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:09:40 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x9, 0x0, '\x00\x00\x00@\x00'}) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) 10:09:40 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x48380, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) 10:09:40 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ASSIGN_SET_INTX_MASK(r1, 0x4040aea4, &(0x7f0000000000)={0x7, 0xfffffc00, 0xe0000000}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4]}) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="26bba5ca3b729831bc655980cae67ebb55dcfc343557c9a94cbc4b8cf018c24e83a285c741d2d0335f87b2f0de47bcb46771a5e0bd157de644c2a353f43293c5ab0a980998beb705caff4624a65f60041e3bb350c14aa4c3c2a91fff2c8e853651152e4eddfb592c6061ffa76c1ab0b26ef3ca3d88651e2f733f32a2e553dccccf889911eb825247e0669d755f59b351bcf1dd3a33f5157b70171cc55902ae737600babab58fd35e20953034d9879dc9f82a9f6ddafa3fffdcb2", 0xba}], 0x1}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:09:40 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) 10:09:40 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f00000001c0)) r4 = syz_open_procfs(r3, &(0x7f0000000180)='net/igmp6\x00') mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffc, 0x11, r4, 0x3000) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4]}) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="26bba5ca3b729831bc655980cae67ebb55dcfc343557c9a94cbc4b8cf018c24e83a285c741d2d0335f87b2f0de47bcb46771a5e0bd157de644c2a353f43293c5ab0a980998beb705caff4624a65f60041e3bb350c14aa4c3c2a91fff2c8e853651152e4eddfb592c6061ffa76c1ab0b26ef3ca3d88651e2f733f32a2e553dccccf889911eb825247e0669d755f59b351bcf1dd3a33f5157b70171cc55902ae737600babab58fd35e20953034d9879dc9f82a9f6ddafa3fffdcb2", 0x10e}], 0x1}, 0x0) r5 = semget$private(0x0, 0x2, 0xe3) semctl$SETALL(r5, 0x0, 0x11, &(0x7f0000000040)=[0x81, 0x3]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:09:41 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x6240, 0x0) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100)={0xffffffffffffffff}, 0x111, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0xa, 0x4, 0xfa00, {r3}}, 0xc) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000240)={@remote, @multicast1}, 0xc) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x2000000, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r4 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x1) fchdir(r4) connect$l2tp(r4, &(0x7f0000000000)={0x2, 0x0, @empty, 0x2}, 0x10) r5 = syz_open_pts(r0, 0x230201) readv(r5, &(0x7f0000002300), 0x0) ioctl$TCSETSW(r5, 0x5403, &(0x7f0000000040)={0x0, 0x7, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) r6 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r6) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r6, 0x800448d3, &(0x7f00000002c0)={@none, 0x74, 0x3ff, 0xfff, 0x0, 0x45d, "e87881944c071acff366ff898d0ac38e364bede0b41297bc2be4cd3368bbc8e029d02260a28f712abe8e4c1ef3f956f0683fc7b7d78e7fa47b88c717c051f91de53c7fdab1bde366958910757787b773f750bcd46437bcc63285d6b5e5a9f34d34230f62680c6c17d6d8f005c00d9407c1dff1dd81e6f4188ac9385828762f84"}) 10:09:41 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4]}) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="26bba5ca3b729831bc655980cae67ebb55dcfc343557c9a94cbc4b8cf018c24e83a285c741d2d0335f87b2f0de47bcb46771a5e0bd157de644c2a353f43293c5ab0a980998beb705caff4624a65f60041e3bb350c14aa4c3c2a91fff2c8e853651152e4eddfb592c6061ffa76c1ab0b26ef3ca3d88651e2f733f32a2e553dccccf889911eb825247e0669d755f59b351bcf1dd3a33f5157b70171cc55902ae737600babab58fd35e20953034d9879dc9f82a9f6ddafa3fffdcb2", 0xba}], 0x1}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:09:41 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe7, 0x0) 10:09:41 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x0, 0x0) 10:09:41 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="3a258211f663a7724bdef6a53bfce1e775d7406272274814a3f23327edb11e2daf85534aa6f5083067b0248878f07a91df1acc99e6643d3baad0a9f349be3cc11cbf51b4f7bff473672e00351ccaefebd642492cfc5ead68cf6a0506d611726d9d3b86ae7e594875da59fcb102fa7aec81b83f338e2a6390f974cf0a9d464375306f5ac04e0a9e5e6925147496eada24409e9c6bf1a1e7a3ffffffff0bae1a3ec1d1a0c92791c2ad7f2ed22113f8f7b457d0a28f87e006"], 0x5c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x8080fffffffe) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="3a258211f663a7724bdef6a53bfce1e775d740627227ebffa3f23327edb11e2daf85534aa6f5083067b0248879f07a91df1acc998d65f2162921794a9cc8d70c43e5072be6643d3baad0a9f349be3cc11cbf51b4f7bff4085ef26585bc5fa9ebd642492cfc5ead68f06a0506"], 0x5c) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000240)={0x808, 0x0, 0xcc3b, 0x80, 0x16, "ccd6de13be0a276f"}) sync() ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x5) write$binfmt_aout(r0, &(0x7f0000000100)=ANY=[], 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', 0x2, 0x0) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000180)='/dev/input/mice\x00', 0x2) ioctl$UFFDIO_UNREGISTER(r3, 0x8010aa01, &(0x7f0000000200)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000400)=@nl=@unspec, 0x80, &(0x7f0000000880)=[{&(0x7f0000000480)=""/120, 0x78}, {&(0x7f0000000500)=""/126, 0x7e}, {&(0x7f0000000580)=""/86, 0x56}, {&(0x7f0000000640)=""/14, 0xe}, {&(0x7f0000000680)=""/55, 0x37}, {&(0x7f00000006c0)=""/74, 0x4a}, {&(0x7f0000000740)=""/206, 0xce}, {&(0x7f0000000840)=""/11, 0xb}], 0x8, &(0x7f0000000900)=""/47, 0x2f}, 0x2100) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r2, 0x111, 0x1, 0x1, 0x4) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f00000000c0)={0x3e6, 0x6, 0x8001, 0x4, 0x11, "f979ad7eef22da4171f5c0998b028d4b7d720e"}) r4 = syz_open_pts(r0, 0x0) readv(r4, &(0x7f0000000600), 0x0) ioctl$TCSETSW(r4, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) 10:09:41 executing program 5: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x200000, 0x0) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r2 = syz_open_pts(r1, 0x0) readv(r2, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) 10:09:41 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x7fffffff, 0x0, 0x9, 0x5]}) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)=""/237, 0x37, 0xed, 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x15, 0x2, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x10000, [], 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x2000}, 0x40) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)=""/237, 0x37, 0xed, 0x1}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000008c0)=ANY=[@ANYRES32=r5], &(0x7f0000000880)='syzkaller\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x2, [], 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x3, 0x0, 0x0, 0xfffffffd}, 0x10}, 0x78) r7 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r7) ioctl$VIDIOC_TRY_EXT_CTRLS(r7, 0xc0205649, &(0x7f00000007c0)={0x9b0000, 0x8, 0xa54, 0xffffffffffffffff, 0x0, &(0x7f0000000780)={0x3f034e, 0x3, [], @string=&(0x7f0000000740)=0x85}}) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r8, 0x40505331, &(0x7f0000000800)={{0x0, 0x7}, {0x1f, 0x9}, 0x10001, 0x7, 0x8}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r6, 0xc0, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x58, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, r9}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1a, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x2}}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000001540)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r9, r10}, 0x78) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000040)={r3, 0x10, &(0x7f0000000000)={&(0x7f0000000300)=""/223, 0xdf, r9}}, 0x10) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="26bba5ca3b729831bc655980cae67ebb55dcfc343557c9a94cbc4b8cf018c24e83a285c741d2d0335f87b2f0de47bcb46771a5e0bd157de644c2a353f43293c5ab0a980998beb705caff4624a65f60041e3bb350c14aa4c3c2a91fff2c8e853651152e4eddfb592c6061ffa76c1ab0b26ef3ca3d88651e2f733f32a2e553dccccf889911eb825247e0669d755f59b351bcf1dd3a33f5157b70171cc55902ae737600babab58fd35e20953034d9879dc9f82a9f6ddafa3fffdcb2", 0xba}], 0x1}, 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:09:41 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="3a258211f663a7724bdef6a53bfce1e775d7406272274814a3f23327edb11e2daf85534aa6f5083067b0248878f07a91df1acc99e6643d3baad0a9f349be3cc11cbf51b4f7bff473e9c200351ccaefebd642492cfc5ead68cf6a0506"], 0x5c) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r2, 0x80045301, &(0x7f0000000380)) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r3, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4]}) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="26bba5ca3b729831bc655980cae67ebb55dcfc343557c9a94cbc4b8cf018c24e83a285c741d2d0335f87b2f0de47bcb46771a5e0bd157de644c2a353f43293c5ab0a980998beb705caff4624a65f60041e3bb350c14aa4c3c2a91fff2c8e853651152e4eddfb592c6061ffa76c1ab0b26ef3ca3d88651e2f733f32a2e553dccccf889911eb825247e0669d755f59b351bcf1dd3a33f5157b70171cc55902ae737600babab58fd35e20953034d9879dc9f82a9f6ddafa3fffdcb2", 0xba}], 0x1}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="3a258211f663a7724bdef6a53bfce1e775d7406272274814a3f23327edb11e2daf85534aa6f5083067b0248878f07a91df1acc99e6643d3baad0a9f349be3cc11cbf51b4f7bff473e9c200351ccaefebd642492cfc5ead68cf6a0506"], 0x5c) sendfile(r4, r4, &(0x7f0000000000), 0x8080fffffffe) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x200, 0x0) ioctl$KVM_GET_XSAVE(r5, 0x9000aea4, &(0x7f0000000440)) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r6, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], 0x5c) sendfile(r6, r6, &(0x7f0000000000), 0x8080fffffffe) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f0000001480)={&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], 0x7, 0x6, 0x4, 0x0, 0x7c}) 10:09:41 executing program 1: r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) setuid(0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000780)={{{@in=@multicast2, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@multicast1}}, &(0x7f0000000880)=0xe8) mount$9p_virtio(&(0x7f0000000540)='syz\x00', &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x2000402, &(0x7f00000008c0)={'trans=virtio,', {[{@access_uid={'access', 0x3d, 0xffffffffffffffff}}, {@access_uid={'access'}}, {@version_9p2000='version=9p2000'}, {@cachetag={'cachetag', 0x3d, '}userselinuxnodevwlan0(keyring\'#'}}, {@dfltgid={'dfltgid'}}, {@nodevmap='nodevmap'}, {@access_any='access=any'}, {@dfltuid={'dfltuid'}}], [{@fowner_lt={'fowner<', r2}}]}}) fchdir(r0) sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3fb, 0x200, 0x1, 0x25dfdbfd, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20040085}, 0x801) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x4, 0x4, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)=""/237, 0x37, 0xed, 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x15, 0x10, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r4, 0x0, 0x1}, 0x40) poll(&(0x7f0000000240)=[{r4, 0x100}], 0x1, 0x0) r5 = open(&(0x7f0000000200)='./file0\x00', 0x20800, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, &(0x7f00000001c0)=0x958d, 0x4) fchdir(r5) r6 = syz_open_pts(r5, 0x20000) readv(r6, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) ioctl$TCSETSW(r6, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) 10:09:41 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="3a258211f663a7724bdef6a53bfce1e775d7406272274814a3f23327edb11e2daf85534aa6f5083067b0248878f07a91df1acc99e6643d3baad0a9f349be3cc11cbf51b4f7bff473e9c200351ccaefebd642492cfc5ead68cf6a0506"], 0x5c) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0xfffffffc, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r2 = syz_open_pts(r0, 0x0) readv(r2, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x2, 0x3, 0x1, 0x7f, 0x12, "1ce75cef1ca4f8a88bb1a29e32012ff39be135"}) 10:09:42 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe7, 0x0) 10:09:42 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x0, 0x0) 10:09:42 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="3a258211f663a7724bdef6a53bfce1e775d7406272274814a3f23327edb11e2daf85534aa6f5083067b0248878f07a91df1acc99e6643d3baad0a9f349be3cc11cbf51b4f7bff473e9c200351ccaefebd642492cfc5ead68cf6a0506"], 0x5c) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0xb}) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r2 = syz_open_pts(r0, 0x0) readv(r2, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) 10:09:42 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 10:09:42 executing program 0: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4]}) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="26bba5ca3b729831bc655980cae67ebb55dcfc343557c9a94cbc4b8cf018c24e83a285c741d2d0335f87b2f0de47bcb46771a5e0bd157de644c2a353f43293c5ab0a980998beb705caff4624a65f60041e3bb350c14aa4c3c2a91fff2c8e853651152e4eddfb592c6061ffa76c1ab0b26ef3ca3d88651e2f733f32a2e553dccccf889911eb825247e0669d755f59b351bcf1dd3a33f5157b70171cc55902ae737600babab58fd35e20953034d9879dc9f82a9f6ddafa3fffdcb2", 0xba}], 0x1}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:09:42 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r1 = open(&(0x7f0000000200)='./file0\x00', 0x424141, 0x10) fchdir(r1) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000000)={0x18, 0x1, 0x0, {0x1}}, 0x18) r2 = syz_open_pts(r0, 0x0) readv(r2, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) 10:09:43 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4]}) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="26bba5ca3b729831bc655980cae67ebb55dcfc343557c9a94cbc4b8cf018c24e83a285c741d2d0335f87b2f0de47bcb46771a5e0bd157de644c2a353f43293c5ab0a980998beb705caff4624a65f60041e3bb350c14aa4c3c2a91fff2c8e853651152e4eddfb592c6061ffa76c1ab0b26ef3ca3d88651e2f733f32a2e553dccccf889911eb825247e0669d755f59b351bcf1dd3a33f5157b70171cc55902ae737600babab58fd35e20953034d9879dc9f82a9f6ddafa3fffdcb2", 0xba}], 0x1}, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r4, 0x29, 0x1, &(0x7f0000000280), 0x4) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000005c0)={r5, @in={{0x2, 0x0, @rand_addr=0x400}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x951, 0x0, 0x0, 0x5, 0x3, 0x4]}, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000100)={r5, @in={{0x2, 0x0, @remote}}}, &(0x7f0000000040)=0x90) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000140)={r5, 0x80}, 0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000000)={r5, 0x1ff, 0x7}, 0x8) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:09:43 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x0, 0x0) 10:09:43 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x0, 0x0) 10:09:43 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="3a258211f663a7724bdef6a53bfce1e775d7406272274814a3f23327edb11e2daf85534aa6f5083067b0248878f07a91df1acc99e6643d3baad0a9f349be3cc11cbf51b4f7bff473e9c200351ccaefebd642492cfc5ead68cf6a0506"], 0x5c) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0xfffffffc, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r2 = syz_open_pts(r0, 0x0) readv(r2, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x2, 0x3, 0x1, 0x7f, 0x12, "1ce75cef1ca4f8a88bb1a29e32012ff39be135"}) 10:09:43 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x20, r3, 0x709, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) sendmsg$NL80211_CMD_SET_BSS(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x54, r3, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x9}, @NL80211_STA_WME_MAX_SP={0x13, 0x2, "7374a330c153c18675a4e483de0327"}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x5}, @NL80211_STA_WME_MAX_SP={0x11, 0x2, "d6852abef46400f6d8ba985db3"}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r5, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4]}) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="26bba5ca3b729831bc655980cae67ebb55dcfc343557c9a94cbc4b8cf018c24e83a285c741d2d0335f87b2f0de47bcb46771a5e0bd157de644c2a353f43293c5ab0a980998beb705caff4624a65f60041e3bb350c14aa4c3c2a91fff2c8e853651152e4eddfb592c6061ffa76c1ab0b26ef3ca3d88651e2f733f32a2e553dccccf889911eb825247e0669d755f59b351bcf1dd3a33f5157b70171cc55902ae737600babab58fd35e20953034d9879dc9f82a9f6ddafa3fffdcb2", 0xba}], 0x1}, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 10:09:43 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r1 = syz_open_pts(r0, 0x0) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) readv(r1, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x400001, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) 10:09:43 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r3) ioctl$KVM_S390_VCPU_FAULT(r3, 0x4008ae52, &(0x7f0000000000)) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4]}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="26bba5ca3b729831bc655980cae67ebb55dcfc343557c9a94cbc4b8cf018c24e83a285c741d2d0335f87b2f0de47bcb46771a5e0bd157de644c2a353f43293c5ab0a980998beb705caff4624a65f60041e3bb350c14aa4c3c2a91fff2c8e853651152e4eddfb592c6061ffa76c1ab0b26ef3ca3d88651e2f733f32a2e553dccccf889911eb825247e0669d755f59b351bcf1dd3a33f5157b70171cc55902ae737600babab58fd35e20953034d9879dc9f82a9f6ddafa3fffdcb2", 0xba}], 0x1}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:09:43 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="3a258211f663a7724bdef6a53bfce1e775d7406272274814a3f23327edb11e2daf85534aa6f5083067b0248878f07a91df1acc99e6643d3baad0a9f349be3cc11cbf51b4f7bff473e9c200351ccaefebd642492cfc5ead68cf6a0506"], 0x5c) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r2, 0x80045301, &(0x7f0000000380)) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r3, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4]}) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="26bba5ca3b729831bc655980cae67ebb55dcfc343557c9a94cbc4b8cf018c24e83a285c741d2d0335f87b2f0de47bcb46771a5e0bd157de644c2a353f43293c5ab0a980998beb705caff4624a65f60041e3bb350c14aa4c3c2a91fff2c8e853651152e4eddfb592c6061ffa76c1ab0b26ef3ca3d88651e2f733f32a2e553dccccf889911eb825247e0669d755f59b351bcf1dd3a33f5157b70171cc55902ae737600babab58fd35e20953034d9879dc9f82a9f6ddafa3fffdcb2", 0xba}], 0x1}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="3a258211f663a7724bdef6a53bfce1e775d7406272274814a3f23327edb11e2daf85534aa6f5083067b0248878f07a91df1acc99e6643d3baad0a9f349be3cc11cbf51b4f7bff473e9c200351ccaefebd642492cfc5ead68cf6a0506"], 0x5c) sendfile(r4, r4, &(0x7f0000000000), 0x8080fffffffe) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x200, 0x0) ioctl$KVM_GET_XSAVE(r5, 0x9000aea4, &(0x7f0000000440)) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r6, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], 0x5c) sendfile(r6, r6, &(0x7f0000000000), 0x8080fffffffe) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f0000001480)={&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], 0x7, 0x6, 0x4, 0x0, 0x7c}) 10:09:43 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) write$FUSE_OPEN(r2, &(0x7f0000000000)={0x20, 0xfffffffffffffffe, 0x3}, 0x20) r3 = syz_open_pts(r0, 0x0) readv(r3, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) ioctl$TCSETSW(r3, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)=""/237, 0x37, 0xed, 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x15, 0x10, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r4, 0x0, 0x1}, 0x40) fcntl$setsig(r4, 0xa, 0x1d) 10:09:44 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="3a258211f663a7724bdef6a53bfce1e775d7406272274814a3f23327edb11e2daf85534aa6f5083067b0248878f07a91df1acc99e6643d3baad0a9f349be3cc11cbf51b4f7bff473e9c200351ccaefebd642492cfc5ead68cf6a0506"], 0x5c) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) 10:09:44 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x0, 0x0) 10:09:44 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) write$FUSE_OPEN(r2, &(0x7f0000000000)={0x20, 0xfffffffffffffffe, 0x3}, 0x20) r3 = syz_open_pts(r0, 0x0) readv(r3, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) ioctl$TCSETSW(r3, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)=""/237, 0x37, 0xed, 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x15, 0x10, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r4, 0x0, 0x1}, 0x40) fcntl$setsig(r4, 0xa, 0x1d) 10:09:44 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="3a258211f663a7724bdef6a53bfce1e775d7406272274814a3f23327edb11e2daf85534aa6f5083067b0248878f07a91df1acc99e6643d3baad0a9f349be3cc11cbf51b4f7bff473e9c200351ccaefebd642492cfc5ead68cf6a0506"], 0x5c) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) r2 = syz_open_pts(r1, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f00000001c0)) r5 = getpgrp(0x0) tgkill(r4, r5, 0x20) write$P9_RREADLINK(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="3a258211f663a7724bdef6a53bfce1e775d7406272274814a3f23327edb11e2daf85534aa6f5083067b0248878f07a91df1acc99e6643d3baad0a9f349be3cc11cbf51b4f7bff473e9c200351ccaefebd642492cfc5ead68cf6a0506"], 0x5c) sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f0000000180)={0xa20000, 0x0, 0x2, 0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x9909ce, 0x96f7, [], @p_u32=&(0x7f00000000c0)=0xfffffff8}}) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f00000001c0)={0x15, 0x6, 0x3f, 0xfffffffe, 0x8, 0x1}) readv(r2, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$TCSETSW(r7, 0x5403, &(0x7f0000000040)={0x2000000, 0x0, 0x0, 0xb, 0x18, '\x00\x00\x00@\x00'}) 10:09:44 executing program 4 (fault-call:6 fault-nth:0): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0x0) 10:09:44 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) msgget$private(0x0, 0x44) [ 805.697914][T27101] FAULT_INJECTION: forcing a failure. [ 805.697914][T27101] name failslab, interval 1, probability 0, space 0, times 0 [ 805.838603][T27101] CPU: 1 PID: 27101 Comm: syz-executor.4 Not tainted 5.6.0-rc1-syzkaller #0 [ 805.847319][T27101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 805.857487][T27101] Call Trace: [ 805.860837][T27101] dump_stack+0x11d/0x187 [ 805.865197][T27101] should_fail.cold+0x5/0xf [ 805.869729][T27101] __should_failslab+0x82/0xb0 [ 805.874502][T27101] should_failslab+0x5/0xf [ 805.878955][T27101] kmem_cache_alloc_node_trace+0x37/0x610 [ 805.884777][T27101] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 805.890678][T27101] ? __this_cpu_preempt_check+0x3c/0x130 [ 805.896356][T27101] __get_vm_area_node+0x11f/0x280 [ 805.901394][T27101] ? netlink_sendmsg+0x348/0x8a0 [ 805.906441][T27101] __vmalloc_node_range+0xf2/0x4c0 [ 805.911569][T27101] ? netlink_sendmsg+0x348/0x8a0 [ 805.916567][T27101] ? netlink_sendmsg+0x348/0x8a0 [ 805.921522][T27101] vmalloc+0x63/0x80 [ 805.925427][T27101] ? netlink_sendmsg+0x348/0x8a0 [ 805.930553][T27101] netlink_sendmsg+0x348/0x8a0 [ 805.935348][T27101] ? netlink_unicast+0x4c0/0x4c0 [ 805.940323][T27101] sock_sendmsg+0x98/0xc0 [ 805.948686][T27101] kernel_sendmsg+0x48/0x60 [ 805.953217][T27101] sock_no_sendpage+0xc5/0x100 [ 805.958003][T27101] ? sock_kfree_s+0x60/0x60 [ 805.962509][T27101] kernel_sendpage+0x64/0xa0 [ 805.967106][T27101] sock_sendpage+0x64/0x80 [ 805.971602][T27101] ? kernel_sendpage+0xa0/0xa0 [ 805.976440][T27101] pipe_to_sendpage+0x101/0x190 [ 805.981309][T27101] __splice_from_pipe+0x298/0x4a0 [ 805.986355][T27101] ? direct_splice_actor+0xb0/0xb0 [ 805.991535][T27101] ? direct_splice_actor+0xb0/0xb0 [ 805.996652][T27101] splice_from_pipe+0xc2/0x100 [ 806.001621][T27101] generic_splice_sendpage+0x41/0x60 [ 806.006927][T27101] ? splice_from_pipe+0x100/0x100 [ 806.011958][T27101] do_splice+0x6c7/0xc30 [ 806.016251][T27101] ? __fget_light+0xc0/0x1a0 [ 806.020951][T27101] __x64_sys_splice+0x1fd/0x210 [ 806.025973][T27101] do_syscall_64+0xc7/0x390 [ 806.030467][T27101] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 806.036346][T27101] RIP: 0033:0x45c889 [ 806.040331][T27101] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 806.060065][T27101] RSP: 002b:00007f82fd9d9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 806.068488][T27101] RAX: ffffffffffffffda RBX: 00007f82fd9da6d4 RCX: 000000000045c889 [ 806.076452][T27101] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 806.084405][T27101] RBP: 000000000076bfa0 R08: 000000000004ffe7 R09: 0000000000000000 [ 806.092365][T27101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 806.100330][T27101] R13: 0000000000000ba4 R14: 00000000004ce6f2 R15: 0000000000000000 [ 806.116296][T27101] syz-executor.4: vmalloc: allocation failure: 4416 bytes, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 806.149609][T27101] CPU: 1 PID: 27101 Comm: syz-executor.4 Not tainted 5.6.0-rc1-syzkaller #0 [ 806.158318][T27101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 806.168407][T27101] Call Trace: [ 806.171716][T27101] dump_stack+0x11d/0x187 [ 806.176137][T27101] warn_alloc.cold+0x72/0xcf [ 806.180732][T27101] ? __get_vm_area_node+0x228/0x280 [ 806.185943][T27101] __vmalloc_node_range+0x371/0x4c0 [ 806.191243][T27101] ? netlink_sendmsg+0x348/0x8a0 [ 806.196228][T27101] vmalloc+0x63/0x80 [ 806.200141][T27101] ? netlink_sendmsg+0x348/0x8a0 [ 806.205102][T27101] netlink_sendmsg+0x348/0x8a0 [ 806.209961][T27101] ? netlink_unicast+0x4c0/0x4c0 [ 806.214913][T27101] sock_sendmsg+0x98/0xc0 [ 806.219275][T27101] kernel_sendmsg+0x48/0x60 [ 806.223785][T27101] sock_no_sendpage+0xc5/0x100 [ 806.228860][T27101] ? sock_kfree_s+0x60/0x60 [ 806.233745][T27101] kernel_sendpage+0x64/0xa0 [ 806.238449][T27101] sock_sendpage+0x64/0x80 [ 806.242956][T27101] ? kernel_sendpage+0xa0/0xa0 [ 806.247731][T27101] pipe_to_sendpage+0x101/0x190 [ 806.252657][T27101] __splice_from_pipe+0x298/0x4a0 [ 806.257772][T27101] ? direct_splice_actor+0xb0/0xb0 [ 806.262925][T27101] ? direct_splice_actor+0xb0/0xb0 [ 806.268047][T27101] splice_from_pipe+0xc2/0x100 [ 806.272818][T27101] generic_splice_sendpage+0x41/0x60 [ 806.278102][T27101] ? splice_from_pipe+0x100/0x100 [ 806.283120][T27101] do_splice+0x6c7/0xc30 [ 806.287378][T27101] ? __fget_light+0xc0/0x1a0 [ 806.291993][T27101] __x64_sys_splice+0x1fd/0x210 [ 806.296852][T27101] do_syscall_64+0xc7/0x390 [ 806.301355][T27101] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 806.307253][T27101] RIP: 0033:0x45c889 [ 806.311147][T27101] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 806.330778][T27101] RSP: 002b:00007f82fd9d9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 806.339326][T27101] RAX: ffffffffffffffda RBX: 00007f82fd9da6d4 RCX: 000000000045c889 10:09:45 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x0, 0x0) [ 806.347364][T27101] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 806.355384][T27101] RBP: 000000000076bfa0 R08: 000000000004ffe7 R09: 0000000000000000 [ 806.363362][T27101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 806.371337][T27101] R13: 0000000000000ba4 R14: 00000000004ce6f2 R15: 0000000000000000 [ 806.391707][T27101] Mem-Info: [ 806.400251][T27101] active_anon:227580 inactive_anon:235 isolated_anon:0 [ 806.400251][T27101] active_file:8240 inactive_file:40263 isolated_file:0 [ 806.400251][T27101] unevictable:0 dirty:236 writeback:8 unstable:0 [ 806.400251][T27101] slab_reclaimable:5581 slab_unreclaimable:18818 [ 806.400251][T27101] mapped:60973 shmem:302 pagetables:2522 bounce:0 [ 806.400251][T27101] free:1469312 free_pcp:754 free_cma:0 10:09:45 executing program 0 (fault-call:5 fault-nth:0): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000000)={0x0, 0x0, [0x0, 0x400]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 806.441268][T27101] Node 0 active_anon:899816kB inactive_anon:940kB active_file:32824kB inactive_file:161052kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:243892kB dirty:944kB writeback:32kB shmem:1208kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 843776kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no 10:09:45 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="3a258265003d613cf389e1cb0b11f663a7724bdef6a53bfce1e775d7406272274814a3f23327edb11e2d13bc8e9380a6b02daf85534aa6f5083067b0248878f07a91df1acc99e6643d3baad0a9f349be3cc11cbf51b4f7bff473e9c200351ccaefebd642492cfc5ead68cf6a0506"], 0x5c) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) openat$vfio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vfio/vfio\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) fcntl$setlease(r2, 0x400, 0x1) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r3 = syz_open_pts(r0, 0x0) readv(r3, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) ioctl$TCSETSW(r3, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) [ 806.536285][T27101] Node 1 active_anon:10504kB inactive_anon:0kB active_file:136kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 806.567964][T27101] Node 0 DMA free:15908kB min:188kB low:232kB high:276kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 806.598021][T27101] lowmem_reserve[]: 0 2896 3603 3603 [ 806.604157][T27101] Node 0 DMA32 free:1925676kB min:35272kB low:44088kB high:52904kB reserved_highatomic:0KB active_anon:537100kB inactive_anon:0kB active_file:2644kB inactive_file:116576kB unevictable:0kB writepending:816kB present:3129332kB managed:2967808kB mlocked:0kB kernel_stack:948kB pagetables:3860kB bounce:0kB free_pcp:1592kB local_pcp:192kB free_cma:0kB [ 806.644714][T27101] lowmem_reserve[]: 0 0 707 707 [ 806.651419][T27101] Node 0 Normal free:140940kB min:8616kB low:10768kB high:12920kB reserved_highatomic:0KB active_anon:362784kB inactive_anon:940kB active_file:30180kB inactive_file:44476kB unevictable:0kB writepending:160kB present:786432kB managed:724520kB mlocked:0kB kernel_stack:3692kB pagetables:6228kB bounce:0kB free_pcp:1584kB local_pcp:368kB free_cma:0kB [ 806.684359][T27101] lowmem_reserve[]: 0 0 0 0 [ 806.689248][T27101] Node 1 Normal free:3794512kB min:46032kB low:57540kB high:69048kB reserved_highatomic:0KB active_anon:10504kB inactive_anon:0kB active_file:136kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870256kB mlocked:0kB kernel_stack:8kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 806.720508][T27101] lowmem_reserve[]: 0 0 0 0 [ 806.725080][T27101] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 806.740009][T27101] Node 0 DMA32: 1247*4kB (UME) 1122*8kB (UME) 958*16kB (UME) 826*32kB (UME) 700*64kB (UME) 193*128kB (UME) 69*256kB (UME) 36*512kB (UM) 5*1024kB (M) 2*2048kB (UM) 428*4096kB (M) = 1923628kB [ 806.759815][T27101] Node 0 Normal: 2981*4kB (ME) 3377*8kB (ME) 2291*16kB (ME) 1052*32kB (ME) 339*64kB (M) 40*128kB (ME) 7*256kB (ME) 2*512kB (E) 2*1024kB (E) 0*2048kB 0*4096kB = 140940kB 10:09:45 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000e01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = open$dir(&(0x7f0000000200)='./file0\x00', 0x42040, 0x10) fcntl$dupfd(r1, 0x406, r2) ioctl$TIOCGPTLCK(r1, 0x80045439, &(0x7f00000001c0)) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000180)={0x2, 0x3f, 0xac, 0xffffffff, 0x5, "fb315049bb3d259e2a4caa676d8e3515214fc9"}) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r3 = syz_open_pts(r0, 0x0) getuid() readv(r3, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x2a0000, 0x0) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r4, 0x84, 0x7, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$TCSETSW(r3, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) 10:09:45 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="3a258211f663a7724bdef6a53bfce1e775d7406272274814a3f23327edb11e2daf85534aa6f5083067b0248878f07a91df1acc99e6643d3baad0a9f349be3cc11cbf51b4f7bff473e9c200351ccaefebd642492cfc5ead68cf6a0506"], 0x5c) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) [ 806.798547][T27101] Node 1 Normal: 2*4kB (UM) 3*8kB (UM) 12*16kB (UME) 3*32kB (UM) 3*64kB (ME) 1*128kB (E) 2*256kB (UE) 1*512kB (E) 2*1024kB (ME) 1*2048kB (E) 925*4096kB (M) = 3794560kB 10:09:45 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000000)={0x0, 0x0, [0x0, 0x400]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 806.871334][T27101] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 806.881282][T27101] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 806.891556][T27101] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 806.901402][T27101] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 806.911104][T27101] 48802 total pagecache pages [ 806.916272][T27101] 0 pages in swap cache [ 806.920708][T27101] Swap cache stats: add 0, delete 0, find 0/0 [ 806.927243][T27101] Free swap = 0kB [ 806.931617][T27101] Total swap = 0kB [ 806.965359][T27101] 1965979 pages RAM [ 806.974736][T27101] 0 pages HighMem/MovableOnly [ 806.998569][T27101] 71356 pages reserved [ 807.025763][T27101] 0 pages cma reserved 10:09:46 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0x0) 10:09:46 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) personality(0x400000b) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000000)={0x0, 0x0, [0x0, 0x400]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:09:46 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = syz_open_pts(r1, 0x600082) readv(r2, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="3a258211f663a7724bdef6a53bfce1e775d7406272274814a3f23327edb11e2daf85534aa6f5083067b0248878f07a91df1acc99e6643d3baad0a9f349be3cc11cbf51b4f7bff473e9c200351ccaefebd642492cfc5ead68cf6a0506"], 0x5c) sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="3a258211f663a7724bdef6a53bfce1e775d7406272274814a3f23327edb11e2daf85534aa6f5083067b0248878f07a91df1acc99e6643d3baad0a9f349be3cc11cbf51b4f7bff473e9c200351ccaefebd642492cfc5ead68cf6a0506"], 0x5c) sendfile(r4, r4, &(0x7f0000000000), 0x8080fffffffe) r5 = accept$alg(r4, 0x0, 0x0) ioctl$FICLONE(r5, 0x40049409, 0xffffffffffffffff) setsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f0000000100)={0xc0, 0x40}, 0x2) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f00000000c0)={0x5, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$NBD_DO_IT(r4, 0xab03) 10:09:46 executing program 3 (fault-call:6 fault-nth:0): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0x0) 10:09:46 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x52600, 0x2) fchdir(r3) ioctl$KVM_RUN(r3, 0xae80, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000000)={0x70000, 0x0, [0x3, 0x6]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 807.590404][T27156] FAULT_INJECTION: forcing a failure. [ 807.590404][T27156] name failslab, interval 1, probability 0, space 0, times 0 [ 807.659298][T27156] CPU: 0 PID: 27156 Comm: syz-executor.3 Not tainted 5.6.0-rc1-syzkaller #0 [ 807.668024][T27156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 807.678857][T27156] Call Trace: [ 807.682167][T27156] dump_stack+0x11d/0x187 [ 807.686611][T27156] should_fail.cold+0x5/0xf [ 807.692101][T27156] __should_failslab+0x82/0xb0 [ 807.696879][T27156] should_failslab+0x5/0xf [ 807.701460][T27156] kmem_cache_alloc_node_trace+0x37/0x610 [ 807.707277][T27156] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 807.713197][T27156] ? __this_cpu_preempt_check+0x3c/0x130 [ 807.718840][T27156] __get_vm_area_node+0x11f/0x280 [ 807.723888][T27156] ? netlink_sendmsg+0x348/0x8a0 [ 807.728836][T27156] __vmalloc_node_range+0xf2/0x4c0 [ 807.734108][T27156] ? netlink_sendmsg+0x348/0x8a0 [ 807.739116][T27156] ? netlink_sendmsg+0x348/0x8a0 [ 807.744540][T27156] vmalloc+0x63/0x80 [ 807.748445][T27156] ? netlink_sendmsg+0x348/0x8a0 [ 807.753390][T27156] netlink_sendmsg+0x348/0x8a0 [ 807.758172][T27156] ? netlink_unicast+0x4c0/0x4c0 [ 807.763124][T27156] sock_sendmsg+0x98/0xc0 [ 807.767464][T27156] kernel_sendmsg+0x48/0x60 [ 807.772065][T27156] sock_no_sendpage+0xc5/0x100 [ 807.776882][T27156] ? sock_kfree_s+0x60/0x60 [ 807.781443][T27156] kernel_sendpage+0x64/0xa0 [ 807.786048][T27156] sock_sendpage+0x64/0x80 [ 807.790510][T27156] ? kernel_sendpage+0xa0/0xa0 [ 807.795288][T27156] pipe_to_sendpage+0x101/0x190 [ 807.800289][T27156] __splice_from_pipe+0x298/0x4a0 [ 807.805391][T27156] ? direct_splice_actor+0xb0/0xb0 [ 807.810521][T27156] ? direct_splice_actor+0xb0/0xb0 [ 807.815711][T27156] splice_from_pipe+0xc2/0x100 [ 807.820495][T27156] generic_splice_sendpage+0x41/0x60 [ 807.825793][T27156] ? splice_from_pipe+0x100/0x100 [ 807.830854][T27156] do_splice+0x6c7/0xc30 [ 807.835105][T27156] ? __fget_light+0xc0/0x1a0 [ 807.839822][T27156] __x64_sys_splice+0x1fd/0x210 [ 807.845734][T27156] do_syscall_64+0xc7/0x390 [ 807.850415][T27156] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 807.856322][T27156] RIP: 0033:0x45c889 [ 807.860233][T27156] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 807.880814][T27156] RSP: 002b:00007fecea363c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 807.891029][T27156] RAX: ffffffffffffffda RBX: 00007fecea3646d4 RCX: 000000000045c889 [ 807.899010][T27156] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 807.907343][T27156] RBP: 000000000076bfa0 R08: 000000000004ffe7 R09: 0000000000000000 [ 807.916154][T27156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 807.924129][T27156] R13: 0000000000000ba4 R14: 00000000004ce6f2 R15: 0000000000000000 10:09:47 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0x2) 10:09:47 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="3a258211f663a7724bdef6a53bfce1e775d7406272274814a3f23327edb11e2daf85534aa6f5083067b0248878f07a91df1acc99e6643d3baad0a9f349be3cc11cbf51b4f7bff473e9c200351ccaefebd642492cfc5ead68cf6a0506"], 0x5c) sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r3, 0x10f, 0x84, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000000)={0x0, 0x0, [0x0, 0x400]}) setpriority(0x1, 0x0, 0x7fff) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:09:47 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000012a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000001c0)) r2 = getpgid(r1) fcntl$setown(r0, 0x8, r2) r3 = syz_open_pts(r0, 0x0) readv(r3, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000000)) ioctl$TCSETSW(r3, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) 10:09:47 executing program 5 (fault-call:6 fault-nth:0): r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r2, &(0x7f0000000100), 0x8) listen(r2, 0x0) accept4(r2, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, r1+30000000}}, 0x0) tkill(r0, 0x1000000000013) [ 808.498339][T27183] FAULT_INJECTION: forcing a failure. [ 808.498339][T27183] name failslab, interval 1, probability 0, space 0, times 0 [ 808.512719][T27183] CPU: 1 PID: 27183 Comm: syz-executor.5 Not tainted 5.6.0-rc1-syzkaller #0 [ 808.521405][T27183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 808.531488][T27183] Call Trace: [ 808.534862][T27183] dump_stack+0x11d/0x187 [ 808.539223][T27183] should_fail.cold+0x5/0xf [ 808.543747][T27183] __should_failslab+0x82/0xb0 10:09:47 executing program 3 (fault-call:6 fault-nth:1): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0x0) [ 808.548519][T27183] should_failslab+0x5/0xf [ 808.553218][T27183] kmem_cache_alloc+0x23/0x5e0 [ 808.558000][T27183] ? _parse_integer+0x12f/0x150 [ 808.563032][T27183] ? sock_free_inode+0x40/0x40 [ 808.567907][T27183] sock_alloc_inode+0x2e/0x100 [ 808.572701][T27183] ? sock_free_inode+0x40/0x40 [ 808.578568][T27183] alloc_inode+0x42/0x130 [ 808.582891][T27183] new_inode_pseudo+0x32/0xe0 [ 808.588253][T27183] ? __read_once_size+0x2f/0xd0 [ 808.593182][T27183] sock_alloc+0x3c/0x110 [ 808.597519][T27183] __sys_accept4_file+0xe3/0x340 [ 808.602495][T27183] ? __fget_files+0xa2/0x1c0 [ 808.607221][T27183] ? __fget_light+0xc0/0x1a0 [ 808.611810][T27183] __sys_accept4+0x5d/0xa0 [ 808.616219][T27183] __x64_sys_accept4+0x5a/0x70 [ 808.620975][T27183] do_syscall_64+0xc7/0x390 [ 808.625483][T27183] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 808.631371][T27183] RIP: 0033:0x45c889 [ 808.635272][T27183] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 808.655258][T27183] RSP: 002b:00007f22e22efc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 808.664019][T27183] RAX: ffffffffffffffda RBX: 00007f22e22f06d4 RCX: 000000000045c889 [ 808.671984][T27183] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 808.679944][T27183] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 808.687931][T27183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 10:09:47 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f00000000c0)=""/127) r2 = syz_open_pts(r0, 0x0) readv(r2, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r3, 0x2, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}]}, 0x2c}}, 0x0) 10:09:47 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x0, 0x13, "0000000000000800000000f4ffffffffffffff"}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) [ 808.696503][T27183] R13: 000000000000000b R14: 00000000004c2b25 R15: 0000000000000000 [ 808.892776][T27195] FAULT_INJECTION: forcing a failure. [ 808.892776][T27195] name failslab, interval 1, probability 0, space 0, times 0 [ 808.931703][T27195] CPU: 0 PID: 27195 Comm: syz-executor.3 Not tainted 5.6.0-rc1-syzkaller #0 [ 808.940514][T27195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 808.950592][T27195] Call Trace: [ 808.953910][T27195] dump_stack+0x11d/0x187 [ 808.958265][T27195] should_fail.cold+0x5/0xf [ 808.962961][T27195] __should_failslab+0x82/0xb0 [ 808.967735][T27195] should_failslab+0x5/0xf [ 808.972171][T27195] kmem_cache_alloc_node+0x35/0x680 [ 808.977402][T27195] ? tomoyo_supervisor+0x170/0xc90 [ 808.982532][T27195] ? delay_tsc+0x8a/0xb0 [ 808.986813][T27195] alloc_vmap_area+0x102/0x1540 [ 808.991775][T27195] ? debug_smp_processor_id+0x3f/0x129 [ 808.997295][T27195] ? kmem_cache_alloc_node_trace+0x1b2/0x610 [ 809.003297][T27195] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 809.009204][T27195] __get_vm_area_node+0x16f/0x280 [ 809.014247][T27195] ? netlink_sendmsg+0x348/0x8a0 [ 809.019268][T27195] __vmalloc_node_range+0xf2/0x4c0 [ 809.024656][T27195] ? netlink_sendmsg+0x348/0x8a0 [ 809.029619][T27195] ? netlink_sendmsg+0x348/0x8a0 [ 809.034563][T27195] vmalloc+0x63/0x80 [ 809.038584][T27195] ? netlink_sendmsg+0x348/0x8a0 [ 809.043537][T27195] netlink_sendmsg+0x348/0x8a0 [ 809.048429][T27195] ? netlink_unicast+0x4c0/0x4c0 [ 809.053422][T27195] sock_sendmsg+0x98/0xc0 [ 809.057765][T27195] kernel_sendmsg+0x48/0x60 [ 809.062349][T27195] sock_no_sendpage+0xc5/0x100 [ 809.067207][T27195] ? sock_kfree_s+0x60/0x60 [ 809.071715][T27195] kernel_sendpage+0x64/0xa0 [ 809.076310][T27195] sock_sendpage+0x64/0x80 [ 809.080742][T27195] ? kernel_sendpage+0xa0/0xa0 [ 809.085583][T27195] pipe_to_sendpage+0x101/0x190 [ 809.090578][T27195] __splice_from_pipe+0x298/0x4a0 [ 809.095644][T27195] ? direct_splice_actor+0xb0/0xb0 [ 809.100755][T27195] ? direct_splice_actor+0xb0/0xb0 [ 809.106820][T27195] splice_from_pipe+0xc2/0x100 [ 809.111592][T27195] generic_splice_sendpage+0x41/0x60 [ 809.117135][T27195] ? splice_from_pipe+0x100/0x100 [ 809.122159][T27195] do_splice+0x6c7/0xc30 [ 809.126407][T27195] ? __fget_light+0xc0/0x1a0 [ 809.131708][T27195] __x64_sys_splice+0x1fd/0x210 [ 809.136591][T27195] do_syscall_64+0xc7/0x390 [ 809.141098][T27195] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 809.147005][T27195] RIP: 0033:0x45c889 [ 809.151126][T27195] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 809.170872][T27195] RSP: 002b:00007fecea363c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 809.179298][T27195] RAX: ffffffffffffffda RBX: 00007fecea3646d4 RCX: 000000000045c889 10:09:48 executing program 5 (fault-call:6 fault-nth:1): r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r2, &(0x7f0000000100), 0x8) listen(r2, 0x0) accept4(r2, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, r1+30000000}}, 0x0) tkill(r0, 0x1000000000013) [ 809.187276][T27195] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 809.196216][T27195] RBP: 000000000076bfa0 R08: 000000000004ffe7 R09: 0000000000000000 [ 809.204182][T27195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 809.212589][T27195] R13: 0000000000000ba4 R14: 00000000004ce6f2 R15: 0000000000000001 10:09:48 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0x3) [ 809.352656][T27206] FAULT_INJECTION: forcing a failure. [ 809.352656][T27206] name failslab, interval 1, probability 0, space 0, times 0 [ 809.390541][T27206] CPU: 0 PID: 27206 Comm: syz-executor.5 Not tainted 5.6.0-rc1-syzkaller #0 [ 809.399368][T27206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 809.409455][T27206] Call Trace: [ 809.412765][T27206] dump_stack+0x11d/0x187 [ 809.417227][T27206] should_fail.cold+0x5/0xf [ 809.421805][T27206] __should_failslab+0x82/0xb0 [ 809.426611][T27206] should_failslab+0x5/0xf [ 809.431098][T27206] kmem_cache_alloc+0x23/0x5e0 [ 809.435953][T27206] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 809.441870][T27206] ? __read_once_size+0x2f/0xd0 [ 809.446828][T27206] __d_alloc+0x51/0x4a0 [ 809.451006][T27206] d_alloc_pseudo+0x23/0x60 [ 809.455515][T27206] alloc_file_pseudo+0x95/0x1b0 [ 809.460493][T27206] sock_alloc_file+0x65/0x130 [ 809.465224][T27206] __sys_accept4_file+0x1a2/0x340 [ 809.470360][T27206] ? __fget_files+0xa2/0x1c0 [ 809.474967][T27206] ? __fget_light+0xc0/0x1a0 [ 809.484107][T27206] __sys_accept4+0x5d/0xa0 [ 809.488541][T27206] __x64_sys_accept4+0x5a/0x70 [ 809.493312][T27206] do_syscall_64+0xc7/0x390 [ 809.497824][T27206] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 809.503725][T27206] RIP: 0033:0x45c889 [ 809.507632][T27206] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 809.527381][T27206] RSP: 002b:00007f22e22efc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 809.535819][T27206] RAX: ffffffffffffffda RBX: 00007f22e22f06d4 RCX: 000000000045c889 [ 809.543806][T27206] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 10:09:48 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000000)={0x0, 0x0, [0x8000000000000000, 0x400, 0x400000000, 0x0, 0xffffffffffffffff]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 809.551800][T27206] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 809.559771][T27206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 809.567824][T27206] R13: 000000000000000b R14: 00000000004c2b25 R15: 0000000000000001 10:09:48 executing program 3 (fault-call:6 fault-nth:2): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0x0) [ 809.706985][T27214] debugfs: Directory '27214-4' with parent 'kvm' already present! 10:09:48 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="3a258211f663a7724bdef6a53bfce1e775d7406272274814a3f23327edb11e2daf85534aa6f5083067b0248878f07a91df1acc99e6643d3baad0a9f349be3cc11cbf51b4f7bff473e9c200351ccaefebd642492cfc5ead68cf6a0506"], 0x5c) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="3a258211f663a7724bdef6a53bfce1e775d7406272274814a3f23327edb11e2daf85534aa6f5083067b0241f2d060091df1acc99e6413d3baad0a9f349be3cc11cbf51b2f7bff473ad68cf6a0506"], 0x5c) sendfile(r2, r2, &(0x7f0000000000)=0xfffffffffffffffe, 0x23ac) ioctl$TIOCNOTTY(r2, 0x5422) r3 = syz_open_pts(r0, 0x0) readv(r3, &(0x7f0000000600)=[{&(0x7f0000000180)=""/167, 0xa7}], 0x1) ioctl$TCSETSW(r3, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) 10:09:48 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000040)={0x20, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) [ 809.799338][T27223] FAULT_INJECTION: forcing a failure. [ 809.799338][T27223] name failslab, interval 1, probability 0, space 0, times 0 [ 809.817273][T27223] CPU: 0 PID: 27223 Comm: syz-executor.3 Not tainted 5.6.0-rc1-syzkaller #0 [ 809.826050][T27223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 809.836112][T27223] Call Trace: [ 809.839589][T27223] dump_stack+0x11d/0x187 [ 809.844079][T27223] should_fail.cold+0x5/0xf [ 809.848781][T27223] __should_failslab+0x82/0xb0 [ 809.853587][T27223] should_failslab+0x5/0xf [ 809.858043][T27223] kmem_cache_alloc_node+0x35/0x680 [ 809.863280][T27223] ? tomoyo_supervisor+0x170/0xc90 [ 809.868432][T27223] alloc_vmap_area+0x95b/0x1540 [ 809.873456][T27223] ? debug_smp_processor_id+0x3f/0x129 [ 809.878946][T27223] ? kmem_cache_alloc_node_trace+0x1b2/0x610 [ 809.885029][T27223] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 809.890934][T27223] __get_vm_area_node+0x16f/0x280 [ 809.895979][T27223] ? netlink_sendmsg+0x348/0x8a0 [ 809.901008][T27223] __vmalloc_node_range+0xf2/0x4c0 [ 809.906128][T27223] ? netlink_sendmsg+0x348/0x8a0 [ 809.911091][T27223] ? netlink_sendmsg+0x348/0x8a0 [ 809.916147][T27223] vmalloc+0x63/0x80 [ 809.920048][T27223] ? netlink_sendmsg+0x348/0x8a0 [ 809.925006][T27223] netlink_sendmsg+0x348/0x8a0 [ 809.929790][T27223] ? netlink_unicast+0x4c0/0x4c0 [ 809.934904][T27223] sock_sendmsg+0x98/0xc0 [ 809.939254][T27223] kernel_sendmsg+0x48/0x60 [ 809.943767][T27223] sock_no_sendpage+0xc5/0x100 [ 809.948555][T27223] ? sock_kfree_s+0x60/0x60 [ 809.953098][T27223] kernel_sendpage+0x64/0xa0 [ 809.957702][T27223] sock_sendpage+0x64/0x80 [ 809.962130][T27223] ? kernel_sendpage+0xa0/0xa0 [ 809.966980][T27223] pipe_to_sendpage+0x101/0x190 [ 809.971853][T27223] __splice_from_pipe+0x298/0x4a0 [ 809.976880][T27223] ? direct_splice_actor+0xb0/0xb0 [ 809.982054][T27223] ? direct_splice_actor+0xb0/0xb0 [ 809.987183][T27223] splice_from_pipe+0xc2/0x100 [ 809.992032][T27223] generic_splice_sendpage+0x41/0x60 [ 809.997327][T27223] ? splice_from_pipe+0x100/0x100 [ 810.002394][T27223] do_splice+0x6c7/0xc30 [ 810.006653][T27223] ? __fget_light+0xc0/0x1a0 [ 810.011276][T27223] __x64_sys_splice+0x1fd/0x210 [ 810.016191][T27223] do_syscall_64+0xc7/0x390 [ 810.020712][T27223] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 810.026671][T27223] RIP: 0033:0x45c889 [ 810.030572][T27223] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 810.050302][T27223] RSP: 002b:00007fecea363c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 810.058718][T27223] RAX: ffffffffffffffda RBX: 00007fecea3646d4 RCX: 000000000045c889 [ 810.066691][T27223] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 810.074660][T27223] RBP: 000000000076bfa0 R08: 000000000004ffe7 R09: 0000000000000000 [ 810.082629][T27223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 810.090686][T27223] R13: 0000000000000ba4 R14: 00000000004ce6f2 R15: 0000000000000002 10:09:49 executing program 5 (fault-call:6 fault-nth:2): r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r2, &(0x7f0000000100), 0x8) listen(r2, 0x0) accept4(r2, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, r1+30000000}}, 0x0) tkill(r0, 0x1000000000013) 10:09:49 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="3a258211f663a7724bdef6a53bfce1e775d7406272274814a3f23327edb11e2daf85534aa6f5083067b0248878f07a91df1acc99e6643d3baad0a9f349be3cc11cbf51b4f7bff473e9c200351ccaefebd642492cfc5ead68cf6a0506"], 0x5c) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r4, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x1c, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x40000) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000000)={0x0, 0x0, [0x0, 0x400, 0x0, 0x0, 0x7a1c]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r5) r6 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r6) getsockopt$CAN_RAW_FD_FRAMES(r6, 0x65, 0x5, &(0x7f00000002c0), &(0x7f0000000300)=0x4) epoll_ctl$EPOLL_CTL_DEL(r5, 0x2, r0) ioctl$VIDIOC_EXPBUF(r5, 0xc0405610, &(0x7f00000000c0)={0x4, 0x2, 0x1f, 0x4000}) 10:09:49 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0x4) 10:09:49 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000000100)={0x9a0000, 0x9, 0x0, r0, 0x0, &(0x7f00000000c0)={0x990afc, 0x80, [], @value=0x6}}) syz_open_pts(r2, 0x242000) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r3) ioctl$TIOCSERGETLSR(r3, 0x5459, &(0x7f0000000000)) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="3a258211f663a7724bdef6a53bfce1e775d7406272274814a3f23327edb11e2daf85534aa6f5083067b0248878f07a91df1acc99e6643d3baad0a9f349be3cc11cbf51b4f7bff473e9c200351ccaefebd642492cfc5ead68cf6a0506"], 0x5c) sendfile(r4, r4, &(0x7f0000000000), 0x8080fffffffe) ioctl$KVM_SMI(r4, 0xaeb7) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "0000005cd6000800"}) r5 = syz_open_pts(r0, 0x0) readv(r5, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) ioctl$TCSETSW(r5, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/slabinfo\x00', 0x0, 0x0) ioctl$KVM_GET_ONE_REG(r6, 0x4010aeab, &(0x7f0000000240)={0x2}) [ 810.253814][T27238] FAULT_INJECTION: forcing a failure. [ 810.253814][T27238] name failslab, interval 1, probability 0, space 0, times 0 [ 810.286977][T27238] CPU: 1 PID: 27238 Comm: syz-executor.5 Not tainted 5.6.0-rc1-syzkaller #0 [ 810.295681][T27238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 810.305735][T27238] Call Trace: [ 810.309118][T27238] dump_stack+0x11d/0x187 [ 810.314962][T27238] should_fail.cold+0x5/0xf [ 810.319604][T27238] __should_failslab+0x82/0xb0 [ 810.324395][T27238] should_failslab+0x5/0xf [ 810.328817][T27238] kmem_cache_alloc+0x23/0x5e0 [ 810.333622][T27238] ? memcg_kmem_put_cache+0x77/0xc0 [ 810.338824][T27238] ? kmem_cache_alloc+0x1e2/0x5e0 [ 810.343944][T27238] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 810.349850][T27238] __alloc_file+0x49/0x200 [ 810.354321][T27238] alloc_empty_file+0x8b/0x180 [ 810.359157][T27238] alloc_file+0x4e/0x2b0 [ 810.363411][T27238] alloc_file_pseudo+0x121/0x1b0 [ 810.368373][T27238] sock_alloc_file+0x65/0x130 [ 810.373051][T27238] __sys_accept4_file+0x1a2/0x340 [ 810.378083][T27238] ? __fget_files+0xa2/0x1c0 [ 810.382690][T27238] ? __fget_light+0xc0/0x1a0 [ 810.387727][T27238] __sys_accept4+0x5d/0xa0 [ 810.392149][T27238] __x64_sys_accept4+0x5a/0x70 [ 810.396964][T27238] do_syscall_64+0xc7/0x390 [ 810.401578][T27238] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 810.407482][T27238] RIP: 0033:0x45c889 [ 810.411367][T27238] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 810.431030][T27238] RSP: 002b:00007f22e22efc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 810.439542][T27238] RAX: ffffffffffffffda RBX: 00007f22e22f06d4 RCX: 000000000045c889 [ 810.447618][T27238] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 810.455591][T27238] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 810.463547][T27238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 810.471599][T27238] R13: 000000000000000b R14: 00000000004c2b25 R15: 0000000000000002 10:09:49 executing program 3 (fault-call:6 fault-nth:3): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0x0) [ 810.707495][T27254] FAULT_INJECTION: forcing a failure. [ 810.707495][T27254] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 810.723764][T27254] CPU: 1 PID: 27254 Comm: syz-executor.3 Not tainted 5.6.0-rc1-syzkaller #0 [ 810.732446][T27254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 810.742509][T27254] Call Trace: [ 810.745824][T27254] dump_stack+0x11d/0x187 [ 810.750162][T27254] should_fail.cold+0x5/0xf [ 810.754729][T27254] __alloc_pages_nodemask+0xcf/0x310 [ 810.760062][T27254] alloc_pages_current+0xca/0x170 [ 810.765096][T27254] __vmalloc_node_range+0x2de/0x4c0 [ 810.770333][T27254] ? netlink_sendmsg+0x348/0x8a0 [ 810.775279][T27254] vmalloc+0x63/0x80 [ 810.779185][T27254] ? netlink_sendmsg+0x348/0x8a0 [ 810.784137][T27254] netlink_sendmsg+0x348/0x8a0 [ 810.788965][T27254] ? netlink_unicast+0x4c0/0x4c0 [ 810.793935][T27254] sock_sendmsg+0x98/0xc0 [ 810.798401][T27254] kernel_sendmsg+0x48/0x60 [ 810.802905][T27254] sock_no_sendpage+0xc5/0x100 [ 810.807678][T27254] ? sock_kfree_s+0x60/0x60 [ 810.812174][T27254] kernel_sendpage+0x64/0xa0 [ 810.816854][T27254] sock_sendpage+0x64/0x80 [ 810.821424][T27254] ? kernel_sendpage+0xa0/0xa0 [ 810.826172][T27254] pipe_to_sendpage+0x101/0x190 [ 810.831200][T27254] __splice_from_pipe+0x298/0x4a0 [ 810.836211][T27254] ? direct_splice_actor+0xb0/0xb0 [ 810.841575][T27254] ? direct_splice_actor+0xb0/0xb0 [ 810.846706][T27254] splice_from_pipe+0xc2/0x100 [ 810.851531][T27254] generic_splice_sendpage+0x41/0x60 [ 810.856829][T27254] ? splice_from_pipe+0x100/0x100 [ 810.861839][T27254] do_splice+0x6c7/0xc30 [ 810.866216][T27254] ? __fget_light+0xc0/0x1a0 [ 810.870796][T27254] __x64_sys_splice+0x1fd/0x210 [ 810.875699][T27254] do_syscall_64+0xc7/0x390 [ 810.880191][T27254] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 810.886105][T27254] RIP: 0033:0x45c889 10:09:49 executing program 5 (fault-call:6 fault-nth:3): r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r2, &(0x7f0000000100), 0x8) listen(r2, 0x0) accept4(r2, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, r1+30000000}}, 0x0) tkill(r0, 0x1000000000013) 10:09:49 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000000)) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r2 = syz_open_pts(r0, 0x0) readv(r2, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) [ 810.890002][T27254] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 810.910114][T27254] RSP: 002b:00007fecea363c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 810.918515][T27254] RAX: ffffffffffffffda RBX: 00007fecea3646d4 RCX: 000000000045c889 [ 810.926473][T27254] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 810.934470][T27254] RBP: 000000000076bfa0 R08: 000000000004ffe7 R09: 0000000000000000 [ 810.942450][T27254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 810.950556][T27254] R13: 0000000000000ba4 R14: 00000000004ce6f2 R15: 0000000000000003 [ 811.048973][T27261] FAULT_INJECTION: forcing a failure. [ 811.048973][T27261] name failslab, interval 1, probability 0, space 0, times 0 [ 811.063303][T27261] CPU: 1 PID: 27261 Comm: syz-executor.5 Not tainted 5.6.0-rc1-syzkaller #0 [ 811.072073][T27261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 811.082217][T27261] Call Trace: [ 811.085521][T27261] dump_stack+0x11d/0x187 [ 811.089873][T27261] should_fail.cold+0x5/0xf [ 811.094423][T27261] __should_failslab+0x82/0xb0 [ 811.099299][T27261] should_failslab+0x5/0xf [ 811.103766][T27261] kmem_cache_alloc+0x23/0x5e0 [ 811.108552][T27261] ? kmem_cache_alloc+0x1e2/0x5e0 [ 811.113700][T27261] ? memcg_kmem_put_cache+0x77/0xc0 [ 811.118935][T27261] security_file_alloc+0x44/0x110 [ 811.123970][T27261] __alloc_file+0x9f/0x200 [ 811.128406][T27261] alloc_empty_file+0x8b/0x180 [ 811.133180][T27261] alloc_file+0x4e/0x2b0 [ 811.137438][T27261] alloc_file_pseudo+0x121/0x1b0 [ 811.142435][T27261] sock_alloc_file+0x65/0x130 [ 811.147121][T27261] __sys_accept4_file+0x1a2/0x340 [ 811.152153][T27261] ? __fget_files+0xa2/0x1c0 [ 811.156754][T27261] ? __fget_light+0xc0/0x1a0 [ 811.162643][T27261] __sys_accept4+0x5d/0xa0 [ 811.167087][T27261] __x64_sys_accept4+0x5a/0x70 [ 811.171862][T27261] do_syscall_64+0xc7/0x390 [ 811.176379][T27261] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 811.182266][T27261] RIP: 0033:0x45c889 [ 811.186175][T27261] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 811.208029][T27261] RSP: 002b:00007f22e22efc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 811.216449][T27261] RAX: ffffffffffffffda RBX: 00007f22e22f06d4 RCX: 000000000045c889 [ 811.224423][T27261] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 811.232400][T27261] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 811.241336][T27261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 10:09:50 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="3a258211f663a7724bdef6a53bfce1e775d7406272274814a3f23327edb11e2daf85534aa6f5083067b0248878f07a91df1acc99e6643d3baad0a9f349be3cc11cbf51b4f7bff473e9c200351ccaefebd642492cfc5ead68cf6a0506"], 0x5c) sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) ioctl$KVM_IRQ_LINE_STATUS(r3, 0xc008ae67, &(0x7f00000000c0)={0x401, 0x10001}) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000000)={0x0, 0x0, [0x0, 0x400]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 811.249311][T27261] R13: 000000000000000b R14: 00000000004c2b25 R15: 0000000000000003 10:09:50 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0x5) 10:09:50 executing program 5 (fault-call:6 fault-nth:4): r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r2, &(0x7f0000000100), 0x8) listen(r2, 0x0) accept4(r2, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, r1+30000000}}, 0x0) tkill(r0, 0x1000000000013) 10:09:50 executing program 3 (fault-call:6 fault-nth:4): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0x0) 10:09:50 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x80, 0x0) syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x7, 0x8000) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = syz_open_pts(r1, 0x101002) readv(r2, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) [ 811.682426][T27285] FAULT_INJECTION: forcing a failure. [ 811.682426][T27285] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 811.696803][T27285] CPU: 1 PID: 27285 Comm: syz-executor.3 Not tainted 5.6.0-rc1-syzkaller #0 [ 811.705549][T27285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 811.715602][T27285] Call Trace: [ 811.718912][T27285] dump_stack+0x11d/0x187 [ 811.723249][T27285] should_fail.cold+0x5/0xf [ 811.727833][T27285] __alloc_pages_nodemask+0xcf/0x310 [ 811.733145][T27285] alloc_pages_current+0xca/0x170 [ 811.738176][T27285] __vmalloc_node_range+0x2de/0x4c0 [ 811.743512][T27285] ? netlink_sendmsg+0x348/0x8a0 [ 811.748447][T27285] vmalloc+0x63/0x80 [ 811.752434][T27285] ? netlink_sendmsg+0x348/0x8a0 [ 811.757886][T27285] netlink_sendmsg+0x348/0x8a0 [ 811.762657][T27285] ? netlink_unicast+0x4c0/0x4c0 [ 811.767589][T27285] sock_sendmsg+0x98/0xc0 [ 811.771913][T27285] kernel_sendmsg+0x48/0x60 [ 811.776443][T27285] sock_no_sendpage+0xc5/0x100 [ 811.781238][T27285] ? sock_kfree_s+0x60/0x60 [ 811.785844][T27285] kernel_sendpage+0x64/0xa0 [ 811.791292][T27285] sock_sendpage+0x64/0x80 [ 811.795709][T27285] ? kernel_sendpage+0xa0/0xa0 [ 811.800555][T27285] pipe_to_sendpage+0x101/0x190 [ 811.806427][T27285] __splice_from_pipe+0x298/0x4a0 [ 811.811439][T27285] ? direct_splice_actor+0xb0/0xb0 [ 811.816535][T27285] ? direct_splice_actor+0xb0/0xb0 [ 811.821678][T27285] splice_from_pipe+0xc2/0x100 [ 811.826448][T27285] generic_splice_sendpage+0x41/0x60 [ 811.831717][T27285] ? splice_from_pipe+0x100/0x100 [ 811.836721][T27285] do_splice+0x6c7/0xc30 [ 811.841112][T27285] ? __fget_light+0xc0/0x1a0 [ 811.845690][T27285] __x64_sys_splice+0x1fd/0x210 [ 811.850530][T27285] do_syscall_64+0xc7/0x390 [ 811.855023][T27285] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 811.860920][T27285] RIP: 0033:0x45c889 10:09:50 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r1 = syz_open_pts(r0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$KIOCSOUND(r2, 0x4b2f, 0x9) readv(r1, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) [ 811.864807][T27285] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 811.884399][T27285] RSP: 002b:00007fecea363c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 811.893065][T27285] RAX: ffffffffffffffda RBX: 00007fecea3646d4 RCX: 000000000045c889 [ 811.901043][T27285] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 811.909264][T27285] RBP: 000000000076bfa0 R08: 000000000004ffe7 R09: 0000000000000000 [ 811.917315][T27285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 811.925290][T27285] R13: 0000000000000ba4 R14: 00000000004ce6f2 R15: 0000000000000004 10:09:51 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="3a258211f663a7724bdef6a53bfce1e775d7406272274814a3f23327edb11e2daf85534aa6f5083067b0248878f07a91df1acc99e6643d3baad0a9f349be3cc11cbf51b4f7bff473e9c200351ccaefebd642492cfc5ead68cf6a0506"], 0x5c) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000d40)={{0x14}, [@NFT_MSG_NEWSETELEM={0x28, 0xc, 0xa, 0x401, 0x0, 0x0, {0x6, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELOBJ={0x38, 0x14, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x2a4, 0x16, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_HOOK={0xfffffffffffffdcc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x5}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7ff}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vcan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HOOK={0xd8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0xcc}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HOOK={0x150, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0xb8, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_vlan\x00'}, {0x14, 0x1, 'erspan0\x00'}, {0x14, 0x1, 'veth0_to_team\x00'}, {0x14, 0x1, 'vlan1\x00'}, {0x14, 0x1, 'wg0\x00'}, {0x14, 0x1, 'xfrm0\x00'}, {0x14, 0x1, 'team_slave_0\x00'}, {0x14, 0x1, 'veth0_to_bond\x00'}, {0x14, 0x1, 'macvtap0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bond\x00'}, {0x14, 0x1, 'veth0\x00'}, {0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'ip6gre0\x00'}, {0x14, 0x1, 'macvlan1\x00'}, {0x14, 0x1, 'team_slave_1\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x201, 0x0, 0x0, {0xc, 0x0, 0xa}, [@NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x4}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x5}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x55}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x7}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0xce}, @NFTA_SET_DATA_TYPE={0x8}]}], {0x14}}, 0x384}, 0x1, 0x0, 0x0, 0x800}, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r2 = syz_open_pts(r0, 0x0) readv(r2, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) [ 812.155430][T27277] FAULT_INJECTION: forcing a failure. [ 812.155430][T27277] name failslab, interval 1, probability 0, space 0, times 0 [ 812.169675][T27277] CPU: 1 PID: 27277 Comm: syz-executor.5 Not tainted 5.6.0-rc1-syzkaller #0 [ 812.178370][T27277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 812.188517][T27277] Call Trace: [ 812.191832][T27277] dump_stack+0x11d/0x187 [ 812.196178][T27277] should_fail.cold+0x5/0xf [ 812.200934][T27277] __should_failslab+0x82/0xb0 [ 812.205709][T27277] should_failslab+0x5/0xf [ 812.210288][T27277] kmem_cache_alloc+0x23/0x5e0 [ 812.215186][T27277] ? __read_once_size+0xb7/0x100 [ 812.220255][T27277] ? recalc_sigpending+0x4f/0xe0 [ 812.225262][T27277] ? sock_free_inode+0x40/0x40 [ 812.230173][T27277] sock_alloc_inode+0x2e/0x100 [ 812.235005][T27277] ? sock_free_inode+0x40/0x40 [ 812.239821][T27277] alloc_inode+0x42/0x130 [ 812.244256][T27277] new_inode_pseudo+0x32/0xe0 [ 812.248991][T27277] sock_alloc+0x3c/0x110 [ 812.253356][T27277] __sys_accept4_file+0xe3/0x340 [ 812.258391][T27277] ? __fget_files+0xa2/0x1c0 [ 812.262993][T27277] ? __fget_light+0xc0/0x1a0 [ 812.267654][T27277] __sys_accept4+0x5d/0xa0 [ 812.272453][T27277] __x64_sys_accept4+0x5a/0x70 [ 812.277248][T27277] do_syscall_64+0xc7/0x390 [ 812.281763][T27277] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 812.287747][T27277] RIP: 0033:0x45c889 [ 812.291752][T27277] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 812.311528][T27277] RSP: 002b:00007f22e22efc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 812.320751][T27277] RAX: ffffffffffffffda RBX: 00007f22e22f06d4 RCX: 000000000045c889 [ 812.329009][T27277] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 812.337007][T27277] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 812.345350][T27277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 10:09:51 executing program 5: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r2, &(0x7f0000000100), 0x8) listen(r2, 0x0) accept4(r2, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, r1+30000000}}, 0x0) tkill(r0, 0x1000000000013) [ 812.353444][T27277] R13: 000000000000000b R14: 00000000004c2b25 R15: 0000000000000004 10:09:51 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0x6) 10:09:51 executing program 3 (fault-call:6 fault-nth:5): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0x0) 10:09:51 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x200000, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000100)=0x128) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r3, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000000)={0x0, 0x0, [0x0, 0x400]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 812.640431][T27310] FAULT_INJECTION: forcing a failure. [ 812.640431][T27310] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 812.685535][T27310] CPU: 1 PID: 27310 Comm: syz-executor.3 Not tainted 5.6.0-rc1-syzkaller #0 [ 812.694329][T27310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 812.706902][T27310] Call Trace: [ 812.710294][T27310] dump_stack+0x11d/0x187 [ 812.714634][T27310] should_fail.cold+0x5/0xf [ 812.719160][T27310] __alloc_pages_nodemask+0xcf/0x310 [ 812.724522][T27310] alloc_pages_current+0xca/0x170 [ 812.729765][T27310] __vmalloc_node_range+0x2de/0x4c0 [ 812.734982][T27310] ? netlink_sendmsg+0x348/0x8a0 [ 812.739920][T27310] vmalloc+0x63/0x80 [ 812.744821][T27310] ? netlink_sendmsg+0x348/0x8a0 [ 812.750277][T27310] netlink_sendmsg+0x348/0x8a0 [ 812.755127][T27310] ? netlink_unicast+0x4c0/0x4c0 [ 812.761341][T27310] sock_sendmsg+0x98/0xc0 [ 812.765733][T27310] kernel_sendmsg+0x48/0x60 [ 812.770230][T27310] sock_no_sendpage+0xc5/0x100 [ 812.775675][T27310] ? sock_kfree_s+0x60/0x60 [ 812.780507][T27310] kernel_sendpage+0x64/0xa0 [ 812.785370][T27310] sock_sendpage+0x64/0x80 [ 812.789873][T27310] ? kernel_sendpage+0xa0/0xa0 [ 812.794625][T27310] pipe_to_sendpage+0x101/0x190 [ 812.799725][T27310] __splice_from_pipe+0x298/0x4a0 [ 812.804742][T27310] ? direct_splice_actor+0xb0/0xb0 [ 812.809853][T27310] ? direct_splice_actor+0xb0/0xb0 [ 812.814953][T27310] splice_from_pipe+0xc2/0x100 [ 812.820415][T27310] generic_splice_sendpage+0x41/0x60 [ 812.825688][T27310] ? splice_from_pipe+0x100/0x100 [ 812.830749][T27310] do_splice+0x6c7/0xc30 [ 812.834981][T27310] ? __fget_light+0xc0/0x1a0 [ 812.839621][T27310] __x64_sys_splice+0x1fd/0x210 [ 812.844472][T27310] do_syscall_64+0xc7/0x390 [ 812.849046][T27310] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 812.854929][T27310] RIP: 0033:0x45c889 [ 812.858845][T27310] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 10:09:51 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)=""/237, 0x37, 0xed, 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x15, 0x10, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r3, 0x0, 0x1}, 0x40) fchmod(r3, 0x10) r4 = syz_open_dev$vcsu(&(0x7f00000000c0)='/dev/vcsu#\x00', 0x5, 0x40) mmap(&(0x7f00000a3000/0x1000)=nil, 0x1000, 0x7ffff7, 0x8010, r4, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000000)={0x0, 0x0, [0x0, 0x400]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 812.879497][T27310] RSP: 002b:00007fecea363c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 812.887896][T27310] RAX: ffffffffffffffda RBX: 00007fecea3646d4 RCX: 000000000045c889 [ 812.896179][T27310] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 812.904224][T27310] RBP: 000000000076bfa0 R08: 000000000004ffe7 R09: 0000000000000000 [ 812.912218][T27310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 812.921007][T27310] R13: 0000000000000ba4 R14: 00000000004ce6f2 R15: 0000000000000005 10:09:52 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="3a258211f663a7724bdef6a53bfce1e775d7406272274814a3f23327edb11e2daf85534aa6f5083067b0248878f07a91df1acc99e6643d3baad0a9f349be3cc11cbf51b4f7bff473e9c200351ccaefebd642492cfc5ead68cf6a0506"], 0x5c) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000280), 0x4) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000005c0)={r4, @in={{0x2, 0x0, @rand_addr=0x400}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x951, 0x0, 0x0, 0x5, 0x3, 0x4]}, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000100)={r4, @in={{0x2, 0x0, @remote}}}, &(0x7f0000000040)=0x90) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000140)={r4, 0x80}, 0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000000)={r4, 0x10, "197dfa60f879a12c3c87db5a046cbede"}, &(0x7f00000000c0)=0x18) 10:09:52 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000000)={0x0, 0x0, [0x0, 0x400]}) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x400002, 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r3) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="3a258211f663a7724bdef6a53bfce1e775ebf1f86756ad97f4f23327edb11e2daf85534aa6f5083067b0248878f07a91df1acc99e6643d3baad0a9f349be3cc11cbf51b4f7bff473e9c20035e206df0dd642492cfc5ead680500"], 0x5c) sendfile(r4, r4, &(0x7f0000000000), 0x8080fffffffe) ioctl$KVM_RUN(r4, 0xae80, 0x0) 10:09:52 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="3a258211f663a7724bdef6a53bfce1e775d74062b11e2daf85534aa6f5083067b0248878f07a91df1acc99e6643d3baad0a9f349be3cc11cbf51b4f7bff473e9c200351ccaefebd642492cfc5ead68cf6a0506643395690b6fe6a17121168cd68f69858fa003a6a85fbc20309ad2c102c9cbd11322e307d29c6404c8e25a57e351c11a0fc7dec78a33b63ba5"], 0x8c) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x9, 0x10, '\x00\x00\x00\x00\x00\x00\b\x00'}) r2 = syz_open_pts(r0, 0x0) r3 = msgget(0x3, 0x24) ioctl$TIOCSIG(r1, 0x40045436, 0x33) r4 = dup(r2) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_GET_SCAN(r4, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x20, r5, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x37181afc, 0x1}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4044}, 0x800) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r6, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x5c) sendfile(r6, r6, &(0x7f0000000000), 0x8080fffffffe) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r6, &(0x7f0000000580)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0xb0, 0x2, 0x8, 0x201, 0x0, 0x0, {0x7, 0x0, 0x7}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3ff}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x42}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x18}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x600}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6007}, @CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7f}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1f}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x5}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6}]}, 0xb0}, 0x1, 0x0, 0x0, 0x1}, 0x4000001) msgrcv(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000000000000000000000000000000000005938276be137e4e67e81fd49874f7be7000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009000000000000000000000000000000000000000000000020000000000000000000f1d9b9ecee3fc87d778be71792aef157a4f900ebbe98ad6eb428795b908c5e9a9e3aeff566ed36691d03904adef0a8aac5db08e915e77c5d16cd07266b7b265d3f3949adbb3c1b1587720df7d59267e0b6f8df7d03000000c55ffdda38edcce9e98222252f3d4bccfe945fb9"], 0x1, 0x1, 0x0) readv(r2, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x2) 10:09:52 executing program 3 (fault-call:6 fault-nth:6): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0x0) 10:09:52 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0x8) 10:09:52 executing program 5: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r2, &(0x7f0000000100), 0x8) listen(r2, 0x0) accept4(r2, 0x0, 0x0, 0x3) timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, r1+30000000}}, 0x0) tkill(r0, 0x1000000000013) [ 813.544628][T27344] FAULT_INJECTION: forcing a failure. [ 813.544628][T27344] name failslab, interval 1, probability 0, space 0, times 0 [ 813.566615][T27344] CPU: 1 PID: 27344 Comm: syz-executor.3 Not tainted 5.6.0-rc1-syzkaller #0 [ 813.575312][T27344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 813.585426][T27344] Call Trace: [ 813.588729][T27344] dump_stack+0x11d/0x187 [ 813.593065][T27344] should_fail.cold+0x5/0xf [ 813.597635][T27344] __should_failslab+0x82/0xb0 [ 813.602402][T27344] should_failslab+0x5/0xf [ 813.606857][T27344] kmem_cache_alloc_node+0x35/0x680 [ 813.612091][T27344] ? vmap_page_range_noflush+0x540/0x6c0 [ 813.617735][T27344] __alloc_skb+0x8d/0x360 [ 813.622184][T27344] ? __rcu_read_unlock+0x66/0x2f0 [ 813.627237][T27344] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 813.633158][T27344] netlink_deliver_tap+0x25d/0x4d0 [ 813.638287][T27344] netlink_unicast+0x41f/0x4c0 [ 813.643407][T27344] netlink_sendmsg+0x4cf/0x8a0 [ 813.648194][T27344] ? netlink_unicast+0x4c0/0x4c0 [ 813.653166][T27344] sock_sendmsg+0x98/0xc0 [ 813.657504][T27344] kernel_sendmsg+0x48/0x60 [ 813.662144][T27344] sock_no_sendpage+0xc5/0x100 [ 813.666943][T27344] ? sock_kfree_s+0x60/0x60 [ 813.671447][T27344] kernel_sendpage+0x64/0xa0 [ 813.676205][T27344] sock_sendpage+0x64/0x80 [ 813.684178][T27344] ? kernel_sendpage+0xa0/0xa0 [ 813.689067][T27344] pipe_to_sendpage+0x101/0x190 [ 813.693966][T27344] __splice_from_pipe+0x298/0x4a0 [ 813.698989][T27344] ? direct_splice_actor+0xb0/0xb0 [ 813.704083][T27344] ? direct_splice_actor+0xb0/0xb0 [ 813.709182][T27344] splice_from_pipe+0xc2/0x100 [ 813.714025][T27344] generic_splice_sendpage+0x41/0x60 [ 813.719329][T27344] ? splice_from_pipe+0x100/0x100 [ 813.724383][T27344] do_splice+0x6c7/0xc30 [ 813.728714][T27344] ? __fget_light+0xc0/0x1a0 [ 813.733292][T27344] __x64_sys_splice+0x1fd/0x210 [ 813.738483][T27344] do_syscall_64+0xc7/0x390 [ 813.742984][T27344] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 813.748857][T27344] RIP: 0033:0x45c889 [ 813.752845][T27344] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 813.772533][T27344] RSP: 002b:00007fecea363c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 813.781098][T27344] RAX: ffffffffffffffda RBX: 00007fecea3646d4 RCX: 000000000045c889 [ 813.789053][T27344] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 813.797015][T27344] RBP: 000000000076bfa0 R08: 000000000004ffe7 R09: 0000000000000000 [ 813.804981][T27344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 813.812942][T27344] R13: 0000000000000ba4 R14: 00000000004ce6f2 R15: 0000000000000006 10:09:53 executing program 2: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="3a258211f663a7724bdef6a53bfce1e775d7406272274814a3f23327edb11e2daf85534aa6f5083067b0248878f07a91df1acc99e6643d3baad0a9f349be3cc11cbf51b4f7bff473e9c200351ccaefebd642492cfc5ead68cf6a0506"], 0x5c) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) write$dsp(r0, &(0x7f00000000c0)="abc5c2196ef7f2e191d68765a00c36cc75238cdc82424648e363ae86a161c31a74062a1ecb4254f32527293309d6201c06c49293830f7270794c75310c46fb4b14045aa6df33c3297a300bc98039e1693342387b1dc82d12462ac778b7aef364f29f5f5ac0a5de", 0x67) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) readv(0xffffffffffffffff, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000040)={0x4, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) 10:09:53 executing program 0: r0 = open(&(0x7f0000000240)='./file0\x00', 0x2c6000, 0x191) fchdir(r0) ioctl$TIOCNXCL(r0, 0x540d) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0xfffffffffffffffd) mmap(&(0x7f00004e4000/0x4000)=nil, 0x4000, 0x7ffff7, 0x40010, 0xffffffffffffffff, 0xcc446000) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000000)={0x0, 0x0, [0x0, 0x400]}) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000280), 0x4) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000002c0)={r3, @in={{0x2, 0x0, @remote}}, [0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x8, 0x951, 0x100000000, 0x0, 0x5, 0x3, 0x4, 0x5]}, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000100)={r3, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x39}}}}, &(0x7f0000000040)=0x90) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000200)={0x0, 0x7f}, 0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000100)={r3, 0xa8}, &(0x7f0000000140)=0x8) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r4, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/327], 0x5c) sendfile(r4, r4, &(0x7f0000000000)=0x64, 0x5) ioctl$RTC_PLL_SET(r4, 0x40207012, &(0x7f00000000c0)={0xbae, 0x36d, 0xffffffff, 0x3, 0x4, 0x20, 0x6f}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:09:53 executing program 3 (fault-call:6 fault-nth:7): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0x0) 10:09:53 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)=""/237, 0x37, 0xed, 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x15, 0x10, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r3, 0x0, 0x1}, 0x40) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r3, 0xc080661a, &(0x7f0000000140)={{0x0, 0x0, @reserved="b92fdba709fe5393400e1f383f94f2418f18867ecbfa36146156a222eb85edf1"}}) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="3a258211f663a7724bdef6a53bfce1e775d7406272274814a3f23327edb11e2daf85534aa6f5083067b0248878f07a91df1acc99e6643d3baad0a9f349be3cc11cbf51b4f7bff473e9c200351ccaefebd642492cfc5ead68cf6a0506"], 0x5c) sendfile(r4, r4, &(0x7f0000000000), 0x8080fffffffe) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f00000000c0)={0x0, 0x0, [0x0, 0x3fc, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 814.520565][T27375] FAULT_INJECTION: forcing a failure. [ 814.520565][T27375] name failslab, interval 1, probability 0, space 0, times 0 [ 814.551003][T27375] CPU: 1 PID: 27375 Comm: syz-executor.3 Not tainted 5.6.0-rc1-syzkaller #0 [ 814.559790][T27375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 814.569844][T27375] Call Trace: [ 814.573242][T27375] dump_stack+0x11d/0x187 [ 814.577655][T27375] should_fail.cold+0x5/0xf [ 814.582239][T27375] __should_failslab+0x82/0xb0 [ 814.587015][T27375] should_failslab+0x5/0xf [ 814.591445][T27375] kmem_cache_alloc_node_trace+0x37/0x610 [ 814.597180][T27375] ? memcg_kmem_put_cache+0x77/0xc0 [ 814.602430][T27375] ? debug_smp_processor_id+0x3f/0x129 [ 814.607931][T27375] ? kmem_cache_alloc_node+0x1bb/0x680 [ 814.613410][T27375] __kmalloc_reserve.isra.0+0x43/0xd0 [ 814.618863][T27375] __alloc_skb+0xbe/0x360 [ 814.623246][T27375] ? __rcu_read_unlock+0x66/0x2f0 [ 814.628360][T27375] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 814.634270][T27375] netlink_deliver_tap+0x25d/0x4d0 [ 814.639417][T27375] netlink_unicast+0x41f/0x4c0 [ 814.644220][T27375] netlink_sendmsg+0x4cf/0x8a0 [ 814.649609][T27375] ? netlink_unicast+0x4c0/0x4c0 [ 814.654587][T27375] sock_sendmsg+0x98/0xc0 [ 814.658935][T27375] kernel_sendmsg+0x48/0x60 [ 814.663454][T27375] sock_no_sendpage+0xc5/0x100 [ 814.668242][T27375] ? sock_kfree_s+0x60/0x60 [ 814.672753][T27375] kernel_sendpage+0x64/0xa0 [ 814.677355][T27375] sock_sendpage+0x64/0x80 [ 814.681788][T27375] ? kernel_sendpage+0xa0/0xa0 [ 814.687275][T27375] pipe_to_sendpage+0x101/0x190 [ 814.692145][T27375] __splice_from_pipe+0x298/0x4a0 [ 814.697300][T27375] ? direct_splice_actor+0xb0/0xb0 [ 814.702813][T27375] ? direct_splice_actor+0xb0/0xb0 [ 814.707945][T27375] splice_from_pipe+0xc2/0x100 [ 814.712775][T27375] generic_splice_sendpage+0x41/0x60 [ 814.718072][T27375] ? splice_from_pipe+0x100/0x100 [ 814.723103][T27375] do_splice+0x6c7/0xc30 [ 814.727903][T27375] ? __fget_light+0xc0/0x1a0 [ 814.732508][T27375] __x64_sys_splice+0x1fd/0x210 [ 814.737377][T27375] do_syscall_64+0xc7/0x390 [ 814.741963][T27375] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 814.747862][T27375] RIP: 0033:0x45c889 [ 814.751772][T27375] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 814.771395][T27375] RSP: 002b:00007fecea363c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 814.779934][T27375] RAX: ffffffffffffffda RBX: 00007fecea3646d4 RCX: 000000000045c889 [ 814.788869][T27375] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 814.796851][T27375] RBP: 000000000076bfa0 R08: 000000000004ffe7 R09: 0000000000000000 [ 814.804830][T27375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 814.812805][T27375] R13: 0000000000000ba4 R14: 00000000004ce6f2 R15: 0000000000000007 10:09:53 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0x9) 10:09:54 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r1 = syz_open_pts(r0, 0x440202) readv(r1, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000040)={0x5, 0x0, 0x1000000, 0x7, 0x0, "000001ffffff00"}) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000000)={0x5, 0x3f}) 10:09:54 executing program 3 (fault-call:6 fault-nth:8): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0x0) 10:09:54 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000000)={0x80, 0x0, 0x0, 0xb, 0x0, "bb7f861e0000f0ffffff000000000000000002"}) [ 815.512443][T27395] FAULT_INJECTION: forcing a failure. [ 815.512443][T27395] name failslab, interval 1, probability 0, space 0, times 0 [ 815.578559][T27395] CPU: 1 PID: 27395 Comm: syz-executor.3 Not tainted 5.6.0-rc1-syzkaller #0 [ 815.587266][T27395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 815.597323][T27395] Call Trace: [ 815.600717][T27395] dump_stack+0x11d/0x187 [ 815.605067][T27395] should_fail.cold+0x5/0xf [ 815.609595][T27395] __should_failslab+0x82/0xb0 [ 815.614411][T27395] should_failslab+0x5/0xf [ 815.618881][T27395] kmem_cache_alloc_node_trace+0x37/0x610 [ 815.624619][T27395] ? memcg_kmem_put_cache+0x77/0xc0 [ 815.629875][T27395] ? debug_smp_processor_id+0x3f/0x129 [ 815.635384][T27395] ? kmem_cache_alloc_node+0x1bb/0x680 [ 815.640857][T27395] __kmalloc_reserve.isra.0+0x43/0xd0 [ 815.646274][T27395] __alloc_skb+0xbe/0x360 [ 815.653238][T27395] ? __rcu_read_unlock+0x66/0x2f0 [ 815.658276][T27395] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 815.668056][T27395] netlink_deliver_tap+0x25d/0x4d0 [ 815.673189][T27395] netlink_unicast+0x41f/0x4c0 [ 815.678030][T27395] netlink_sendmsg+0x4cf/0x8a0 [ 815.682832][T27395] ? netlink_unicast+0x4c0/0x4c0 [ 815.688754][T27395] sock_sendmsg+0x98/0xc0 [ 815.693099][T27395] kernel_sendmsg+0x48/0x60 [ 815.697618][T27395] sock_no_sendpage+0xc5/0x100 [ 815.702400][T27395] ? sock_kfree_s+0x60/0x60 [ 815.706905][T27395] kernel_sendpage+0x64/0xa0 [ 815.711508][T27395] sock_sendpage+0x64/0x80 [ 815.715959][T27395] ? kernel_sendpage+0xa0/0xa0 [ 815.720749][T27395] pipe_to_sendpage+0x101/0x190 [ 815.725619][T27395] __splice_from_pipe+0x298/0x4a0 [ 815.730658][T27395] ? direct_splice_actor+0xb0/0xb0 [ 815.735838][T27395] ? direct_splice_actor+0xb0/0xb0 [ 815.740965][T27395] splice_from_pipe+0xc2/0x100 [ 815.746502][T27395] generic_splice_sendpage+0x41/0x60 [ 815.751809][T27395] ? splice_from_pipe+0x100/0x100 [ 815.757014][T27395] do_splice+0x6c7/0xc30 [ 815.761272][T27395] ? __fget_light+0xc0/0x1a0 [ 815.765881][T27395] __x64_sys_splice+0x1fd/0x210 [ 815.770753][T27395] do_syscall_64+0xc7/0x390 [ 815.775277][T27395] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 815.781170][T27395] RIP: 0033:0x45c889 [ 815.785250][T27395] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 815.804875][T27395] RSP: 002b:00007fecea363c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 815.813645][T27395] RAX: ffffffffffffffda RBX: 00007fecea3646d4 RCX: 000000000045c889 [ 815.821715][T27395] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 815.829814][T27395] RBP: 000000000076bfa0 R08: 000000000004ffe7 R09: 0000000000000000 [ 815.837794][T27395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 815.845771][T27395] R13: 0000000000000ba4 R14: 00000000004ce6f2 R15: 0000000000000008 10:09:54 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0xa) 10:09:54 executing program 5: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r2, &(0x7f0000000100), 0x8) listen(r2, 0x0) accept4(r2, 0x0, 0x0, 0x4) timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, r1+30000000}}, 0x0) tkill(r0, 0x1000000000013) 10:09:55 executing program 5: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r2, &(0x7f0000000100), 0x8) listen(r2, 0x0) accept4(r2, 0x0, 0x0, 0xe) timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, r1+30000000}}, 0x0) tkill(r0, 0x1000000000013) 10:09:55 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="3a258211f663a7724bdef6a53bfce1e775d7406272274814a3f23327edb11e2daf85534aa6f5083067b0248878f07a91df1acc99e6643d3baad0a9f349be3cc11cbf51b4f7bff473e9c200351ccaefebd642492cfc5ead68cf6a0506"], 0x5c) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) ioctl$PPPIOCGIDLE(r2, 0x8010743f, &(0x7f0000000380)) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="e8000000", @ANYRES16=r5, @ANYBLOB="af86000000000000000003000000400001000d0001007564703a73797a393f281eb5e8521ba2157311041a2332000000002c000400140001000200ffffe000000200000000000000001400020002952f00ac1414bb0000000000000000480007000c00040003000000000000000c000400e50400000000000008000200000000000c000300001000000000000008000200ffffffff080001000900000008000100000200003c000700080001000200000008000200ffffff7f08000200070000000800020006000000080001000004000008000100010000000800020001000000100004000900010073797a3100000000"], 0xe8}}, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x1f0, r5, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x40}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x12d1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x81}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_BEARER={0x60, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'eth', 0x3a, 'gre0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffa}]}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vlan0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_NODE={0x28, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3ff}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0xa0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff88b6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8c}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}, @TIPC_NLA_NODE={0x28, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x200}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0x30, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x200}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x8081}, 0x20) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000000)={0x0, 0x0, [0x0, 0x400]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 10:09:55 executing program 3 (fault-call:6 fault-nth:9): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0x0) [ 816.363459][T27421] netlink: 148 bytes leftover after parsing attributes in process `syz-executor.0'. [ 816.382231][T27421] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 816.392686][T27421] tipc: Enabling of bearer rejected, illegal name [ 816.418313][T27423] FAULT_INJECTION: forcing a failure. [ 816.418313][T27423] name failslab, interval 1, probability 0, space 0, times 0 [ 816.438709][T27423] CPU: 0 PID: 27423 Comm: syz-executor.3 Not tainted 5.6.0-rc1-syzkaller #0 [ 816.447418][T27423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 816.457488][T27423] Call Trace: [ 816.460801][T27423] dump_stack+0x11d/0x187 [ 816.465222][T27423] should_fail.cold+0x5/0xf [ 816.469768][T27423] __should_failslab+0x82/0xb0 [ 816.474552][T27423] should_failslab+0x5/0xf [ 816.479505][T27423] kmem_cache_alloc+0x23/0x5e0 [ 816.484305][T27423] radix_tree_node_alloc.constprop.0+0x93/0x210 [ 816.490573][T27423] idr_get_free+0x3b3/0x640 [ 816.495134][T27423] idr_alloc_u32+0xf0/0x1b0 [ 816.499712][T27423] tcf_idr_check_alloc+0x175/0x220 [ 816.504834][T27423] tcf_bpf_init+0x17b/0x9a0 [ 816.509441][T27423] ? should_fail+0x7c/0x2fd [ 816.513978][T27423] tcf_action_init_1+0x552/0x790 10:09:55 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r1 = syz_open_pts(r0, 0x0) r2 = getpid() r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f00000001c0)) sched_setscheduler(r3, 0x5, &(0x7f00000001c0)) r4 = getpgrp(r2) fcntl$setown(r0, 0x8, r4) readv(r1, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) [ 816.518936][T27423] ? __write_once_size.constprop.0+0x20/0x20 [ 816.524941][T27423] tcf_action_init+0x15f/0x200 [ 816.529762][T27423] tcf_action_add+0xa8/0x270 [ 816.534458][T27423] tc_ctl_action+0x219/0x292 [ 816.539069][T27423] ? tcf_action_add+0x270/0x270 [ 816.543940][T27423] rtnetlink_rcv_msg+0x1d0/0x4e0 [ 816.548934][T27423] ? __write_once_size+0x45/0xd0 [ 816.553891][T27423] ? __rcu_read_unlock+0x66/0x2f0 [ 816.558998][T27423] netlink_rcv_skb+0xaf/0x260 [ 816.563717][T27423] ? rtnl_calcit.isra.0+0x200/0x200 10:09:55 executing program 1: syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000)='NLBL_MGMT\x00') r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0xfffffffffffffed4, &(0x7f000000b000)={&(0x7f0000000500)=ANY=[@ANYBLOB="240000001800210000000000000000001c140000fe00000100000000080012000a000000d24dc420848b2befeba4556a005cf0486388a33ada6538eeda728ea5"], 0x24}}, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="3a258211f663a7724bdef6a53bfce1e775d7406272274814a3f23327edb11e2daf85534aa6f5083067b0248878f07a91df1acc99e6643d3baad0a9f349be3cc11cbf51b4f7bff473e9c200351ccaefebd642492cfc5ead68cf6a0506"], 0x5c) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000200)={0x0, 0x0, 0x11, 0x11, 0xec, &(0x7f0000000640)="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"}) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000340)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f00000004c0)={&(0x7f00000002c0), 0xc, &(0x7f00000003c0)={&(0x7f00000005c0)={0x50, r2, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_DOMAIN={0x15, 0x1, '/proc/pa\a\xaa\xc4j\\\xdb\x8bf\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast1}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040050}, 0x20008801) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x20, r4, 0x709, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)={0x50, r4, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x80}}, @NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x5, 0x4}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x20, 0x3}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000004}, 0x2000a005) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x3c, r2, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x64010102}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010101}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008010}, 0x10) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r5, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r6 = syz_open_pts(r5, 0x0) readv(r6, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) ioctl$TCSETSW(r6, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) [ 816.568951][T27423] rtnetlink_rcv+0x22/0x30 [ 816.573384][T27423] netlink_unicast+0x390/0x4c0 [ 816.578223][T27423] netlink_sendmsg+0x4cf/0x8a0 [ 816.583014][T27423] ? netlink_unicast+0x4c0/0x4c0 [ 816.588074][T27423] sock_sendmsg+0x98/0xc0 [ 816.592417][T27423] kernel_sendmsg+0x48/0x60 [ 816.596977][T27423] sock_no_sendpage+0xc5/0x100 [ 816.601799][T27423] ? sock_kfree_s+0x60/0x60 [ 816.606327][T27423] kernel_sendpage+0x64/0xa0 [ 816.610934][T27423] sock_sendpage+0x64/0x80 [ 816.615483][T27423] ? kernel_sendpage+0xa0/0xa0 [ 816.620254][T27423] pipe_to_sendpage+0x101/0x190 [ 816.625133][T27423] __splice_from_pipe+0x298/0x4a0 [ 816.630219][T27423] ? direct_splice_actor+0xb0/0xb0 [ 816.635354][T27423] ? direct_splice_actor+0xb0/0xb0 [ 816.640480][T27423] splice_from_pipe+0xc2/0x100 [ 816.645267][T27423] generic_splice_sendpage+0x41/0x60 [ 816.650658][T27423] ? splice_from_pipe+0x100/0x100 [ 816.655709][T27423] do_splice+0x6c7/0xc30 [ 816.660086][T27423] ? __fget_light+0xc0/0x1a0 [ 816.664784][T27423] __x64_sys_splice+0x1fd/0x210 [ 816.669654][T27423] do_syscall_64+0xc7/0x390 [ 816.674215][T27423] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 816.680126][T27423] RIP: 0033:0x45c889 [ 816.684112][T27423] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 816.704420][T27423] RSP: 002b:00007fecea363c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 10:09:55 executing program 5: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r2, &(0x7f0000000100), 0x8) listen(r2, 0x0) accept4(r2, 0x0, 0x0, 0x300) timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, r1+30000000}}, 0x0) tkill(r0, 0x1000000000013) [ 816.713803][T27423] RAX: ffffffffffffffda RBX: 00007fecea3646d4 RCX: 000000000045c889 [ 816.721929][T27423] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 816.730441][T27423] RBP: 000000000076bfa0 R08: 000000000004ffe7 R09: 0000000000000000 [ 816.738425][T27423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 816.746404][T27423] R13: 0000000000000ba4 R14: 00000000004ce6f2 R15: 0000000000000009 10:09:55 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0xb) 10:09:55 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x0, 0x0, "00fb00dfff000800"}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) [ 817.077272][T27447] netlink: 148 bytes leftover after parsing attributes in process `syz-executor.0'. [ 817.087202][T27447] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 817.100065][T27447] tipc: Enabling of bearer rejected, illegal name 10:09:56 executing program 3 (fault-call:6 fault-nth:10): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0x0) [ 817.328120][T27452] FAULT_INJECTION: forcing a failure. [ 817.328120][T27452] name failslab, interval 1, probability 0, space 0, times 0 [ 817.345131][T27452] CPU: 1 PID: 27452 Comm: syz-executor.3 Not tainted 5.6.0-rc1-syzkaller #0 [ 817.354249][T27452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 817.364803][T27452] Call Trace: [ 817.368124][T27452] dump_stack+0x11d/0x187 [ 817.372482][T27452] should_fail.cold+0x5/0xf [ 817.377010][T27452] __should_failslab+0x82/0xb0 [ 817.382078][T27452] should_failslab+0x5/0xf [ 817.386510][T27452] __kmalloc+0x54/0x640 [ 817.390802][T27452] ? tcf_idr_create+0x5d/0x470 [ 817.395597][T27452] ? __radix_tree_replace+0x16c/0x280 [ 817.401036][T27452] tcf_idr_create+0x5d/0x470 [ 817.405658][T27452] tcf_bpf_init+0x351/0x9a0 [ 817.410257][T27452] ? should_fail+0x7c/0x2fd [ 817.414798][T27452] tcf_action_init_1+0x552/0x790 [ 817.419791][T27452] ? __write_once_size.constprop.0+0x20/0x20 [ 817.425804][T27452] tcf_action_init+0x15f/0x200 [ 817.430628][T27452] tcf_action_add+0xa8/0x270 [ 817.435450][T27452] tc_ctl_action+0x219/0x292 [ 817.440101][T27452] ? tcf_action_add+0x270/0x270 [ 817.445022][T27452] rtnetlink_rcv_msg+0x1d0/0x4e0 [ 817.450103][T27452] ? __write_once_size+0x45/0xd0 [ 817.455242][T27452] ? __rcu_read_unlock+0x66/0x2f0 [ 817.460289][T27452] netlink_rcv_skb+0xaf/0x260 [ 817.465254][T27452] ? rtnl_calcit.isra.0+0x200/0x200 [ 817.470523][T27452] rtnetlink_rcv+0x22/0x30 [ 817.475004][T27452] netlink_unicast+0x390/0x4c0 [ 817.479793][T27452] netlink_sendmsg+0x4cf/0x8a0 [ 817.484640][T27452] ? netlink_unicast+0x4c0/0x4c0 [ 817.489593][T27452] sock_sendmsg+0x98/0xc0 [ 817.493954][T27452] kernel_sendmsg+0x48/0x60 [ 817.498485][T27452] sock_no_sendpage+0xc5/0x100 [ 817.503276][T27452] ? sock_kfree_s+0x60/0x60 [ 817.507791][T27452] kernel_sendpage+0x64/0xa0 [ 817.512402][T27452] sock_sendpage+0x64/0x80 [ 817.517293][T27452] ? kernel_sendpage+0xa0/0xa0 [ 817.522067][T27452] pipe_to_sendpage+0x101/0x190 [ 817.526938][T27452] __splice_from_pipe+0x298/0x4a0 [ 817.531981][T27452] ? direct_splice_actor+0xb0/0xb0 [ 817.537128][T27452] ? direct_splice_actor+0xb0/0xb0 [ 817.542257][T27452] splice_from_pipe+0xc2/0x100 [ 817.547091][T27452] generic_splice_sendpage+0x41/0x60 [ 817.552392][T27452] ? splice_from_pipe+0x100/0x100 [ 817.557432][T27452] do_splice+0x6c7/0xc30 [ 817.561712][T27452] ? __fget_light+0xc0/0x1a0 [ 817.566326][T27452] __x64_sys_splice+0x1fd/0x210 [ 817.571204][T27452] do_syscall_64+0xc7/0x390 [ 817.575808][T27452] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 817.581806][T27452] RIP: 0033:0x45c889 [ 817.585767][T27452] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 817.605377][T27452] RSP: 002b:00007fecea363c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 817.613980][T27452] RAX: ffffffffffffffda RBX: 00007fecea3646d4 RCX: 000000000045c889 10:09:56 executing program 5: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r2, &(0x7f0000000100), 0x8) listen(r2, 0x0) accept4(r2, 0x0, 0x0, 0xe00) timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, r1+30000000}}, 0x0) tkill(r0, 0x1000000000013) [ 817.621961][T27452] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 817.629992][T27452] RBP: 000000000076bfa0 R08: 000000000004ffe7 R09: 0000000000000000 [ 817.639025][T27452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 817.647875][T27452] R13: 0000000000000ba4 R14: 00000000004ce6f2 R15: 000000000000000a 10:09:56 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0xc) 10:09:56 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x20, 0x1, '\x00\x00\x00\x00\x00\x00\b\x00'}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x40000) ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, &(0x7f0000000180)) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f00000001c0)=@req3={0xf0, 0x3, 0xf5, 0x4, 0x9, 0x0, 0x8000}, 0x1c) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) getsockopt$X25_QBITINCL(r2, 0x106, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 10:09:57 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r1 = syz_open_pts(r0, 0x0) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r3) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f00000000c0)=0x0) ptrace$getregs(0xe, r4, 0x100000000, &(0x7f0000000100)) fchdir(r2) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000040)) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xb, 0x4, '\x00\x00\x00@\x00'}) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="3a258211f663a7724bdef6a53bfce1e775d7406272274814a3f23327edb11e2daf85534aa6f5083067b0248878f07a91df1acc99e6643d3baad0a9f349be3cc11cbf51b4f7bff473e9c200351ccaefebd642492cfc5ead68cf6a0506"], 0x5c) sendfile(r5, r5, &(0x7f0000000000), 0x8080fffffffe) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000100)=0xfffffffe, 0x4) 10:09:57 executing program 3 (fault-call:6 fault-nth:11): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0x0) [ 818.337329][T27472] FAULT_INJECTION: forcing a failure. [ 818.337329][T27472] name failslab, interval 1, probability 0, space 0, times 0 [ 818.381146][T27472] CPU: 0 PID: 27472 Comm: syz-executor.3 Not tainted 5.6.0-rc1-syzkaller #0 [ 818.390207][T27472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 818.400428][T27472] Call Trace: [ 818.403741][T27472] dump_stack+0x11d/0x187 [ 818.408219][T27472] should_fail.cold+0x5/0xf [ 818.412795][T27472] __should_failslab+0x82/0xb0 [ 818.417677][T27472] should_failslab+0x5/0xf [ 818.423442][T27472] __kmalloc+0x54/0x640 [ 818.427684][T27472] ? tcf_idr_create+0x5d/0x470 [ 818.432632][T27472] ? __radix_tree_replace+0x16c/0x280 [ 818.438018][T27472] tcf_idr_create+0x5d/0x470 [ 818.442628][T27472] tcf_bpf_init+0x351/0x9a0 [ 818.447159][T27472] ? should_fail+0x7c/0x2fd [ 818.451723][T27472] tcf_action_init_1+0x552/0x790 [ 818.456810][T27472] ? __write_once_size.constprop.0+0x20/0x20 [ 818.462867][T27472] tcf_action_init+0x15f/0x200 [ 818.467748][T27472] tcf_action_add+0xa8/0x270 [ 818.472501][T27472] tc_ctl_action+0x219/0x292 [ 818.477117][T27472] ? tcf_action_add+0x270/0x270 [ 818.481987][T27472] rtnetlink_rcv_msg+0x1d0/0x4e0 [ 818.486958][T27472] ? __write_once_size+0x45/0xd0 [ 818.491918][T27472] ? __rcu_read_unlock+0x66/0x2f0 [ 818.497092][T27472] netlink_rcv_skb+0xaf/0x260 [ 818.501862][T27472] ? rtnl_calcit.isra.0+0x200/0x200 [ 818.507529][T27472] rtnetlink_rcv+0x22/0x30 [ 818.512108][T27472] netlink_unicast+0x390/0x4c0 [ 818.516902][T27472] netlink_sendmsg+0x4cf/0x8a0 [ 818.521692][T27472] ? netlink_unicast+0x4c0/0x4c0 [ 818.526737][T27472] sock_sendmsg+0x98/0xc0 [ 818.531099][T27472] kernel_sendmsg+0x48/0x60 [ 818.535618][T27472] sock_no_sendpage+0xc5/0x100 [ 818.540420][T27472] ? sock_kfree_s+0x60/0x60 [ 818.544950][T27472] kernel_sendpage+0x64/0xa0 [ 818.550001][T27472] sock_sendpage+0x64/0x80 [ 818.554431][T27472] ? kernel_sendpage+0xa0/0xa0 [ 818.559280][T27472] pipe_to_sendpage+0x101/0x190 [ 818.564221][T27472] __splice_from_pipe+0x298/0x4a0 [ 818.569292][T27472] ? direct_splice_actor+0xb0/0xb0 [ 818.574413][T27472] ? direct_splice_actor+0xb0/0xb0 [ 818.579631][T27472] splice_from_pipe+0xc2/0x100 [ 818.584421][T27472] generic_splice_sendpage+0x41/0x60 [ 818.589737][T27472] ? splice_from_pipe+0x100/0x100 [ 818.594808][T27472] do_splice+0x6c7/0xc30 [ 818.599080][T27472] ? __fget_light+0xc0/0x1a0 [ 818.603749][T27472] __x64_sys_splice+0x1fd/0x210 [ 818.608675][T27472] do_syscall_64+0xc7/0x390 [ 818.613751][T27472] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 818.619647][T27472] RIP: 0033:0x45c889 [ 818.623570][T27472] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 818.643445][T27472] RSP: 002b:00007fecea363c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 818.651925][T27472] RAX: ffffffffffffffda RBX: 00007fecea3646d4 RCX: 000000000045c889 [ 818.660001][T27472] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 818.668075][T27472] RBP: 000000000076bfa0 R08: 000000000004ffe7 R09: 0000000000000000 [ 818.676132][T27472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 818.684115][T27472] R13: 0000000000000ba4 R14: 00000000004ce6f2 R15: 000000000000000b 10:09:57 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0xe) 10:09:58 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="3a258211f663a7724bdef6a53bfce1e775d7406272274814a3f23327edb11e2daf85534aa6f5083067b0248878f07a91df1acc99e6643d3baad0a9f349be3cc11cbf51b4f7bff473e9c200351ccaefebd642492cfc5ead68cf6a0506"], 0x5c) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x1, 0x0) r3 = syz_open_pts(r2, 0x0) readv(r3, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) ioctl$TCSETSW(r3, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) 10:09:58 executing program 2: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="3a258211f663a7724bdef6a53bfce1e775d7406272274814a3f23327edb11e2daf85534aa6f5083067b0248878f07a91df1acc99e6643d3baad0a9f349be3cc11cbf51b4f7bff473e9c200351ccaefebd642492cfc5ead68cf6a0506"], 0x5c) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) write$rfkill(r0, &(0x7f0000000000)={0x3, 0x6, 0x2, 0x0, 0x1}, 0x8) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r2 = syz_open_pts(r1, 0x0) readv(r2, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000040)={0xeb5f, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) 10:09:58 executing program 3 (fault-call:6 fault-nth:12): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0x0) [ 819.163912][T27483] QAT: Invalid ioctl [ 819.360711][T27491] FAULT_INJECTION: forcing a failure. [ 819.360711][T27491] name failslab, interval 1, probability 0, space 0, times 0 [ 819.385151][T27491] CPU: 1 PID: 27491 Comm: syz-executor.3 Not tainted 5.6.0-rc1-syzkaller #0 [ 819.395605][T27491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 819.406143][T27491] Call Trace: [ 819.409727][T27491] dump_stack+0x11d/0x187 [ 819.414084][T27491] should_fail.cold+0x5/0xf [ 819.418607][T27491] __should_failslab+0x82/0xb0 [ 819.423369][T27491] should_failslab+0x5/0xf [ 819.427961][T27491] kmem_cache_alloc_node+0x35/0x680 [ 819.433284][T27491] ? __read_once_size+0x52/0x110 [ 819.438227][T27491] ? tcf_action_add+0x270/0x270 [ 819.443086][T27491] ? netdev_run_todo+0x564/0x590 [ 819.448037][T27491] __alloc_skb+0x8d/0x360 [ 819.452423][T27491] netlink_ack+0x19a/0x680 [ 819.457812][T27491] ? __rcu_read_unlock+0x66/0x2f0 [ 819.462862][T27491] netlink_rcv_skb+0x220/0x260 [ 819.467644][T27491] ? rtnl_calcit.isra.0+0x200/0x200 [ 819.473005][T27491] rtnetlink_rcv+0x22/0x30 [ 819.477435][T27491] netlink_unicast+0x390/0x4c0 [ 819.482224][T27491] netlink_sendmsg+0x4cf/0x8a0 [ 819.487008][T27491] ? netlink_unicast+0x4c0/0x4c0 [ 819.491970][T27491] sock_sendmsg+0x98/0xc0 [ 819.496421][T27491] kernel_sendmsg+0x48/0x60 [ 819.500938][T27491] sock_no_sendpage+0xc5/0x100 [ 819.505802][T27491] ? sock_kfree_s+0x60/0x60 [ 819.510794][T27491] kernel_sendpage+0x64/0xa0 [ 819.515406][T27491] sock_sendpage+0x64/0x80 [ 819.520964][T27491] ? kernel_sendpage+0xa0/0xa0 [ 819.526267][T27491] pipe_to_sendpage+0x101/0x190 [ 819.531286][T27491] __splice_from_pipe+0x298/0x4a0 [ 819.536325][T27491] ? direct_splice_actor+0xb0/0xb0 [ 819.541514][T27491] ? direct_splice_actor+0xb0/0xb0 [ 819.546654][T27491] splice_from_pipe+0xc2/0x100 [ 819.551449][T27491] generic_splice_sendpage+0x41/0x60 [ 819.557531][T27491] ? splice_from_pipe+0x100/0x100 [ 819.562566][T27491] do_splice+0x6c7/0xc30 [ 819.566837][T27491] ? __fget_light+0xc0/0x1a0 [ 819.571446][T27491] __x64_sys_splice+0x1fd/0x210 [ 819.576322][T27491] do_syscall_64+0xc7/0x390 [ 819.580844][T27491] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 819.586757][T27491] RIP: 0033:0x45c889 [ 819.590675][T27491] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 819.610407][T27491] RSP: 002b:00007fecea363c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 819.618859][T27491] RAX: ffffffffffffffda RBX: 00007fecea3646d4 RCX: 000000000045c889 [ 819.626838][T27491] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 819.634815][T27491] RBP: 000000000076bfa0 R08: 000000000004ffe7 R09: 0000000000000000 [ 819.643666][T27491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 819.651651][T27491] R13: 0000000000000ba4 R14: 00000000004ce6f2 R15: 000000000000000c 10:09:58 executing program 5: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r2, &(0x7f0000000100), 0x8) listen(r2, 0x0) accept4(r2, 0x0, 0x0, 0x3f00) timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, r1+30000000}}, 0x0) tkill(r0, 0x1000000000013) 10:09:58 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0xf) [ 819.919434][T27483] QAT: Invalid ioctl 10:09:58 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="3a258211f663a7724bdef6a53bfce1e775d7406272274814a3f23327edb11e2daf85534aa6f5083067b0248878f07a91df1acc99e6643d3baad0a9f349be3cc11cbf51b4f7bff473e9c200351ccaefebd642492cfc5ead68cf6a0506"], 0x5c) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) ioctl$SIOCX25GSUBSCRIP(r1, 0x89e0, &(0x7f0000000180)={'macvlan1\x00', 0x3, 0x7fffffff}) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x256000, 0x0) ioctl$VT_WAITACTIVE(r2, 0x5607) r3 = syz_open_pts(r0, 0x0) readv(r3, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) ioctl$TCSETSW(r3, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) 10:09:59 executing program 3 (fault-call:6 fault-nth:13): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0x0) 10:09:59 executing program 2: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="3a258211f663a7724bdef6a53bfce1e775d7406272274814a3f23327edb11e2daf85534aa6f5083067b0248878f07a91df1acc99e6643d3baad0a9f349be3cc11cbf51b4f7bff473e9c200351ccaefebd642492cfc5ead68cf6a0506"], 0x5c) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) connect$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e23, 0x98, @remote, 0x6}}, 0x24) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x1802) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x80, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r2 = syz_open_pts(r1, 0x0) readv(r2, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r2, 0xc0096616, &(0x7f00000000c0)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) [ 820.245698][T27510] FAULT_INJECTION: forcing a failure. [ 820.245698][T27510] name failslab, interval 1, probability 0, space 0, times 0 [ 820.263508][T27510] CPU: 1 PID: 27510 Comm: syz-executor.3 Not tainted 5.6.0-rc1-syzkaller #0 [ 820.272207][T27510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 820.282269][T27510] Call Trace: [ 820.285588][T27510] dump_stack+0x11d/0x187 [ 820.289942][T27510] should_fail.cold+0x5/0xf [ 820.294642][T27510] __should_failslab+0x82/0xb0 [ 820.299472][T27510] should_failslab+0x5/0xf [ 820.303911][T27510] kmem_cache_alloc+0x23/0x5e0 [ 820.308712][T27510] ? should_fail+0x7c/0x2fd [ 820.313239][T27510] skb_clone+0xf4/0x280 [ 820.317415][T27510] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 820.323346][T27510] netlink_deliver_tap+0x45a/0x4d0 [ 820.328563][T27510] ? netlink_attachskb+0x1d8/0x4a0 [ 820.333720][T27510] __netlink_sendskb+0x3b/0x70 [ 820.338508][T27510] netlink_unicast+0x46d/0x4c0 [ 820.343296][T27510] netlink_ack+0x385/0x680 [ 820.347740][T27510] ? __rcu_read_unlock+0x66/0x2f0 [ 820.352789][T27510] netlink_rcv_skb+0x220/0x260 [ 820.357647][T27510] ? rtnl_calcit.isra.0+0x200/0x200 [ 820.363015][T27510] rtnetlink_rcv+0x22/0x30 [ 820.367453][T27510] netlink_unicast+0x390/0x4c0 [ 820.372325][T27510] netlink_sendmsg+0x4cf/0x8a0 [ 820.377158][T27510] ? netlink_unicast+0x4c0/0x4c0 [ 820.382121][T27510] sock_sendmsg+0x98/0xc0 [ 820.386492][T27510] kernel_sendmsg+0x48/0x60 [ 820.391043][T27510] sock_no_sendpage+0xc5/0x100 [ 820.395830][T27510] ? sock_kfree_s+0x60/0x60 [ 820.400345][T27510] kernel_sendpage+0x64/0xa0 [ 820.404952][T27510] sock_sendpage+0x64/0x80 [ 820.409382][T27510] ? kernel_sendpage+0xa0/0xa0 [ 820.414155][T27510] pipe_to_sendpage+0x101/0x190 [ 820.419099][T27510] __splice_from_pipe+0x298/0x4a0 [ 820.424140][T27510] ? direct_splice_actor+0xb0/0xb0 [ 820.429267][T27510] ? direct_splice_actor+0xb0/0xb0 [ 820.434428][T27510] splice_from_pipe+0xc2/0x100 [ 820.439290][T27510] generic_splice_sendpage+0x41/0x60 [ 820.444589][T27510] ? splice_from_pipe+0x100/0x100 [ 820.449629][T27510] do_splice+0x6c7/0xc30 [ 820.453938][T27510] ? __fget_light+0xc0/0x1a0 [ 820.458754][T27510] __x64_sys_splice+0x1fd/0x210 [ 820.463700][T27510] do_syscall_64+0xc7/0x390 [ 820.468269][T27510] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 820.474169][T27510] RIP: 0033:0x45c889 [ 820.478075][T27510] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 820.497969][T27510] RSP: 002b:00007fecea363c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 820.506402][T27510] RAX: ffffffffffffffda RBX: 00007fecea3646d4 RCX: 000000000045c889 [ 820.515629][T27510] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 820.523615][T27510] RBP: 000000000076bfa0 R08: 000000000004ffe7 R09: 0000000000000000 [ 820.531598][T27510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 820.539579][T27510] R13: 0000000000000ba4 R14: 00000000004ce6f2 R15: 000000000000000d 10:09:59 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0x10) 10:09:59 executing program 5: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r2, &(0x7f0000000100), 0x8) listen(r2, 0x0) accept4(r2, 0x0, 0x0, 0x4000) timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, r1+30000000}}, 0x0) tkill(r0, 0x1000000000013) 10:10:00 executing program 3 (fault-call:6 fault-nth:14): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0x0) 10:10:00 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = syz_open_pts(r1, 0x145a01) readv(r2, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) 10:10:00 executing program 5: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r2, &(0x7f0000000100), 0x8) listen(r2, 0x0) accept4(r2, 0x0, 0x0, 0x80040) timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, r1+30000000}}, 0x0) tkill(r0, 0x1000000000013) [ 821.306378][T27532] FAULT_INJECTION: forcing a failure. [ 821.306378][T27532] name failslab, interval 1, probability 0, space 0, times 0 [ 821.369330][T27532] CPU: 0 PID: 27532 Comm: syz-executor.3 Not tainted 5.6.0-rc1-syzkaller #0 [ 821.378068][T27532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 821.388126][T27532] Call Trace: [ 821.391427][T27532] dump_stack+0x11d/0x187 [ 821.395819][T27532] should_fail.cold+0x5/0xf [ 821.400449][T27532] __should_failslab+0x82/0xb0 [ 821.405286][T27532] should_failslab+0x5/0xf [ 821.409717][T27532] kmem_cache_alloc+0x23/0x5e0 [ 821.414630][T27532] ? should_fail+0x7c/0x2fd [ 821.419207][T27532] skb_clone+0xf4/0x280 [ 821.423582][T27532] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 821.429491][T27532] netlink_deliver_tap+0x45a/0x4d0 [ 821.434709][T27532] ? netlink_attachskb+0x1d8/0x4a0 [ 821.439922][T27532] __netlink_sendskb+0x3b/0x70 [ 821.444700][T27532] netlink_unicast+0x46d/0x4c0 [ 821.450350][T27532] netlink_ack+0x385/0x680 [ 821.454782][T27532] ? __rcu_read_unlock+0x66/0x2f0 [ 821.465108][T27532] netlink_rcv_skb+0x220/0x260 [ 821.470519][T27532] ? rtnl_calcit.isra.0+0x200/0x200 [ 821.476611][T27532] rtnetlink_rcv+0x22/0x30 [ 821.481924][T27532] netlink_unicast+0x390/0x4c0 [ 821.487109][T27532] netlink_sendmsg+0x4cf/0x8a0 [ 821.491902][T27532] ? netlink_unicast+0x4c0/0x4c0 [ 821.496856][T27532] sock_sendmsg+0x98/0xc0 [ 821.501376][T27532] kernel_sendmsg+0x48/0x60 [ 821.505980][T27532] sock_no_sendpage+0xc5/0x100 [ 821.510767][T27532] ? sock_kfree_s+0x60/0x60 [ 821.515402][T27532] kernel_sendpage+0x64/0xa0 [ 821.520036][T27532] sock_sendpage+0x64/0x80 [ 821.524476][T27532] ? kernel_sendpage+0xa0/0xa0 [ 821.529511][T27532] pipe_to_sendpage+0x101/0x190 [ 821.534467][T27532] __splice_from_pipe+0x298/0x4a0 [ 821.542245][T27532] ? direct_splice_actor+0xb0/0xb0 [ 821.549560][T27532] ? direct_splice_actor+0xb0/0xb0 [ 821.554887][T27532] splice_from_pipe+0xc2/0x100 [ 821.559682][T27532] generic_splice_sendpage+0x41/0x60 [ 821.565003][T27532] ? splice_from_pipe+0x100/0x100 [ 821.570046][T27532] do_splice+0x6c7/0xc30 [ 821.574322][T27532] ? __fget_light+0xc0/0x1a0 [ 821.578932][T27532] __x64_sys_splice+0x1fd/0x210 [ 821.583846][T27532] do_syscall_64+0xc7/0x390 [ 821.588367][T27532] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 821.594951][T27532] RIP: 0033:0x45c889 [ 821.601126][T27532] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 821.620771][T27532] RSP: 002b:00007fecea363c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 821.629198][T27532] RAX: ffffffffffffffda RBX: 00007fecea3646d4 RCX: 000000000045c889 [ 821.637175][T27532] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 821.645350][T27532] RBP: 000000000076bfa0 R08: 000000000004ffe7 R09: 0000000000000000 [ 821.653421][T27532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 821.661924][T27532] R13: 0000000000000ba4 R14: 00000000004ce6f2 R15: 000000000000000e 10:10:00 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0x11) 10:10:00 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="3a258211f663a7724bdef6a53bfce1e775d7406272274814a3f23327edb11e2daf85534aa6f5083067b0248878f07a91df1acc99e6643d3baad0a9f349be3cc11cbf51b4f7bff473e9c200351ccaefebd642492cfc5ead68cf6a0506"], 0x5c) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_DELCHAIN={0x70, 0x5, 0xa, 0x301, 0x0, 0x0, {0x6, 0x0, 0x9}, [@NFTA_CHAIN_COUNTERS={0x28, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x3f4}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x6}]}, @NFTA_CHAIN_HOOK={0x2c, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'gre0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'nr0\x00'}]}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xffffffffffffffff}]}, @NFT_MSG_NEWFLOWTABLE={0x2c, 0x16, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWCHAIN={0xd0, 0x3, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_CHAIN_HOOK={0x70, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3dbb6a4b}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x97546ae}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x21f03f40}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'lo\x00'}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x22114f38}]}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}, @NFT_MSG_DELFLOWTABLE={0xa4, 0x18, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_FLOWTABLE_HOOK={0x54, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_virt_wifi\x00'}, {0x14, 0x1, 'team0\x00'}, {0x14, 0x1, 'bridge_slave_0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}, @NFT_OBJECT_LIMIT=@NFTA_OBJ_TYPE={0x8}}, @NFT_MSG_NEWRULE={0x404, 0x6, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_USERDATA={0x100, 0x7, 0x1, 0x0, "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"}, @NFTA_RULE_EXPRESSIONS={0x2f0, 0x4, 0x0, 0x1, [{0x198, 0x1, 0x0, 0x1, [@match={{0xa, 0x1, 'match\x00'}, @val={0x150, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x48, 0x3, "715e96a75a50bd44058905fb460b6f1af163f9f2b0734470623bd0989315a7308c99e9f03ee70745e748cc219f4338695695dfee21247d2d71dbd38cf0e0dab1c13957f9"}, @NFTA_MATCH_INFO={0xfb, 0x3, "4e6d7f8ee97ca5ae4ca1a239f6c711a39547e407dc11c5a527f3fab0f78ceec3096b79fdf3be7df3df4046ddc59012d59b2b6f6a9207ec6cd0609d054701596b753801f5b72cf759a3c53f088bc69e732fdfbcc03d4549a16f6f6825eee4dda20dcc7c8230c725ed7d7e69eb385ef8ddc3966081902e80d7de7e8a9e8dc9136afd6b2b4ab8488af1f72e612b7b8a1f0146c41ad82670af40475680af057092daeff543a84cc435a282609c80ca326834bef5b26d39be10032643270a8922b0642a37315303ca728ef61492d4ddf6accb4b137b88d05753ff06fa9e66939b2aa9f6c206abe9f3c51475572297705b10a2f1896d9dc02915"}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x6}]}}, @counter={{0xc, 0x1, 'counter\x00'}, @void}, @dup_ipv4={{0x8, 0x1, 'dup\x00'}, @void}, @lookup={{0xb, 0x1, 'lookup\x00'}, @void}, @masq={{0x9, 0x1, 'masq\x00'}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x14}]}}]}, {0x10, 0x1, 0x0, 0x1, [@tunnel={{0xb, 0x1, 'tunnel\x00'}, @void}]}, {0xc0, 0x1, 0x0, 0x1, [@flow_offload={{0x11, 0x1, 'flow_offload\x00'}, @void}, @numgen={{0xb, 0x1, 'numgen\x00'}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0xe2}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0xd8d}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x6}, @NFTA_NG_TYPE={0x8}]}}, @fib={{0x8, 0x1, 'fib\x00'}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x8}]}}, @tproxy={{0xb, 0x1, 'tproxy\x00'}, @void}, @counter={{0xc, 0x1, 'counter\x00'}, @void}, @osf={{0x8, 0x1, 'osf\x00'}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_OSF_TTL={0x5, 0x2, 0x1}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_OSF_TTL={0x5, 0x2, 0xfe}]}}]}, {0x60, 0x1, 0x0, 0x1, [@dup_ipv6={{0x8, 0x1, 'dup\x00'}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_DUP_SREG_DEV={0x8}]}}]}, {0x24, 0x1, 0x0, 0x1, [@rt={{0x7, 0x1, 'rt\x00'}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x11}]}}, @bitwise={{0xc, 0x1, 'bitwise\x00'}, @void}]}]}]}, @NFT_MSG_DELSETELEM={0x2c74, 0xe, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x1634, 0x3, 0x0, 0x1, [{0x24c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x218, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0x33, 0x1, "bf79a1a2b6c8f82d24be530fc3bdb2cdc20782809a9b0e2a29633a73883309e5e724183d6b67d158e7461994b2e0c1"}, @NFTA_DATA_VALUE={0xc0, 0x1, "54d5e5004438ff0c7ec8787cac37834ec56e4542fe1ad54c14d3651a62ff444199c3248d395afba1aa132d38a865ccab606a60d8fc3b20c453e92418a44191b16ab59c11886866fcbbb90490418482b836794001ed3aec7534ef9d6242483427ca037fd203f440b2a1eedf3dc7d7b94da4667a87ce44ef71acc630aab5786c9e7a22553940ee0bae6e586e878f6c9ea0a1ea482ea3d6c7528b9e92289ace2b546fc08aa57c5cffaa8ca58be7cc37551aa46d100767fa16636c840622"}, @NFTA_DATA_VALUE={0x77, 0x1, "8b5259ba688ad3ba7b0823b64ec090f753a888971437b7e3b788b2d5514774188202cdfc3626993371227eb53146c6fdfb3c7dcf841a7de1b81977b65410a303c39c199e43dc4cf0a70d124af51b92c082ea5b1b1fcbbebfd82ee604079eb854cc17c19357b03b584f490c3387e86e56fa1548"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xf, 0x1, "2a911d60309321200a86ca"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7fff}]}, {0x64, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_DATA={0x2c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}]}, {0x12dc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x12a4, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xf8, 0x1, "be4b9dc7c675f9ac72e6ba2c85ee7e52cf89bad097e5798a6ad1571462081a57cb8dce22f698805e50bc02371c744bfa3236f3136e1569dcbadaf04d63828c237637ac57618c76fb65c2dd30556a5376f3cdaaa62a85c6c30872c854901a258c9162a2c95646ad44e1c57cd7d917fcacd5f828ecc3c241e469f7ff98c3b3e2714c3a7c232fe1da2d7b1d459f694138b8df1ba5c9ef2f1a582046642911952d64eeb0c250964b984d7f120a116e326a3ccbc0dec19da36f0db4ec8f2f9199371f26528196be26a294a250c147eab9b88373565e4cc554062a4b321d4ebd69d793cae9c030d54b7410d842b3ceaa3526d605d29c09"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0xb8, 0x1, "9849f8363800161a686b498fce364fbe52fd88cbdccf306f5e5479a077599b899207bce00c47b5ea7d1767fc73aa5233f27b2a84c49bcc27667c4b5389e19a5b26a9d98bc3b2c8e1d7ceb5783ccc74d13645a9118c40c16cbe33238e742cab15d59a139a1312a35762e5a438a4fe738e7ee708a187c592867e7fafb90867ce78d9ff12343f5c5d262864b39d2058c38791da40d1b467dc3289ce7edebf89744d377745eaac4ff2ad4be2534000a5b414c2e5904c"}, @NFTA_DATA_VALUE={0xad, 0x1, "830e10edd3ea532cdd13311e03cf1ca85b1e053a00c85d5f2dc92f2be6f582120dc15552873b8147a59500615b73f6e9ce7eb28cb4eaa4888e40d8022b22eca31cb12c5ea1060b89c5bc24d93d16005948d5917ab3ddc6b988d38f25219bdf231bd98b59cff94a9060da0e2de826934236c00534cf9cf7320fec7f9fa30a76ed09a3253e3de76639b99c83a6fda9393450ccef05837a4c4cc30aaefc4857ceb7deaeed4e4ed979eaab"}]}, @NFTA_SET_ELEM_KEY={0x34, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}]}, {0xa4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x9e, 0x6, 0x1, 0x0, "9f282ab059cfb4604c4672aa713ef58e6a18f74ee63a39fd911f2f22668a42780b6b616fc403ecc77d3da402ce088005734b53fda5625dac76f4908d8ce0dadff004cb2438c7138a7101536ae247cf9135c2e77dc282f14876a2a3d77226bf9e4e3c5ccf1227d4f005c8b9210baad77dff04b87125647019b4c35e78071ff61a494e12a60a872a46bbccbbaab67fe48db72852944bb9b98d56eb"}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x13cc, 0x3, 0x0, 0x1, [{0x118, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_USERDATA={0xee, 0x6, 0x1, 0x0, "a2cb69c03ba8340be8d33862fff902a2bd4abd86521664a5d1c36f01b91cc44582fc0bc416b1c31846ace53d0da0d702b68860ea8493833b18c0442285f9a8077ec831bdd1c1537b1ac93694f43fcf4ac6ef7b46ae1cdbf483782c0a942baf742becdd793ba68216c5833e1e42753b377ca4371053f96c201f935bce7b5fdc8ba57e74131c66d26cb5e1a3765d86680d15d318902ce1dc5c30fcf75b04b9daf1244328815eef783d0e22ab2d6ad8a9d206774e5af50bbfc754612d4bbf5d37e439e9abc1bf72b74446c85fd61f6cbc0e4bdb155a35091a9dc3d34b4bf17222f75d8031a9daa3d3a2d9d1"}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xfffffffffffffbff}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}, {0x1cc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x138, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0x5b, 0x1, "3038dcc4b6491018d6bafb1ef513bf7d2cb7f3fd68d4c747af5d1f3f07737b5b7988e7499679f0e7502cc1737db085e178727edae825d10a5d61c4b2d18df8bc5fe6c836b96c3e1571b60ba68fc26fc6fd9875ad65b84f"}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0xc, 0x1, "61488178b7e1800e"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x5, 0x1, '~'}]}, @NFTA_SET_ELEM_USERDATA={0x89, 0x6, 0x1, 0x0, "b2af9ca03205fcdc0faf351b51d08354d2db05ecaa26e40e3c672419be076c38fe9fad5ddbe6ed4cc0c693c6c9a8ee5f9032afdfc56d8764ebd74cbfd6392867ce835dbea37dfb53973157a1066d7efe37d2a4d0e88f558c21f0307437cc4a27fb6f899effd79422a40da9f0de2ecfbe156f28203d00c1508a7650c814bc18ce7c61a76a37"}, @NFTA_SET_ELEM_EXPR={0x4}]}, {0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xcdd}, @NFTA_SET_ELEM_EXPR={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}]}, {0x10bc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x10a0, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0x98, 0x1, "eb87ec2082fa4a4c9ad2fedbb79bf7f2e6c16132dd9fc9dc6f17582976ce0c8494aeab5babe57df6bbed7e8a70a55b42fd4128629903ac071fdb2ab10d643a6d92daaf5c07789067c0a9dda864312710102e9d3a2527df58dfda02465389828189f3278f3c8ab250b89f54958d76828aaf7b15c73d4ca10ce6ba599b7aac63961097548145ffd868d72def1d96d1c33091fad627"}]}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x238, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}, {0x110, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x108, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xed, 0x1, "fe1a178512aa8d04c21cf337deccf778aceab91b15272f334c5f8e641f285d30e041a18de5c5bd8a2c841c330ff05c7a57e370fdc46c507c237275d388fc810e7d78c4d054829ba196e7f92a5554ac433ccd569cba1e33f5c8b0ddd03c0758c86f7dfe30c977289e15c06acd81979f01e34c67b05a62b05382986d4988d57655bca42becd0b6b953f77b07e5362ac724d199062c9faf36aa510abbfed1d62634a3f624f06d3fdf16c0cc180032d2e6627efe92324fad8793f5841026163b9cfcffa52068b7e004439b5f92bb330299ffb0c18452b1a63fca041cab6a364642e73dd0029af0e1c71356"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8}]}]}, @NFTA_SET_ELEM_USERDATA={0x4}]}, {0xfc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xf1, 0x6, 0x1, 0x0, "fe2248cfb8935471a68d3182297224b1113669f89b4a5f31f43d875144279c8d89b0c496ee3078cb4b4dee3397494eb808372742394c9b5de0d09c8c6d07a67c2553a4d950f27a613e0ac2700e56762a7784c5e5a35e66e4d7d0f3dfb59000f97a1511fa9df07805c5737d6062152a067a37d2c7abab0e3c550d6a250117501169c671a7d282ecac407827094d33320ad8a7cf12d403181f393e6900e300fd9d81d50089f46930492742e314ffb823b911a78d62953cd89aa998c490238ee1aa1b0899a39731ec093dbdb2151578fed1f3be8df924a09757cecd57da3bbf15017259b9f503749955dd89239c51"}, @NFTA_SET_ELEM_EXPR={0x4}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELRULE={0x2c, 0x8, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}, @NFT_OBJECT_CT_EXPECT=@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}}], {0x14}}, 0x3318}, 0x1, 0x0, 0x0, 0x4}, 0x40044) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) 10:10:00 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) accept4$nfc_llcp(r1, &(0x7f00000000c0), &(0x7f0000000000)=0x60, 0x800) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r2 = syz_open_pts(r0, 0x0) readv(r2, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000040)={0x0, 0x5, 0x0, 0xfcf, 0xe, '\x00\x00\x00@\x00'}) 10:10:01 executing program 5: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r2, &(0x7f0000000100), 0x8) listen(r2, 0x0) accept4(r2, 0x0, 0x0, 0x1000000) timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, r1+30000000}}, 0x0) tkill(r0, 0x1000000000013) 10:10:01 executing program 3 (fault-call:6 fault-nth:15): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0x0) [ 822.324616][T27560] FAULT_INJECTION: forcing a failure. [ 822.324616][T27560] name failslab, interval 1, probability 0, space 0, times 0 [ 822.356681][T27560] CPU: 1 PID: 27560 Comm: syz-executor.3 Not tainted 5.6.0-rc1-syzkaller #0 [ 822.365996][T27560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 822.376573][T27560] Call Trace: [ 822.380044][T27560] dump_stack+0x11d/0x187 [ 822.384404][T27560] should_fail.cold+0x5/0xf [ 822.389145][T27560] __should_failslab+0x82/0xb0 [ 822.394026][T27560] should_failslab+0x5/0xf [ 822.398584][T27560] kmem_cache_alloc_node+0x35/0x680 [ 822.403878][T27560] ? __read_once_size.constprop.0+0xd/0x20 [ 822.410312][T27560] ? debug_smp_processor_id+0x3f/0x129 [ 822.415788][T27560] ? debug_smp_processor_id+0x3f/0x129 [ 822.421257][T27560] alloc_vmap_area+0x102/0x1540 [ 822.426157][T27560] ? debug_smp_processor_id+0x3f/0x129 [ 822.431812][T27560] ? kmem_cache_alloc_node_trace+0x1b2/0x610 [ 822.438860][T27560] ? debug_smp_processor_id+0x3f/0x129 [ 822.444330][T27560] ? ___cache_free+0x2c/0x320 [ 822.449088][T27560] __get_vm_area_node+0x16f/0x280 [ 822.454650][T27560] ? netlink_sendmsg+0x348/0x8a0 [ 822.459594][T27560] __vmalloc_node_range+0xf2/0x4c0 [ 822.464739][T27560] ? netlink_sendmsg+0x348/0x8a0 [ 822.469699][T27560] ? aa_label_sk_perm+0x7e/0xd0 [ 822.474563][T27560] ? netlink_sendmsg+0x348/0x8a0 [ 822.479541][T27560] vmalloc+0x63/0x80 [ 822.483448][T27560] ? netlink_sendmsg+0x348/0x8a0 [ 822.488397][T27560] netlink_sendmsg+0x348/0x8a0 [ 822.493180][T27560] ? netlink_unicast+0x4c0/0x4c0 [ 822.498244][T27560] sock_sendmsg+0x98/0xc0 [ 822.502661][T27560] kernel_sendmsg+0x48/0x60 [ 822.507175][T27560] sock_no_sendpage+0xc5/0x100 [ 822.511961][T27560] ? sock_kfree_s+0x60/0x60 [ 822.516783][T27560] kernel_sendpage+0x64/0xa0 [ 822.521436][T27560] sock_sendpage+0x64/0x80 [ 822.525883][T27560] ? kernel_sendpage+0xa0/0xa0 [ 822.530656][T27560] pipe_to_sendpage+0x101/0x190 [ 822.536179][T27560] __splice_from_pipe+0x298/0x4a0 [ 822.542300][T27560] ? direct_splice_actor+0xb0/0xb0 [ 822.547604][T27560] ? direct_splice_actor+0xb0/0xb0 [ 822.552744][T27560] splice_from_pipe+0xc2/0x100 [ 822.557536][T27560] generic_splice_sendpage+0x41/0x60 [ 822.563119][T27560] ? splice_from_pipe+0x100/0x100 [ 822.569380][T27560] do_splice+0x6c7/0xc30 [ 822.573739][T27560] ? __fget_light+0xc0/0x1a0 [ 822.578499][T27560] __x64_sys_splice+0x1fd/0x210 [ 822.586115][T27560] do_syscall_64+0xc7/0x390 [ 822.593194][T27560] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 822.600371][T27560] RIP: 0033:0x45c889 [ 822.604294][T27560] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 822.624869][T27560] RSP: 002b:00007fecea363c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 822.633358][T27560] RAX: ffffffffffffffda RBX: 00007fecea3646d4 RCX: 000000000045c889 [ 822.641337][T27560] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 822.649313][T27560] RBP: 000000000076bfa0 R08: 000000000004ffe7 R09: 0000000000000000 [ 822.657293][T27560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 822.665303][T27560] R13: 0000000000000ba4 R14: 00000000004ce6f2 R15: 000000000000000f 10:10:01 executing program 5: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r2, &(0x7f0000000100), 0x8) listen(r2, 0x0) accept4(r2, 0x0, 0x0, 0x3000000) timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, r1+30000000}}, 0x0) tkill(r0, 0x1000000000013) [ 822.691594][T27560] warn_alloc: 5 callbacks suppressed [ 822.691615][T27560] syz-executor.3: vmalloc: allocation failure: 4416 bytes, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz3,mems_allowed=0-1 10:10:01 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0x12) [ 822.798732][T27560] CPU: 0 PID: 27560 Comm: syz-executor.3 Not tainted 5.6.0-rc1-syzkaller #0 [ 822.807531][T27560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 822.817592][T27560] Call Trace: [ 822.820953][T27560] dump_stack+0x11d/0x187 [ 822.825311][T27560] warn_alloc.cold+0x72/0xcf [ 822.829914][T27560] ? __get_vm_area_node+0x228/0x280 [ 822.835206][T27560] __vmalloc_node_range+0x371/0x4c0 [ 822.840414][T27560] ? aa_label_sk_perm+0x7e/0xd0 [ 822.845795][T27560] ? netlink_sendmsg+0x348/0x8a0 [ 822.850743][T27560] vmalloc+0x63/0x80 [ 822.854712][T27560] ? netlink_sendmsg+0x348/0x8a0 [ 822.859663][T27560] netlink_sendmsg+0x348/0x8a0 [ 822.866097][T27560] ? netlink_unicast+0x4c0/0x4c0 [ 822.871318][T27560] sock_sendmsg+0x98/0xc0 [ 822.875754][T27560] kernel_sendmsg+0x48/0x60 [ 822.881049][T27560] sock_no_sendpage+0xc5/0x100 [ 822.886013][T27560] ? sock_kfree_s+0x60/0x60 [ 822.890522][T27560] kernel_sendpage+0x64/0xa0 [ 822.895190][T27560] sock_sendpage+0x64/0x80 [ 822.899623][T27560] ? kernel_sendpage+0xa0/0xa0 [ 822.904430][T27560] pipe_to_sendpage+0x101/0x190 [ 822.909743][T27560] __splice_from_pipe+0x298/0x4a0 [ 822.914807][T27560] ? direct_splice_actor+0xb0/0xb0 [ 822.919958][T27560] ? direct_splice_actor+0xb0/0xb0 [ 822.925228][T27560] splice_from_pipe+0xc2/0x100 [ 822.930099][T27560] generic_splice_sendpage+0x41/0x60 [ 822.935398][T27560] ? splice_from_pipe+0x100/0x100 [ 822.941882][T27560] do_splice+0x6c7/0xc30 [ 822.947580][T27560] ? __fget_light+0xc0/0x1a0 [ 822.952557][T27560] __x64_sys_splice+0x1fd/0x210 [ 822.957873][T27560] do_syscall_64+0xc7/0x390 [ 822.962484][T27560] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 822.968649][T27560] RIP: 0033:0x45c889 [ 822.972912][T27560] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 822.994743][T27560] RSP: 002b:00007fecea363c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 823.003426][T27560] RAX: ffffffffffffffda RBX: 00007fecea3646d4 RCX: 000000000045c889 [ 823.012496][T27560] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 823.020482][T27560] RBP: 000000000076bfa0 R08: 000000000004ffe7 R09: 0000000000000000 [ 823.028464][T27560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 823.036455][T27560] R13: 0000000000000ba4 R14: 00000000004ce6f2 R15: 000000000000000f 10:10:02 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) 10:10:02 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r1 = syz_open_pts(r0, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyprintk\x00', 0x4c000, 0x0) readv(r1, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x101, 0x8, 0x0, '\x00\x00\x00@\x00'}) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) ioctl$RTC_IRQP_READ(r2, 0x8008700b, &(0x7f00000000c0)) [ 823.151433][T27560] Mem-Info: [ 823.157794][T27560] active_anon:227033 inactive_anon:236 isolated_anon:0 [ 823.157794][T27560] active_file:8220 inactive_file:40339 isolated_file:0 [ 823.157794][T27560] unevictable:0 dirty:347 writeback:23 unstable:0 [ 823.157794][T27560] slab_reclaimable:5572 slab_unreclaimable:18634 [ 823.157794][T27560] mapped:60973 shmem:301 pagetables:2502 bounce:0 [ 823.157794][T27560] free:1469981 free_pcp:814 free_cma:0 [ 823.227061][T27560] Node 0 active_anon:901760kB inactive_anon:944kB active_file:32744kB inactive_file:161356kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:243892kB dirty:1388kB writeback:92kB shmem:1204kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 837632kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 823.265048][T27560] Node 1 active_anon:10504kB inactive_anon:0kB active_file:136kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 823.353963][T27560] Node 0 DMA free:15908kB min:188kB low:232kB high:276kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB 10:10:02 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @dev}, r5}}, 0x48) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000180)={0xf, 0x8, 0xfa00, {r5, 0x5}}, 0x10) write$P9_RREADLINK(r3, &(0x7f0000000040)=ANY=[], 0x0) sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000018c0)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="c0070000", @ANYRES16=0x0, @ANYBLOB="000227bd7000fcdbdf250000000008000100", @ANYRES32=0x0, @ANYBLOB="bc00028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b000000080004000800000008000700000000003c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000000c0004007f000809060000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="4400028040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b00000008000400ce07000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="f800028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000300000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400020000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000700000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="e401028040000100000001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000000030003000000000004000600000040000100000001006c625f74785f6d6574686f640000000000000000000000000000000000000000000003000500000000000400686173685f746f5f706f72745f6d617070696e670000000038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400050000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000200030003000000080004000600000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000300000008000600", @ANYRES32=0x0, @ANYBLOB="3c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000005000300050000000900040068617368000000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="400002803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600779c8592322cea8a6d43bfa5f3a1ec4d3cce21747d452c788ff7baf1509e9747125442a1575b8a0ea0e71252255b5d736f9648be2b43dd29045f0172ae8208955049d579", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="ac00028038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004008408000038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400ff01000038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400fb00000008000100", @ANYRES32=0x0, @ANYBLOB="7c00028040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000100010008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000100000008000100", @ANYRES32=0x0, @ANYBLOB="0400028008000100", @ANYRES32=0x0, @ANYBLOB="1c02028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400a6000000080007000000000044000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000001400040026be010805000000ff0f4002050000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400080000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB], 0x7c0}, 0x1, 0x0, 0x0, 0x4000}, 0xc0) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000000)={0x0, 0x0, [0x0, 0x400]}) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="3a7c7011f663a7724bdef6a53bfce1e7948b28c472274814a3f23327edb11e2daf85534aa6f5083067b0248878f07a910400cc99e6643d3baad0a9f349be3cc11cbf51b4f7bff4492cfc5ead68006a050600"/92], 0x5c) sendfile(r6, r6, &(0x7f0000000000), 0x8080fffffffe) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0], 0x2}) ioctl$DRM_IOCTL_MODE_SETPLANE(r6, 0xc03064b7, &(0x7f0000000140)={r7, 0x1, 0x889f, 0x9, 0x0, 0x40, 0x1e4cfc89, 0xe35, 0x91b, 0x6, 0x2, 0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:10:02 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000600), 0x0) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="e8000000d3c39ff3f98feb1df3f25d1d68d17caddeaa2eb2598937d33eff75a45f8d052c6e20e9cb0bb6699cfcb356ca542452ab196800"/65, @ANYRES16=r4, @ANYBLOB="af86000000000000000003000000400001000d0001007564703a73797a393f281eb5e8521ba2157311041a2332000000002c000400140001000200ffffe000000200000000000000001400020002952f00ac1414bb0000000000000000480007000c00040003000000000000000c000400e50400000000000008000200000000000c000300001000000000000008000200ffffffff080001000900000008000100000200003c000700080001000200000008000200ffffff7f08000200070000000800020006000000080001000004000008000100010000000800020001000000100004000900010073797a3100000000"], 0xe8}}, 0x0) sendmsg$TIPC_NL_SOCK_GET(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0xec, r4, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5f5}]}, @TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x101}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x40}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NODE={0x24, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x17}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8b55}]}, @TIPC_NLA_LINK={0x68, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x40040}, 0x840) r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r5) connect$bt_l2cap(r5, &(0x7f0000000340)={0x1f, 0x3, @fixed={[], 0x11}, 0x3}, 0xe) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) [ 823.467645][T27560] lowmem_reserve[]: 0 2896 3603 3603 [ 823.480511][T27560] Node 0 DMA32 free:1926348kB min:35272kB low:44088kB high:52904kB reserved_highatomic:0KB active_anon:537100kB inactive_anon:0kB active_file:2644kB inactive_file:116576kB unevictable:0kB writepending:1184kB present:3129332kB managed:2967808kB mlocked:0kB kernel_stack:960kB pagetables:3796kB bounce:0kB free_pcp:1632kB local_pcp:1272kB free_cma:0kB [ 823.517025][T27560] lowmem_reserve[]: 0 0 707 707 [ 823.522232][T27560] Node 0 Normal free:141060kB min:8616kB low:10768kB high:12920kB reserved_highatomic:0KB active_anon:362804kB inactive_anon:944kB active_file:30080kB inactive_file:44804kB unevictable:0kB writepending:200kB present:786432kB managed:724520kB mlocked:0kB kernel_stack:3644kB pagetables:6252kB bounce:0kB free_pcp:1296kB local_pcp:68kB free_cma:0kB [ 823.555371][T27560] lowmem_reserve[]: 0 0 0 0 [ 823.560001][T27560] Node 1 Normal free:3794560kB min:46032kB low:57540kB high:69048kB reserved_highatomic:0KB active_anon:10504kB inactive_anon:0kB active_file:136kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870256kB mlocked:0kB kernel_stack:8kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 823.592535][T27560] lowmem_reserve[]: 0 0 0 0 [ 823.597259][T27560] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 823.612114][T27560] Node 0 DMA32: 1227*4kB (UME) 1128*8kB (UME) 962*16kB (UME) 829*32kB (UME) 708*64kB (UME) 193*128kB (UME) 69*256kB (UME) 36*512kB (UM) 5*1024kB (M) 2*2048kB (UM) 428*4096kB (M) = 1924268kB [ 823.630968][T27560] Node 0 Normal: 3011*4kB (ME) 3377*8kB (ME) 2291*16kB (ME) 1052*32kB (ME) 339*64kB (M) 40*128kB (ME) 7*256kB (ME) 2*512kB (E) 2*1024kB (E) 0*2048kB 0*4096kB = 141060kB [ 823.648053][T27560] Node 1 Normal: 2*4kB (UM) 3*8kB (UM) 12*16kB (UME) 3*32kB (UM) 3*64kB (ME) 1*128kB (E) 2*256kB (UE) 1*512kB (E) 2*1024kB (ME) 1*2048kB (E) 925*4096kB (M) = 3794560kB [ 823.666517][T27560] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 823.676699][T27560] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 823.687385][T27560] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 823.718205][T27560] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 823.733947][T27560] 48858 total pagecache pages [ 823.738761][T27560] 0 pages in swap cache [ 823.743169][T27560] Swap cache stats: add 0, delete 0, find 0/0 [ 823.759765][T27560] Free swap = 0kB [ 823.763626][T27560] Total swap = 0kB 10:10:02 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0x0) [ 823.767621][T27560] 1965979 pages RAM [ 823.772995][T27560] 0 pages HighMem/MovableOnly [ 823.777898][T27560] 71356 pages reserved [ 823.782918][T27560] 0 pages cma reserved 10:10:02 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0x13) 10:10:02 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) readv(0xffffffffffffffff, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)=""/237, 0x37, 0xed, 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x15, 0x10, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r1, 0x0, 0x1}, 0x40) r2 = dup(r1) ioctl$SNDCTL_DSP_GETOPTR(r2, 0x800c5012, &(0x7f0000000000)) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r3) write$P9_RLERROR(r3, &(0x7f00000000c0)={0x13, 0x7, 0x1, {0xa, '/dev/ptmx\x00'}}, 0x13) 10:10:03 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r1 = syz_open_pts(r0, 0x8103) readv(r1, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) 10:10:03 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)=""/237, 0x37, 0xed, 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x15, 0x10, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r1, 0x0, 0x1}, 0x40) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)=""/237, 0x37, 0xed, 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x15, 0x10, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0x0, 0x1}, 0x40) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e002553e7dc888cc5b2640165ebda6e94f8504e9ad2890fc350669824a3adc007e52440a45df1f2f84995b27d015847da5f653595973826a3ee9842531effd00e951567260b7f9508bccb73769129e168b7b5030a7a54319e3c9538c8c4452ffd9774f9950367986be848f7bbf1708af8a330fd7402d66ee3546fe24cc196080cf0bb77014e058bfb45902e26d165fd0962343d49bc7d16ab409b7058c0b60b2ff7ca456ad5ff636cdbc30f737f6ed21ec904bb9e5678ebd06892ade290cbe97c4506a348aa878b688cd4c80ea23c0200000000000000ff64f9ddd0367ac42a122d62e5ea70"], &(0x7f0000000280)=""/237, 0x37, 0xed, 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x15, 0x10, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r3, 0x0, 0x1}, 0x40) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRESOCT=r3, @ANYRESHEX=r0, @ANYPTR=&(0x7f0000000180)=ANY=[@ANYPTR64, @ANYRES64, @ANYRES64=r0, @ANYRESHEX=r1, @ANYRES16=r0, @ANYRES16=r0, @ANYRESOCT=r2]], 0x33) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r4 = syz_open_pts(0xffffffffffffffff, 0x2000) readv(r4, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) ioctl$TCSETSW(r4, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="3a258211f663a7724bdef6a53bfce1e775d7406272274814a3f23327edb11e2daf85534aa6f5083067b0248878f07a91df1acc99e6643d3baad0a9f349be3cc11cbf51b4f7bff473e9c200351ccaefebd642492cfc5ead68cf6a0506"], 0x5c) sendfile(r5, r5, &(0x7f0000000000), 0x8080fffffffe) ioctl$SNDCTL_DSP_GETBLKSIZE(r5, 0xc0045004, &(0x7f0000000240)) r6 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r6) getpeername$ax25(0xffffffffffffffff, &(0x7f0000000640)={{0x3, @rose}, [@rose, @rose, @netrom, @default, @rose, @default, @default]}, &(0x7f00000000c0)=0x48) 10:10:03 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) getsockopt$rose(r2, 0x104, 0x4, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r3, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000000)={0x0, 0x0, [0x0, 0x400]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 10:10:03 executing program 5: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r2, &(0x7f0000000100), 0x8) listen(r2, 0x0) accept4(r2, 0x0, 0x0, 0x4000000) timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, r1+30000000}}, 0x0) tkill(r0, 0x1000000000013) 10:10:03 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000)=[@mss={0x2, 0x80000001}, @window={0x3, 0x101}], 0x2) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) 10:10:03 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000000)={0x0, 0x0, [0x0, 0x400]}) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="3a258211f663a7724bdef6a53bfce1e775d7406272274814a3f23327edb11e2daf85534aa6f5083067b0248878f07a91df1acc99e6643d3baad0a9f349be3cc11cbf51b4f7bff473e9c200351ccaefebd642492cfc5ead68cf6a0506"], 0x5c) sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:10:03 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0x2) 10:10:03 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0x14) 10:10:04 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r1 = syz_open_pts(r0, 0x0) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) ioctl$TCGETX(r2, 0x5432, &(0x7f0000000000)) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)=""/237, 0x37, 0xed, 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x15, 0x10, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r3, 0x0, 0x1}, 0x40) dup(r3) readv(r1, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) faccessat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x8, 0x1200) 10:10:04 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x12e, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) r2 = syz_open_dev$vcsu(&(0x7f00000000c0)='/dev/vcsu#\x00', 0x7, 0x400000) ioctl$ASHMEM_GET_NAME(r2, 0x81007702, &(0x7f0000000180)=""/123) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x80, 0x0) 10:10:04 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r3) ioctl$PPPIOCGNPMODE(r3, 0xc008744c, &(0x7f0000000140)={0x2b}) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000000)={0x0, 0x0, [0x0, 0x400]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="3a258211f663a7724bdef6a53bfce1e775d7406272274814a3f23327edb11e2daf85534aa6f5083067b0248878f07a91df1acc99e6643d3baad0a9f349be3cc11cbf51b4f7bff473e9c200351ccaefebd642492cfc5ead68cf6a0506"], 0x5c) sendfile(r4, r4, &(0x7f0000000000), 0x8080fffffffe) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r4, 0x10f, 0x84, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 10:10:04 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0x3) 10:10:04 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0x30) 10:10:05 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)=""/237, 0x37, 0xed, 0x1}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x15, 0x10, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r1, 0x0, 0x1}, 0x40) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)=""/237, 0x37, 0xed, 0x1}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x15, 0x10, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r3, 0x0, 0x1}, 0x40) write$binfmt_aout(r0, &(0x7f0000000a40)=ANY=[@ANYRES32=r1, @ANYRES32, @ANYRES64, @ANYPTR64=&(0x7f00000007c0)=ANY=[@ANYBLOB="843cca583ae70f17232f78214e567086058f2dac2ac9fa7bc49548a7fdb48ed452a4d19bd3972860e658a8a1157520d7a24570f7ec2ea3772f479b5f4ff441dfd32ef457b3ba505f699d216582ee9091be28663b5b2ad47b45aa", @ANYPTR64=&(0x7f0000000640)=ANY=[@ANYBLOB="b69354bba9f167e2deafd4caaee85cb485f3ecde0758f35572639eb513997d64d470fbd1f326425b0df78c9a866a8dd20991c261c1ed97ac28b07b1594f606e0ffe4ebd50f7d19e903a64794f7bd7d7fe173e7519e181d0e5e4d49d2de3777a48544cee81e0f8ea2d401781ae68276844da5686307f4b6dfa52633490acac3dabc16c30747b1760df7407164a2f02a2aa6ac1e850df83cdfad3f46d48fd3d5ac644e38fa87d956fba938aa7a09", @ANYRES16=r3, @ANYPTR64=&(0x7f0000000880)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYRES64=r3, @ANYRESOCT=r4], @ANYPTR64, @ANYRES32, @ANYRESDEC=r3, @ANYRES32]], @ANYPTR=&(0x7f0000000200)=ANY=[@ANYRES64, @ANYPTR64, @ANYPTR64, @ANYRESOCT=0x0], @ANYRES64=r1, @ANYRESDEC=r1, @ANYRESOCT, @ANYRES16=r2], @ANYPTR64=&(0x7f00000008c0)=ANY=[@ANYRESDEC=r4, @ANYPTR=&(0x7f0000000700)=ANY=[@ANYPTR64, @ANYPTR, @ANYRES32=0x0, @ANYRES16, @ANYRES32, @ANYRESHEX, @ANYRES32=r0, @ANYRES16, @ANYRESHEX, @ANYRESHEX=0x0], @ANYBLOB="e63da371b60c6b95e4bea7921af9b86ed2476220dab3f799aba2f7f79ea9", @ANYRES16, @ANYRES16, @ANYBLOB="1bd320e8a14725ca0e361de1f54db5f0640d8bb4aa5cd9281665d9562854b96cf1a6e90b869cb9c55410d8f83c676c78f14d16b21ee2b843a1f77c1081789031ab092069467e88c41d501a4284693d2c039717c638fb11c03e6f120de29c49787e574b0790a70ca32c7aa320c0af4a6977fbc493af351a44b55c303c4f41d72da90c0902f25724ad4ccdc7c8b2158c9530a69142134337", @ANYBLOB="e0da1274c1b09fde178d709a3dbfbbbea3e90abe593958667beca11ab7e40b0bf1f26c9e311a18dbd3e0043591b638a8d9747a04c2943a34808c358c60deada466b64e5d39c7231b55546fea3beb497c7a282c4a66ff21b5165767d79e5ee0e64b75b95062e0705f0853d05ca5c2c55c34fce3f0b25c5e4cce5c93595a5cbc932a0450e5caaffa1ef489f55accc180487edadf99c42a2700ea113144465ea0", @ANYPTR64], @ANYBLOB="7ada53384f77abfb5eeb3ebf1b2efe9e20741e4baa14c4ce7ac9ae4d7635d92be6ddb06745e79409bcedc396c7d1defe142a2462340634a2acd678cb125dc8ea10ba7122afa6eceb63bdaa15f6f24918fea1"], 0x72) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfff, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r5 = getpid() sched_setscheduler(r5, 0x5, &(0x7f00000001c0)) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x8080, 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(r6, 0x40106410, &(0x7f0000000100)={0xe1, &(0x7f0000000340)="82ad69702235c13010a6209038817bb14e6dc02cc73efe08fa2ff80a9761ce36f251e7d65ff0e1bd68e279a857b843ac5c7425f45f6d3121373da77021595bf5e0bff478401beb269b610ea5a833e65cc1a710ee04aa20bc9cf938499cc3d8a4fd4ae69c6d19db590dc19d1f53f097f9a467b15078c56074f2bccd464071ef3727312112bd73197879bf038934b5a183ddcedcb5111dd3aa91f50060c967b960e6d066f571dfba2911b279f65da118ce8214840816db94af3075b71331cf9cc542fb9bfdff97830f63f8cf302a0d2655b3a5089d815cd75c24aa1789e55eac1e81"}) r7 = getpid() sched_setscheduler(r7, 0x5, &(0x7f00000001c0)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)) getpgrp(0xffffffffffffffff) r8 = syz_open_pts(r0, 0x0) get_thread_area(&(0x7f0000000180)={0x0, 0x0, 0x732fe1ba2b9d15ca, 0x1, 0x1, 0x0, 0x0, 0x1}) readv(r8, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) fcntl$getown(r0, 0x9) ioctl$TCSETSW(r8, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) 10:10:05 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)=""/237, 0x37, 0xed, 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x15, 0x10, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r1, 0x0, 0x1}, 0x40) fsync(r1) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) r2 = syz_open_pts(r0, 0x0) r3 = open(&(0x7f0000000180)='./bus/file0/file0\x00', 0x5518c0, 0x11) accept4$tipc(0xffffffffffffffff, &(0x7f0000000100)=@name, &(0x7f00000001c0)=0x10, 0x800) write$P9_RREADLINK(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="3a258211f663a7724bdef6a53bfce1f875d7406272274814a3f23327edb11e2daf85534aa6f50830672ba917baf07a91df1acc99e6643d3baad0a9f3eced54c11cbf51b4f7bff473e9c200351ccaef01d642492cfc5ead68cf6a0506"], 0x5c) sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000540)={{{@in=@private, @in=@private}}, {{@in6=@private1}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xfffffffffffffe51) readv(r2, &(0x7f0000000600), 0x0) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) 10:10:05 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r1, &(0x7f0000000180)="0124b0311271e0515cab4ffc57a41ac24d6dd26d78abdd407a878a36cad184432c5e4372ad697a489b59f71a4800d41df3f21bd1fc658a5c4368e9ea15d5142296d4093b7e77e40e9224cb17a2006f64ab2285fec12f2b0f099f54bf89a062c021b089bdfab842f22948dc98f2fb87eaa8a4ddc92579170db68a4c20bcfcffe57219466b9440ce1ab952193722a612426b74507391e5019a45cce662de0fa0fc9c3131e09555c61eb49d8d9d5f59b0974c88054b51b148703a13ea3f1355e97d96d6b43115a201c06d8ef09020185505fa23d856d09ee2a74a1eec447f7714bbfa290ffe6201bf6309de7102dd7a5587991f84f3", &(0x7f00000000c0)=""/41, 0x4}, 0x20) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r2 = syz_open_pts(r0, 0x0) readv(r2, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) 10:10:05 executing program 5: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r2, &(0x7f0000000100), 0x8) listen(r2, 0x0) accept4(r2, 0x0, 0x0, 0xe000000) timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, r1+30000000}}, 0x0) tkill(r0, 0x1000000000013) 10:10:05 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) pipe2(&(0x7f0000002400)={0xffffffffffffffff}, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$BATADV_CMD_GET_GATEWAYS(r5, &(0x7f0000000140)={0x0, 0x5a, &(0x7f00000001c0)={&(0x7f0000000200)={0x24, r2, 0x711, 0x0, 0x0, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r8}]}, 0x24}}, 0x0) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000002500)={&(0x7f0000002440)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000024c0)={&(0x7f0000002480)={0x24, r2, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x44}, 0x0) r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r10, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000000)={0x0, 0x0, [0x0, 0x3ff]}) ioctl$KVM_RUN(r10, 0xae80, 0x0) 10:10:05 executing program 1: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)=""/237, 0x37, 0xed, 0x1}, 0x20) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="3a258211f663a7724bdef6a53bfce1e775d7406272274814a3f23327edb11e2daf85534aa6f5083067b0248878f07a91df1acc99e6643d3baad0a9f349be3cc11cbf51b4f7bff473e9c200351ccaefebd642492cfc5ead68cf6a0506"], 0x5c) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x19, 0x9, 0x4, 0x0, 0x400, r2, 0x3, [], 0x0, r0, 0x0, 0x1}, 0x40) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)=""/237, 0x37, 0xed, 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x15, 0x10, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r3, 0x0, 0x1}, 0x40) r4 = fcntl$dupfd(r0, 0x406, r3) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x30, r4, 0x10000000) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r5, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r6 = syz_open_pts(r5, 0x0) readv(r6, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) ioctl$TCSETSW(r6, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) 10:10:05 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0x4) [ 826.685562][T27694] debugfs: Directory '27694-11' with parent 'kvm' already present! 10:10:05 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0x60) 10:10:05 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snapshot\x00', 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sysvipc/sem\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f00004aa000/0x18000)=nil, &(0x7f0000000400)=[@text64={0x40, &(0x7f0000000380)="3626366536410f225466baf80cb8aec4df82ef66bafc0c66b8000066ef46cc2e36440f01c248b80f000100000000000f23d00f21f835300000040f23f80f07b9c40900000f3226260f01ca410f01c4b9950800000f32", 0x56}], 0x1, 0x0, &(0x7f0000000440), 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="3a258211f663a7724bdef6a53bfce1e775d7406272274814a3f23327edb11e2daf85534aa6f5083067b0248878f07a91df1acc99e6643d3baad0a9f349be3cc11cbf51b4f7bff473e9c200351ccaefebd642492cfc5ead68cf6a0506"], 0x5c) sendfile(r4, r4, &(0x7f0000000000), 0x8080fffffffe) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x20, r6, 0x709, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x110, r6, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x3}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, "5deeca14081de6750897e06ce85eb88346"}, @NL80211_ATTR_STA_WME={0x24, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x1}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0xbd}, @NL80211_STA_WME_MAX_SP={0x5}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x2}]}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xb7, 0xac, "d5cfbc7876b747aa070904de422b99b733e19234825330234d1294645d2b80fd1a850a96ff9b5519c6ab7ddc5086f3d7d0452c25baa771aeef75540be22b2e6291a088ec4d0480cb97bf74354d82de3ce4f2f3a61b8b83b4e9fec1e83064ed4396c75bc602399c47acad9032b96ead65d699aaedf76071962768cd4b5bcddd5d97652e7f7272996984de80969a5d41bb5038eac7c140655af6746b59aac0709a24aae7bfbfd0dc0e44f6f441ae529e047dff11"}]}, 0x110}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r7, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000000)={0x0, 0x0, [0x0, 0x400]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) 10:10:06 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x400001, 0xb, 0x1, '\x00\x00\x00@\x00'}) 10:10:06 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0xfff, 0x0, 0x0, "00000000000500"}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f00000000c0)="b67ddf2f62c4a6e2f2a8ae6f8bbb6c9dc8f915f9c803fc8caca4ff207fcbe5b6d519c316b3edab82b1799bdca51ea017cf43cd01aaf217d58a07291e20cb5befb9d1c59d6700fce2bed950132b091bd245c84e1163") 10:10:06 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0x5) 10:10:06 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0x2f0) 10:10:06 executing program 5: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r2, &(0x7f0000000100), 0x8) listen(r2, 0x0) accept4(r2, 0x0, 0x0, 0x3f000000) timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, r1+30000000}}, 0x0) tkill(r0, 0x1000000000013) 10:10:06 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = accept4(0xffffffffffffffff, &(0x7f0000001340)=@x25={0x9, @remote}, &(0x7f00000013c0)=0x80, 0x800) accept4$llc(r1, &(0x7f0000001400)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000001440)=0x10, 0x800) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mmap(&(0x7f0000564000/0x3000)=nil, 0x3000, 0x0, 0x1010, r2, 0xcc8a9000) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000000)={0x0, 0x0, [0x3, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd]}) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(r3, 0x80184153, &(0x7f0000001280)={0x0, &(0x7f0000001240)=[&(0x7f00000000c0)="5049fd24a76ecac21647b3eb559fea06534bbe684584c9b24b3ca236d58b99c50b23da4fd33e6a5903682b73922299577ad113fb351e5a48896fbde2", &(0x7f0000000100)="f95975e45f7002bd0b8ff6dee2e8016a6813ad1c51c0687d4281659016cb78a9bf75ac9a024f35ce90f052d3b41102f226c52ecbf247a4a96dd9b55fe987da6ed2737cb634dfc89d0b9b034f1a9055d6e431a38d544ad12f8d16c2c447925d084239ffd11b739a1b0335238ac8bb8286799b09dadf8b7f4a7a9156876b9094af4b1c06692c534b082237abad397bf6c07502fec28fcf29f51509cb3841911b9de46c8c2208ceb44daf50426a2da4a72686920cab157eaccd7eb401c773499a31", &(0x7f00000001c0)="acf417a6bf24255c3df01abf3005102ce657b7ecb4187655aa6b1ccd7c67f9f4751b1bcbf983e8e12364aad77db49f91301e", &(0x7f0000000200)="68104338b64a52463b4b5b27ac0b1b160038c01df670bebd599c45b076e49d8992c99c7d58b96d7bbaf0902b8fe616cc32045cd7", &(0x7f0000000240)="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"]}) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r4, &(0x7f00000012c0)=ANY=[@ANYBLOB="3a258211f663a7724bde05fb3bfce1e775d7406272274814a3f23327edb11ef12a3d624960a55c2494b670bdf5083067b0248878f07a91df1acc99e6643d3baad0a9f349be3cc11cbf51b4f7bff473e9c200356a050600"/99], 0x5c) sendfile(r4, r4, &(0x7f0000000000), 0x2) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x8080fffffffe) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001480)='/dev/dlm-control\x00', 0x204400, 0x0) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="3a258211f663a7724bdef6a53bfce1e775d7406272274814a3f23327edb11e2daf85534aa6f5083067b0248878f07a91df1acc99e6643d3baad0a9f349be3cc11cbf51b4f7bff473e9c200351ccaefebd642492cfc5ead68cf6a0506"], 0x5c) sendfile(r6, r6, &(0x7f0000000000), 0x8080fffffffe) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000014c0)={0xffffffffffffffff, r5, 0x0, r6}, 0x10) ioctl$KVM_RUN(r4, 0xae80, 0x0) 10:10:07 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) ioctl$KDSKBENT(r1, 0x4b47, &(0x7f0000000000)={0xd5, 0x8, 0x41f2}) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e002553e7dc888cc5b2640165ebda6e94f8504e9ad2890fc350669824a3adc007e52440a45df1f2f84995b27d015847da5f653595973826a3ee9842531effd00e951567260b7f9508bccb73769129e168b7b5030a7a54319e3c9538c8c4452ffd9774f9950367986be848f7bbf1708af8a330fd7402d66ee3546fe24cc196080cf0bb77014e058bfb45902e26d165fd0962343d49bc7d16ab409b7058c0b60b2ff7ca456ad5ff636cdbc30f737f6ed21ec904bb9e5678ebd06892ade290cbe97c4506a348aa878b688cd4c80ea23c0200000000000000ff64f9ddd0367ac42a122d62e5ea70"], &(0x7f0000000280)=""/237, 0x37, 0xed, 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x15, 0x10, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0x0, 0x1}, 0x40) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[], &(0x7f0000000640)=""/249, 0x0, 0xf9}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x15, 0x10, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r3, 0x0, 0x1}, 0x40) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)=""/237, 0x37, 0xed, 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x15, 0x10, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r4, 0x0, 0x1}, 0x40) write(0xffffffffffffffff, &(0x7f0000000540)="e34b89df2740a1a7a3c54ac43cea5bf1aae81c0e343a945b319bd0d38688e1a5655800e29de1a2c9c294d4bb7a8d06bac1ea52d74d493cb3554881ccc9e4402c260b30828c4996d22f54cb6a93c41b916c13ef4da8970ad2b6159f95aa21f55dbe7922a7cc1b16cc625cdbaef505b8173e50853f38188112495ca5533837cb", 0x7f) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)=""/237, 0x37, 0xed, 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x15, 0x10, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r6, 0x0, 0x1}, 0x40) write$binfmt_aout(r5, &(0x7f0000000180)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16=r6], @ANYRESDEC=r2], 0x1c) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r7 = syz_open_pts(r0, 0x0) readv(r7, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) ioctl$TCSETSW(r7, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) 10:10:07 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) ioctl$TCGETS2(r2, 0x802c542a, &(0x7f0000000000)) 10:10:07 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r1 = syz_open_pts(r0, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="3a258211f663a7724bdef6a53bfce1e775d7406262274814a3f23327edb11e2daf85534aa6f5083067b0248878f07a91df1acc99e6643d3baad0a9f349be3cc11cbf51b4f7bff473e9c200351ccaefebd642492cfc5ead68cf6a0506"], 0x5c) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) ioctl$TIOCSERGETLSR(r2, 0x5459, &(0x7f0000000000)) readv(r1, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) r3 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x8000, 0x42) prctl$PR_GET_DUMPABLE(0x3) ioctl$TIOCGISO7816(r3, 0x80285442, &(0x7f0000000100)) 10:10:07 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0x300) 10:10:07 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0x6) 10:10:07 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000100)={0xfff, 0x6, 0x4, 0x1000, 0x773a, {0x0, 0x2710}, {0x5, 0x1, 0x1, 0x0, 0x2, 0x40, "e0d2af96"}, 0x80, 0x2, @planes=&(0x7f00000000c0)={0x1, 0x2, @mem_offset=0x9, 0x6}, 0x7, 0x0, 0xffffffffffffffff}) getsockopt$inet_opts(r3, 0x0, 0x9, &(0x7f0000000180)=""/55, &(0x7f00000001c0)=0x37) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000000)={0x0, 0x0, [0x0, 0x400]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)=""/237, 0x37, 0xed, 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x15, 0x10, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r4, 0x0, 0x1}, 0x40) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) write$binfmt_aout(r5, &(0x7f0000000580)={{0x10b, 0x8, 0x81, 0x19b, 0xd6, 0x5, 0x3c6, 0x7}, "d90cb11b97bb24550123c702ff9092d6c6afedc69cfee9e8390a8221686dcff34e82a42ac3a9647415ff8b58db4a19318ddce7f002757b735bbbdc1b2527581e79677e1c8c8a8c1ffcc38b795b4fb80f876983130358783c710a5e35474ffc565d8e37ffbbafa86d8242bd03e7123e197418201a104b8471e3fd044a0339e71ef736153a8024cdcf204bff0b727be005bcf0b3dbc6bdad2aa4a5da2d714ca41b1d492ef00d61159033687bb5b63bed27e48f52d7bf904aa83b5493a1842d4ac218bedb9892106e57eca10636c5aa24b5a4c268ee7f12934a58ea1971202d2022f244", [[], [], [], [], [], [], [], [], [], []]}, 0xb02) 10:10:08 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc000, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="3a258211f663a7724bdef6a53bfce1e775d7406272274814a3f23327edb11e2daf85534aa6f5083067b0248878f07a91df1acc99e6643d3baad0a9b63a0af349be3cc11cbf51b4f7bff473e9c200351ccaefebd642492cfc5ead68cf6a0506"], 0x5c) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r1, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000000)={0x0, 0x0, [0x0, 0x400]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 10:10:08 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)=""/237, 0x37, 0xed, 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x15, 0x10, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0x0, 0x1}, 0x40) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r3) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e002553e7dc888cc5b2640165ebda6e94f8504e9ad2890fc350669824a3adc007e52440a45df1f2f84995b27d015847da5f653595973826a3ee9842531effd00e951567260b7f9508bccb73769129e168b7b5030a7a54319e3c9538c8c4452ffd9774f9950367986be848f7bbf1708af8a330fd7402d66ee3546fe24cc196080cf0bb77014e058bfb45902e26d165fd0962343d49bc7d16ab409b7058c0b60b2ff7ca456ad5ff636cdbc30f737f6ed21ec904bb9e5678ebd06892ade290cbe97c4506a348aa878b688cd4c80ea23c0200000000000000ff64f9ddd0367ac42a122d62e5ea70"], &(0x7f0000000280)=""/237, 0x37, 0xed, 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x15, 0x10, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r4, 0x0, 0x1}, 0x40) r5 = open$dir(&(0x7f0000001940)='./file0\x00', 0x900001, 0x0) r6 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r6) io_submit(0x0, 0x8, &(0x7f0000001a80)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x3, 0x8, r0, &(0x7f0000000180)="2853199ade1edb434015d0026c8930b0054c3c948cc0c3b01358c53428c9cac702641c21838ce97378278e6d9b95d981059e8556ec519cddd87deac736e516148629e7375e55f2a62e240b5d991943277723dc0a73f8e95608bfb9127f297bd25aab2183fee59485fca13fb9eb1d43e55526abb7e14df9d21f616b42c3ba", 0x7e, 0x4, 0x0, 0x3}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x7, 0x401, 0xffffffffffffffff, &(0x7f0000000340)="9ade43ebff05f980cbe5612c2f79065cdf94e8bdcc1223daf788e8df116e6cee8598df6735a7543d5350e0ef86553e07724a48b65d297de1567e715e30954b67e67fd88422e766573580d86b1982a3dee26892f93f95203610437f0415ee181c16d247f589e9dd983613619b219a0ef074b552372aae7e9518461ee7db5f50be7c5ea3bfd9ca9f54c1615a0603e2e622fdc61239d1f514cb9e6b14aff638cf5e53aab6b63d52078277734bef33dbb9e1832cbed8", 0xb4, 0x9c}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x3, 0x5, 0xffffffffffffffff, &(0x7f0000000640)="5b4bf6538e86b0bbb228cb47a93cc490444c30641c1f861f21b77883572770ec69a9fa7619079eb68412295750d6b1b882aea8e789aa301560363c371c3c42e94dccd0a18378e0632589e587f620b0e823c4b838bbc9376052b4df365863231e2b083ec66361a4ab46ade55ddf39bef23a4cc0d6c7cb1dbec2303afe378af9ca3df0fadffaa6fd4473e439cc9993c1fcc2fbdbc82356e6a8af2aba21744d3fbe0e0d53aa14c95e7ee9b445cb6d2465c402f3f6a3a8a51043691a77a021ab7ae0463391921454b7edfb578da2e78e410ca94344329ce9860a218f033071a212e7858a7f68b008b45a5134aeceb612ed3e302a78cb5d7db7470095508cdd10f3c6f604b4e693e32ebf7c29999b2d2da2e2ce882d2b7f036c30a673b23da742779f9dccc87ff18ed6118f7c17ddaa1eb86b8e0e85aba3b7ec989fe8344ee88463e35a99ba25ac5052f12951979157e0c2d5beaf428ba325f9311fe1b15bafc74b91d6baac7d16abfb8a30587db3d50bf817c2b2810a0121fa945f5a70a2f069bfa4ff49d67aa3dc21be2b973743df036341f822c245a06db0bc244ef7dad8bb23f07b7f99c6496b686f1e413ef3aae97088bc17f7dcdbca3dc75b85cc85e7b30ccce65ad76a0d32e08a32682a7507c498de1a0360c2863d7faa4144af57fb4c283cf99cd206340431e35af930f69debce25b5b28b31daa76772af1a43cd550ba764a2906a2f745eca9197af8e4ef2d9bd7edc9072499c40787c7ae71dccd546652404645a8dee14db5358a6161d09d1acff8adaa2a6f3f61ccb48bb52ea6503e44b012f796ffe2e8e6bdd3842c502eb97fa0862f89ef5a7fdc9c0407aea64e30f1e20b403d01253e0ac5aea285a9874578fde061ec99c9cca1c41a9dcd4db46f862c1bd299a129fd77ea788b2c179a1214252a8316024d4f281f567cf537f21ecb10dc9c346bd80d1d6450ad5edfb89a346b434b7549080ccba24fe779756cd079c90fbdd5b3e8075837540e3acbea5a64719a6319f362af0a3ba6d6761ff018fd5cf14e25a698382f38e7a1049ebbd48eb38d565f65d1aade00d151aa443dda9dd32095d9ffa38265027f5e5b1f1bacfaa58983413d484a134ab0f4fb0f96dba04b26d22879d542d74d40789055b16530f674996f676751ffce35cd788bf1bb93289094352afa7506d00f78a08fd524114767afbd7ecb6768e012dc520d5f5b18dfebd488c8224667af25adca81807c5dda74edf83d47f8387200c28d09d0f13f55ca686105873ad5a99598687f394b287714668cc52fe387766dcd79b45dc847cdb0ccedeb177c61cd38df8273442f6ab605054676bb7b2f0b7f66585b4461a7a0161b1ce008b0afc13a1b24da24fe5ca4e1105de7c3815d4dee6e3d3167e49a591ef20d47c57e91b3af1b04665634287f8925982c81a3fa6428655e9040eadc46ad19baf62c58acb214c08c48eb36566f42ae5396a380081d6f37acd65fe87b60430034145b50ed49cd5845675924cd4071230a8c41dfe6eb8835f855183534cac3a50cbfaa8587af5135375748e416ee5153a1dfa1619008743c4df14a5b7e4a4e0a96f35b6470d3d907cb7f993748d1d7006e5ccfaa0e1611027b1ee7e2bca4201dcce97afd2dc2e362931a2490f9dcffe4d7906743ef516eb44eb8ad7e0b3b6ebb567fbe06a15b0a9a1d986ddd68dded4abc385ae40875c4d785d0b4360175f642167ba4c630cdbe051fdf90cd5f881202b4e6acaa84ca5ef758e939bb2a68777ac187e54b7bc5d90a85c7537c09c4dc25045a96ed9df8209452f6852145051bcd9170399f085b017735072a85562f822262b302e7faec999e35f929550f561d28524b9dfbb76c2b9a038720b45a05d35cf396c3558c9410437845704681be9ea6d992c47118ce9c9cc4a439a6f8c211130ade6a888668f10b896521e6b737843b53556216741f56df5b69ae34f107dd8f47ef3d6eaf21d8d417625b39826fb40f7a439f96f74e8eb1582c8418d9314d9f75343b7acb53906bfe94d5b7c98a71251fc2157e23eeda0f4413ecbec572eb1c2a11d716f6b4375c977cf386ad44a26602de8ec2833e239f59064d02107653fe7f6e63ed4831903b1ee0d0d01329f073084c1182441a52c766922452223ecf044ff16b7cc1d98342bee39f9b39ca91ba101bd6f8aac6d7b3179725ffd75a0a62345ceb589a77c169c28978d2256c4aaf026b63b2a924f7ce685af775f9e0767b0025ccfb49a5ca68cb6b7bcb0d6907e0a4c90565093baf24b9ce89a8c60ae426d35b36ced53123fb3d159f15ed95dbdc192727173a9b298d4464ab784609d5e7c1f6d57a23d35703a5ab4229a5440801a393302ab87c8a2e4b60871879f382be9bcc2376827f7477166061b8e39cd64a4f2fb9c31a2c98c7b33788ec961aee2304c133b576a82b28008e6f5b09038d720f758647fadfcbf2dc20a43c68845510b2c2888cd8a4309eae40f909b6308410d7fa6b81b02ba433553381caad131ec8137f9ff0e3a2ce917014003f9d90fa2583fdf81cc7cc63a0eb2cb0f87927055df27b0fdf6e7fae5d93cbdd3765dd9c20dde9131c26588cd1496356d85a476f0f85bf15e87d082c50a7a21621ee716b37f2f57138b122b050201ee7758fe99e1c4b4ba6935d39d0022b3effceadd1c875a70cea4f19e6b86902579ae5357fc84e8f1c1f21f3d4395f867dc9aade532238236ff29cd65f7d5a8ac65fac2f88a10b9876e8bcbec8c00263bba718d708aa6c51503d3c451f1c492b50075a8b04bfe128b9a8302c1b28223cd51e30241a56317876d7a7c4dd777681aec36052d692c5614ce43579c3a3d365275a26ac1c93df6442697fcb676598cb3269d24b03c00945136526e5409792c83aeb5b552e483e8a28edb3efbdb202b55cd2c5a278ad14475b14fed0ff290b1deea35e3d2b8d182c713d831d920f0763e0ddedadb9cc1b8f31c65b5db6839bb22a3369f24aca774ba7316a02dfcf92f2cbf43860bd75ab296e62331244757f33bfba21402193be381244416a24fce799413ec728b833fcc2826584b6db507ae27b29c041801edab9f2cec856fb9291ba7de3b39b44de325de05b3c42a0b838c606916d15377955c49ddbf1f86ded79d0ed646d13bb3f7db7981f127d790a496eba65f4f066d0c9184fc0e2db55987c96d85d544a0a0218285de10b8b1bd11d21d3d868a45ad8465891779cb203e1ef33fc4fd42a2edb2fab87c8ebff4fde8bf92cfb5d6f214e1f28fee68f437e184aca4127816633415cffbdee645c1ad5b28114b7dbd93ffabc99cda30fce9cf2052bc21b0be2923c4feab4fe06374e20bd485cfa842e31da9405eac38686f1f9e8df43e4e08d1112dde6dba8251cc1714fa6f30b91c95ad2f9a9217b3a0f85e5509be4b83348557f962937f1b2c1088280a376789494b4d911d5e5ae9bdd43ac99ee39438407b08fa489cfeb4bc0835c3a33c0afd224f68cc137df291c5ef2f0e857bd7c2146b343b4917b31393bc87008b8c0bc024eec30d68aa1d738f925d21ca0f99f9b64b8a56fe52771c4c704b51eea50832bb76c3225881afac76af8766be3818007f1556660bd415e2655721655aaeb0516ecc48b3c8fd8c40e0b1b98f9dc008776522f0266d8d13f129a7ba0452fd8814babbc64b9c3d765a341d381676154850aa27bf55bf97e032cc37270573c75e8b7187661a0925434c96d9cd6ebefb22f3597fe4b1fb77b01a8d71e84b213ba9f4a0ed54f9d06d49f87d2ced426ac79c8be0a766f2a54be204c292881033f3f42f55ed56dac0756cb0f44c01fe6617154265e50c06843ac40fc5260ef6eb411a345ded227db4bbb29ee2b90164f063809008faaa1b62f9a024b50c46234a811decc42ea618bd6e5bcab6e28a00949e787d4ca72d8f368f0269e0449a0c487cac9e12b83835f62b3ffd8b069a66f9cde042e6085ae9015d3573d6813313c6284fe953f6aab2b0e8943469442fbe7330f4818c21c4242c4aefb31771564f7a4320577dd32f82ab6a9b40a6832e8372d7d3ccb45add49d17a4e2e0bf12f0b33b49bd29657ac25dfd610ab530b561a4537c5a12e5f3a60d385b3034194c18d018eb0f9e56d61d641e9dfa5526ef695f033b3c057d40224f4ae538eb92b881554b5455a1ee0522f8f807bdeed92b3dacc55a3b35879b155861056cf25d758d58435c05826828f4d6430732d7fe4c59beb2a8f23056e1a01ea6e3e046bf9cdfcd4211c9d25b62944ae7aac401c136250e2950452711c2708ab3d8987db3e0a9438fc28c2c99a384bee9178c03d1b0e38efddb5ed191ab281d1f4dffb05c0ca3da303ca03914fd46d66f4eefb63068fb88e9eea64548832f4c964fc28f0f045ba4a7ff119704f2f2cce49bd7f467492205f143cd6a307292dd52386e7b1f1d51c287a0a8f43787c35ca8126c4de9258ed434cb41be7ecbeb7faf4b976037470b0c9f588336d7712025e60c593b4fb245e4e0905161cd694ce6354da094d0c72489278486d7c1e209e626a0888abf241ff2a9c06ef82de3612c76fb24816149826a22ae1153abe93bb7ac95deda8f34517d1a72919d70a338bc4154b009f672fe6d6941e30105a68eb6e3367bb30583b37c470acfd448ca8cf8f907e6fd3a5239643d6c45940c8f7e87e17ee7dd4dc3c71ac4d3e8ea8d5a0bd86b3a03de74b11fa790a1212da3c97673d8493c1b40724baa12393d3fd3b6a37660618a408aa29da39ac8aae92fba0f062252eb20a7bf1d959c2fc3ec09edf66bbd1b39ec4e080da9d0bb24e8fdc3d2058142012ed4b58ceea09bcf0979d617e93fff5fd4511a61e1592350811929f6fa08f2923bb3232e4e1be771555319c3e4d4d13dc050b4b9fa16e6182e94b594038ff94808d7b90e4206645fdc85a67f219b0991479dafe75b4c66e9c472e0416e8d81b06536c2fdd5d67cb1074751f66402ecd9e816a8146a582a10f8738e07574a4bb9e6e95fc201a8a557604127e5c9ac2c221e6b96e8fed09cbcbdd96bc374f0a6f6c028680f0ece6891dd2f21d7df8d4e614542cb2c0a76ca56510372204eef9e01f22ade7fc25092d1781f53e82d57b88febb8203f8dcbdc0b989278018b1134735b86afa0c703efffccbba044c2debad0af0150f29d68284c5d8f9e9cef73491f1b9d21870b852f9cc69415d0f15381026d3b789fbd1b40c4e3f6c0ac87282fb5804d5ca35bd00f68a90448669d39cb71a1400ec7c63d3d7e765845e6a880bcd5951972baab3de45048a13782e63bfe746726298b85f2af5897544903173407477a7d2c841c168e2568906e5fe0ba24f1e7ac31df9d3e69b398886787dc605c2819aa5c9d050aa98bde61b0644c94fae08abe0de8f9962f8d29425b1e1c7a34a6e1327b9992bf3f94da914a884a7025285819aad231acefcc4db66ad984755c18f079a448368d1857d6f44c3e71a39f97f875294be9143393d72e9e0acb53c36b956f6bac86989ba054632f60fa830831bdadb013de2359740c4c2a282631c6982e62d87bc7715102c9b79b770819872793dcbcd927bca65d30901a99b93a8fac52df8722a1f65880a8aaaa471cf8a2603032eb004e248af89853134e88f024ec19505da453f6011988545eb1a3b3ca9913ad271c8b6662dd5e1c733d14384d1d491ca3082c11c1b8d27d7c22431693dba894df1ded4f670f3e92975868d34c50a50ada7ffb74afcf06b24c5c5cbdae2c78ce5446a3eb12c81083f5c3f445ecf3b833bc5fef6df5fc02cfb17ca9161b7c448119c6d609a90417cad", 0x1000, 0x1, 0x0, 0x2}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x3a58, 0xffffffffffffffff, &(0x7f0000000480)="2a0bcf678744a6b9b7306c3978560e7d1857569873318dce5633a4b91c3ca9bce82f09427a2cddc1b17020fe8a4917da7464a2b16e139b771d165dda08ba52d49b8326096de7e9e8b51c4ebb5aa542cfda45b81beceffa5f6af7d2f1caf79cc6b28a5a706358c0bc19677e6d13d9b1f7fab87806a7261d8aeafb843f326484b25aa44c794051ebecc8b90e1fca7373c4d2120cb4379afb1b69a14b9ae703b7db5a1070df2750f2efb29232fd4e6900104e72fc3001acd262b478c62f0673bdba88d990", 0xc3, 0x9, 0x0, 0x2}, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x3, 0x766, 0xffffffffffffffff, &(0x7f0000001640)="a0a40f9b753a9afcb62bfd2dba72d9c54c45a61c263031909727f994d847c61106f3484017edca1a3cc9c6028364d8c9842b5e2303e7457ba6e43593b4e05673b9833ecc30ff01eb29408e67cfff2a55263908c23378b2c9fb877b0c2ce383262c499d90e9e95a3ab79b3363b3a8231c047a44ec1f18ac054ca8d37b321f74524f2ef47fe6aeaa237addb7b019b5724521796a33e36e859833ba4eeb3140dfbac510b125c2991ca5f6dac4837e1f5ce952115d35a95973a08cf5cd6a66a846273465e033e71780eb2254f1ba60a1e61edd88a580ef7e210cc5fca1bb20f4", 0xde, 0x3, 0x0, 0x2, r1}, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x5, 0x1, r2, &(0x7f0000001780)="2d865ae57cabd8d068650af21963c90c8ec1c69b0f49781f9b4333e28e640166e94d38a0a1d3ee378bb5c8017bf1c8da45e452a8e1b54c16ddafdded1170033b25ed743475fa7a00130d75405934e21c5948e39f5a7aed2021575a488db531496f2c3219e306da46f310516198ee8012be6c89cfe01cff0ed605727876f61adef4d65e10ffdd73970167c6c642807c931a0b13601e1442b9b096be8e4954c3f511878f111f8261f8c018fb33d5d76a", 0xaf, 0x5, 0x0, 0x2, r3}, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x6, 0x8, r4, &(0x7f0000001880)="476f894d8753874b6620b0a7c674bda30c36d3046b0d2469acd119149b38e3cf031ba5d4c77a1e24579e5aa3f44f418d8f51e2", 0x33, 0x400, 0x0, 0x2}, &(0x7f0000001a40)={0x0, 0x0, 0x0, 0x5, 0x4f3, r5, &(0x7f0000001980)="4c17759b52f2841a4fa22ed041f4692b2017be7c2f799c21a6b84666457bdb8beac12b94d2813bd057242ee205a58296aa65aa19276295a97a354206d5e29e0bf333d0aee96d15523472f565dd7b70f04402d1fa8c7e943f91d719ba6cacb832a73b00f7c1d9f389b1153ccd4a44bee540d510d38d57f90c77907b4f3a2f09cda456177c4107cff5fcee28352e4b5a5e168aaa67f0fc09fe23a2955c", 0x9c, 0x80000000, 0x0, 0x3, r6}]) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r7 = syz_open_pts(r0, 0x0) readv(r7, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) r8 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x22201, 0x0) setsockopt$inet_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f00000000c0)='tls\x00', 0x4) ioctl$TCSETSW(r7, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) 10:10:08 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r2 = syz_open_pts(r0, 0x0) readv(r2, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) 10:10:08 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0x3fc) 10:10:08 executing program 5: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r2, &(0x7f0000000100), 0x8) listen(r2, 0x0) accept4(r2, 0x0, 0x0, 0x40000000) timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, r1+30000000}}, 0x0) tkill(r0, 0x1000000000013) 10:10:08 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0x8) 10:10:08 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x2710, 0x1, 0x4000, 0x2000, &(0x7f000001e000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000380)="fe4b4761cfdc05e66e244730bfcbafbbabfc72a994619e717b93312fd8e809323a9103e49a6d93512bc2ad1523e5fe2e2384650ceaf5ecd17fb3aa0e31dead61b616d8b21ea660eb677b", 0x4a) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="3a258211f663a7724bdef6a53bfce1e775d7406272274814a3f23327edb11e2daf85534aa6f5083067b0248878f07a91df1acc99e6643d3baad0a9f349be3cc11cbf51b4f7bff473e9c200351ccaefebd642492cfc5ead68cf6a0506"], 0x5c) sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) openat$bsg(0xffffffffffffff9c, &(0x7f0000000340)='/dev/bsg\x00', 0x404d00, 0x0) timerfd_create(0x1, 0x80000) sendmsg$AUDIT_MAKE_EQUIV(r3, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, 0x3f7, 0x200, 0x70bd2d, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000000)={0x0, 0x0, [0x0, 0x400, 0x0, 0x80000001, 0x0, 0x200000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r4) r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r5) write$P9_RRENAME(0xffffffffffffffff, &(0x7f0000000440)={0x7, 0x15, 0xfffe}, 0x5) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x70, 0x1405, 0x800, 0x70bd25, 0x25dfdbfe, "", [{{0x8, 0x1, 0x2}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8, 0x3, 0x2}}, {{0x8, 0x1, 0x2}, {0x8}}, {{0x8}, {0x8, 0x3, 0x2}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x1}}, {{0x8}, {0x8}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x4800) 10:10:09 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2800, 0x0) ioctl$GIO_FONT(r1, 0x4b60, &(0x7f0000000180)=""/221) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r2 = syz_open_pts(r0, 0x0) readv(r2, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) 10:10:09 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0x500) 10:10:09 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x7ff) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xa) r2 = syz_open_pts(r0, 0x0) readv(r2, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) 10:10:09 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0x9) 10:10:09 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x200000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl(r3, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") r4 = inotify_init() inotify_add_watch(r4, &(0x7f0000000080)='.\x00', 0x40000be) r5 = inotify_init() r6 = inotify_add_watch(r5, &(0x7f0000000000)='.\x00', 0x80000000) inotify_rm_watch(r4, r6) r7 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r7) r8 = inotify_add_watch(r7, &(0x7f00000000c0)='./file0\x00', 0x11000601) inotify_rm_watch(0xffffffffffffffff, r8) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000000)={0x0, 0x0, [0x0, 0x400]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:10:10 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000280), 0x4) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="3a258211f663a7724bdef6a53bfce1e775d7406272274814a3f23327edb11e2daf85534aa6f5083067b0248878f07a91df1acc99e6643d3baad0a9f349be3cc11cbf51b4f7bff473e9c200351ccaefebd642492cfc5ead68cf6a0506"], 0x5c) sendfile(r4, r4, &(0x7f0000000000), 0x8080fffffffe) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000240)=@assoc_value={0x0}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000005c0)={r5, @in={{0x2, 0x0, @rand_addr=0x400}}, [0x4, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8, 0x951, 0x0, 0x0, 0x5, 0x3, 0x4]}, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000100)={r5, @in={{0x2, 0x0, @private=0xa010100}}, 0x0, 0x1}, &(0x7f0000000040)=0x90) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000140)={r5, 0x80}, 0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000180)={r5, @in={{0x2, 0x4e21, @rand_addr=0x64010101}}}, &(0x7f0000000000)=0x84) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) 10:10:10 executing program 5: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r2, &(0x7f0000000100), 0x8) listen(r2, 0x0) accept4(r2, 0x0, 0x0, 0x40000800) timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, r1+30000000}}, 0x0) tkill(r0, 0x1000000000013) 10:10:10 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000000)={0x0, 0x0, [0x0, 0x400]}) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="3a258211f663a7724bdef6a53bfce1e775d7406272274814a3f23327edb11e2daf85534aa6f5083067b0248878f07a91df1acc99e6643d3baad0a9f349be3cc11cbf51b4f7bff473e9c200351ccaefebd642492cfc5ead68cf6a0506"], 0x5c) sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) ioctl$PPPIOCSNPMODE(r3, 0x4008744b, &(0x7f00000000c0)={0x802b}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:10:10 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0x600) 10:10:10 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0xa) 10:10:10 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4842c1, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x20, '\x00\x00\x00\x00\x00\x00\b\x00'}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) r2 = open(&(0x7f0000000140)='./bus/file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="3a258211f663a7724bde00000080e1e775d7406261274814a3f23327edb11e2daf85534aa6f5083067b0248878f07a91df1acc99e6643d3baad0a9f349be3cc11cbf51b4f7bff473e9c200351ccaefebd642492cfc5cad68cf6a0506046e8d1fdf1c0a68b44e1adcdd3c41e2e8330db55a2d153947accb405ed29ea624a4a50fc1e9e0fe352d727c1b469f113e9f9c2fe2b7d1396d735f5fe0561d2f7d107691a2aab2c713e6f5e66752439010243a4804c78f25e7213ccd3469d784f0af0c21994f1be2fc29bd8eface414028641d8e"], 0x5c) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) ioctl$TIOCL_PASTESEL(r2, 0x541c, &(0x7f00000000c0)) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) 10:10:10 executing program 5: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r2, &(0x7f0000000100), 0x8) listen(r2, 0x0) accept4(r2, 0x0, 0x0, 0xfeffffff) timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, r1+30000000}}, 0x0) tkill(r0, 0x1000000000013) 10:10:10 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x10001, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x28, 0x140a, 0x300, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x24000005) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x741, 0x0, 0x0, 0xb, 0xff, '\x00\x00\x00@\x00'}) 10:10:10 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)=""/237, 0x37, 0xed, 0x1}, 0x20) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="3a258211f663a7724bdef6a53bfce1e775d7406272274814a3f23327edb11e2daf85534aa6f5083067b0248878f07a91df1acc99e6643d3baad0a9f349be3cc11cbf51b4f7bff473e9c200351ccaefebd642492cfc5ead68cf6a0506"], 0x5c) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000010", @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200080000001028e6c467144d2fa833"], 0x5}}, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e002553e7dc888cc5b2640165ebda6e94f8504e9ad2890fc350669824a3adc007e52440a45df1f2f84995b27d015847da5f653595973826a3ee9842531effd00e951567260b7f9508bccb73769129e168b7b5030a7a54319e3c9538c8c4452ffd9774f9950367986be848f7bbf1708af8a330fd7402d66ee3546fe24cc196080cf0bb77014e058bfb45902e26d165fd0962343d49bc7d16ab409b7058c0b60b2ff7ca456ad5ff636cdbc30f737f6ed21ec904bb9e5678ebd06892ade290cbe97c4506a348aa878b688cd4c80ea23c0200000000000000ff64f9ddd0367ac42a122d62e5ea70"], &(0x7f0000000280)=""/237, 0x37, 0xed, 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x15, 0x10, 0x4, 0x0, 0x0, r2, 0x0, [], r4, r5, 0x0, 0x1}, 0x40) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)=""/237, 0x37, 0xed, 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x15, 0x10, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r6, 0x0, 0x1}, 0x40) r7 = dup2(r1, r6) sendto$inet(r7, &(0x7f0000000180)="f5eea4c0c19b5a880530e60ef4badc383cdb6736be2976adda76dea94348a933f4692c8d4c669c657947abda5a9d8160ada2caf80e8b2e382bea8e9b08fa08480dd19f1ecd3cda031bc0862023e36ae2426adffc99a3f2f69f33220c96329b85bffe8ffcc35f6c225f8ee8731a43f6bff3734703ae146b32708be59c6c0c1c2113db02f14a93bb654a", 0x89, 0x44000, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) r8 = syz_open_pts(r0, 0x0) readv(r8, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) ioctl$TCSETSW(r8, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) 10:10:11 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000000)={0x0, 0x0, [0x0, 0x400]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket(0x2, 0xa, 0x80000001) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_GET_NODES(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r4, 0x400, 0x70bd26, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4000) 10:10:11 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0x900) 10:10:11 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000000)={0x0, 0x0, [0x0, 0x400]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) 10:10:11 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0xb) 10:10:11 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="3a258211f663a7724bdef6a53bfce1e775d7406272274814a3f23327edb11e2daf85534aa6f5083067b0248878f07a91df1acc99e6643d3baad0a9f349be3cc11cbf51b4f72f966664c200351ccaefebd642492cfc5ead68cf6a0506"], 0x5c) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f00000000c0)='wg1\x00', 0x4) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e002553e7dc888cc5b2640165ebda6e94f8504e9ad2890fc350669824a3adc007e52440a45df1f2f84995b27d015847da5f653595973826a3ee9842531effd00e951567260b7f9508bccb73769129e168b7b5030a7a54319e3c9538c8c4452ffd9774f9950367986be848f7bbf1708af8a330fd7402d66ee3546fe24cc196080cf0bb77014e058bfb45902e26d165fd0962343d49bc7d16ab409b7058c0b60b2ff7ca456ad5ff636cdbc30f737f6ed21ec904bb9e5678ebd06892ade290cbe97c4506a348aa878b688cd4c80ea23c0200000000000000ff64f9ddd0367ac42a122d62e5ea70"], &(0x7f0000000280)=""/237, 0x37, 0xed, 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x15, 0x10, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0x0, 0x1}, 0x40) dup3(r2, r1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r3 = syz_open_pts(r0, 0x0) readv(r3, &(0x7f0000000000)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) ioctl$TCSETSW(r3, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x100000, 0xb, 0x0, '\x00\x00\x00@\x00'}) 10:10:11 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x65ab40, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000000)={0x0, 0x0, [0x0, 0x7, 0x200000000000, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:10:11 executing program 5: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r2, &(0x7f0000000100), 0x8) listen(r2, 0x0) accept4(r2, 0x0, 0x0, 0xfffffffe) timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, r1+30000000}}, 0x0) tkill(r0, 0x1000000000013) 10:10:11 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0x10000, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000000)={0x0, 0x0, [0x0, 0x400]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:10:12 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000000)={0x0, 0x0, [0x0, 0x400]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r3) ioctl$KVM_ASSIGN_SET_INTX_MASK(r3, 0x4040aea4, &(0x7f00000000c0)={0x9, 0xa3, 0xeb, 0x0, 0x1}) 10:10:12 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0xa00) 10:10:12 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="3a258211f663a7724bdef6a53bfce1e775d7406272274814a3f23327edb11e2daf85534aa6f5083067b0248878f07a91df1acc99e6643d3baad0a9f349be3cc11cbf51b4f7bff473e9c200351ccaefebd642492cfc5ead68cf6a0506"], 0x5c) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f00000000c0)=0x7, 0x4) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x11, r3, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000000)={0x0, 0x0, [0x0, 0x400]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 10:10:12 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0xc) 10:10:12 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0x60e3e8fa) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) 10:10:13 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0xa11) 10:10:13 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000100)="911e6adf08262756a223b84391a860af824c1da1b8334ce7a2e9c1dd8cd26704c8712ed4edf4a85cee2dc2f0e29cbbbcda37ba7397b5b54204726904c3d331cabf82ac83a1c6c49618d6e40f467c0214e3dd7aca9c8a489710684831d0c34dc3ce9e8383514b9edf7aaab79b917b6fa880cc5d3c01a428d13e3fe8f157997c9f17c3019c3ee1f1f23e7b8b5a10ee47f4da0394aabf9afc375f") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r3, 0x0) r4 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r4) ioctl$RTC_PLL_SET(r4, 0x40207012, &(0x7f00000000c0)={0x20, 0xa826, 0x7ff, 0xffff, 0x32, 0x3, 0x4}) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000000)={0x0, 0x0, [0x0, 0x400]}) fcntl$getown(r0, 0x9) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="3a258211f663a7724bdef6a53bfce1e775d7406272274814a3f23327edb11e2daf85534aa6f5083067b0248878f07a91df1acc99e6643d3baad0a9f349be3cc11cbf51b4f7bff473e9c200351ccaef39adaa232cfc5ead68cf6a0506"], 0x5c) sendfile(r5, r5, &(0x7f0000000000), 0x8080fffffffe) ioctl$SNDRV_PCM_IOCTL_REWIND(r5, 0x40084146, &(0x7f00000001c0)=0x7) 10:10:13 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0xe) 10:10:13 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='timers\x00') write$P9_RRENAME(r0, &(0x7f00000000c0)={0x7, 0x15, 0x1}, 0x7) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r2 = syz_open_pts(r1, 0x0) readv(r2, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000040)={0x0, 0xf20, 0x0, 0xe535, 0x15, '\x00\x00\x00@\x00'}) 10:10:13 executing program 5: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r2, &(0x7f0000000100), 0x8) listen(r2, 0x0) accept4(r2, 0x0, 0x0, 0x1000000000000) timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, r1+30000000}}, 0x0) tkill(r0, 0x1000000000013) 10:10:13 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x4000, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) 10:10:14 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0xb00) 10:10:14 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0xf) 10:10:14 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x80002, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) ioctl$TUNSETOWNER(r1, 0x400454cc, r3) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r5, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000000)={0x0, 0x0, [0x0, 0x400]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 10:10:14 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000010", @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200080000001028e6c467144d2fa833"], 0x5}}, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, 0x0, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000010", @ANYRES32, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200080000001028e6c467144d2fa833"], 0x5}}, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, 0x0, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000010", @ANYRES32=r8, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200080000001028e6c467144d2fa833"], 0x5}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0xdc, 0x0, 0xd02, 0x70bd28, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}, @ETHTOOL_A_LINKMODES_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKMODES_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x8000}, 0xc040) fchdir(r3) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000000)={0xc0000, 0x0, [0x8, 0x67, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000001]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:10:14 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000099000/0x4000)=nil, 0x4000, 0x7ffff7, 0x10010, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000000)={0x0, 0x0, [0x0, 0x400]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100)={0xffffffffffffffff}, 0x3b, 0x6}}, 0x20) setxattr$security_evm(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='security.evm\x00', &(0x7f00000003c0)=@sha1={0x1, "4f5ca51b01e2392455973cb70a79b8b7f5c13eaf"}, 0x15, 0x2) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000180)={0x9, 0x108, 0xfa00, {r3, 0x1, "7ef789", "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"}}, 0x110) r4 = open(&(0x7f0000000200)='./file0\x00', 0x200, 0x0) fchdir(r4) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty, 0x1000}, {0xa, 0x0, 0x0, @dev}, r6}}, 0x48) write$RDMA_USER_CM_CMD_BIND_IP(r4, &(0x7f00000000c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x9, @mcast2, 0x8}, r6}}, 0x30) 10:10:15 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0xc00) 10:10:15 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r0, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f00000004c0)={0x0, 0x0, 0xe, 0x13, 0x95, &(0x7f00000000c0)="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"}) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000000)={0x0, 0x0, [0xffffffffffffffff, 0x400]}) ioctl$KVM_RUN(r0, 0xae80, 0x0) 10:10:15 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e002553e7dc888cc5b2640165ebda6e94f8504e9ad2890fc350669824a3adc007e52440a45df1f2f84995b27d015847da5f653595973826a3ee9842531effd00e951567260b7f9508bccb73769129e168b7b5030a7a54319e3c9538c8c4452ffd9774f9950367986be848f7bbf1708af8a330fd7402d66ee3546fe24cc196080cf0bb77014e058bfb45902e26d165fd0962343d49bc7d16ab409b7058c0b60b2ff7ca456ad5ff636cdbc30f737f6ed21ec904bb9e5678ebd06892ade290cbe97c4506a348aa878b688cd4c80ea23c0200000000000000ff64f9ddd0367ac42a122d62e5ea70"], &(0x7f0000000280)=""/237, 0x37, 0xed, 0x1}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x15, 0x10, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r1, 0x0, 0x1}, 0x40) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYRES32=r2], &(0x7f0000000180)=""/240, 0x46, 0xf0, 0x1}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x15, 0x10, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r3, 0x0, 0x1}, 0x40) write$binfmt_aout(r3, &(0x7f0000000000)=ANY=[@ANYRES32=r4, @ANYRES32, @ANYRESOCT=0x0], 0x1f) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r5 = syz_open_pts(r0, 0x0) readv(r5, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) ioctl$TCSETSW(r5, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) 10:10:15 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0x10) 10:10:15 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000000)={0x0, 0x0, [0x0, 0x400]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) mq_timedsend(r3, &(0x7f0000000240)="cfe6efecee5b4a3fe01c3266a83d41f781ea2b4f8ef548304bb02c02ec648b19fc1df44b7ca30a7d191f1826433048d7fc36bed317a30a109098b4ae71ecb4ea58eb2d0c6423e72ca18c16805818e2f70edda2a69079b4c4f8f22b48977d9007fdd84899cc421921beab338c9b254a761e25e172f9ede54e1252714233b0886db895bcbdec6415", 0x87, 0x3f, &(0x7f0000000140)={0x0, 0x1c9c380}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)=""/237, 0x37, 0xed, 0x1}, 0x20) fchdir(r3) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e002553e7dc888cc5b2640165ebda6e94f8504e9ad2890fc350669824a3adc007e52440a45df1f2f84995b27d015847da5f653595973826a3ee9842531effd00e951567260b7f9508bccb73769129e168b7b5030a7a54319e3c9538c8c4452ffd9774f9950367986be848f7bbf1708af8a330fd7402d66ee3546fe24cc196080cf0bb77014e058bfb45902e26d165fd0962343d49bc7d16ab409b7058c0b60b2ff7ca456ad5ff636cdbc30f737f6ed21ec904bb9e5678ebd06892ade290cbe97c4506a348aa878b688cd4c80ea23c0200000000000000ff64f9ddd0367ac42a122d62e5ea70"], &(0x7f0000000280)=""/237, 0x37, 0xed, 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x15, 0x10, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r5, 0x0, 0x1}, 0x40) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)=""/237, 0x37, 0xed, 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x15, 0x10, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r6, 0x0, 0x1}, 0x40) write$P9_RREADLINK(r4, &(0x7f0000000780)=ANY=[@ANYRESHEX=r5, @ANYPTR64=&(0x7f0000000540)=ANY=[@ANYRESDEC=0x0, @ANYRESDEC, @ANYBLOB="a68beebf632360c9dbfcd5f1b5e7b83360534c59fff46d6d0b8852a50030b5096bdee8f4d0aca2301e311944190b1d0eb2454e84a4b47e0f0e3e1e4b5a42b47620769d230843bc447bfd38927843673b434c49cb6b55dacd056df78c1c25d3eec5182292010b0321d7ff96f3e9a5895255760b965f92f333e88782335c16498dcf45e28df2296c58a5c18522b00c6247fe442a25474662d7f37352af3174bca677b98073573cf6ac79fffa94c23e1ba55f94ba7194f12db380ce", @ANYRES32=r2], @ANYRES64=r4, @ANYPTR64=&(0x7f0000000700)=ANY=[@ANYRESDEC=0x0, @ANYRES64, @ANYPTR64, @ANYRES64], @ANYPTR64, @ANYPTR=&(0x7f0000000640)=ANY=[@ANYRESDEC=0x0, @ANYRESHEX=0x0, @ANYBLOB="9ecc57fa5d64e180298c90fa5079837663fbc3b471a10d326a21b33b894b2e8a4cce958f7fd45838c88aafdb4da372f4da66c8af40c460fb4386846b3e6cd7e9003d62b9ffca1db71537fbff10340ac211a6a6d75480a518c792eb501d49895874bbd32a27e7d25be046fcb0819842678cb6b6cb8bb6c42686e225d41b4471f4e3", @ANYRES32=r3, @ANYRES32=r6], @ANYRESHEX=0x0], 0x4c) sendfile(r4, r4, &(0x7f0000000000), 0x8080fffffffe) setsockopt$inet_sctp6_SCTP_NODELAY(r4, 0x84, 0x3, &(0x7f0000000100)=0x10000, 0x4) ioctl$KDADDIO(r3, 0x4b34, 0x8) ioctl$BLKGETSIZE64(r3, 0x80081272, &(0x7f00000000c0)) 10:10:16 executing program 5: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r2, &(0x7f0000000100), 0x8) listen(r2, 0x0) accept4(r2, 0x0, 0x0, 0x100000000000000) timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, r1+30000000}}, 0x0) tkill(r0, 0x1000000000013) 10:10:16 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0xe00) 10:10:16 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0x11) 10:10:16 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000000)={0x0, 0x0, [0x0, 0x400]}) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x3) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x20, r5, 0x709, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, 0x0, 0x0) r7 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r7) sendmsg$NL80211_CMD_REQ_SET_REG(r7, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x24400}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="040027bd7000fddbdf251b00000007002100626200000c00228008000300000000000400cc00ca63d82e9cbef6f097c8525488af8d13fe03d8028571606da18ccd991988a588ea6b4ef5f7"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x80c0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000010", @ANYRES32=r8, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200080000001028e6c467144d2fa833"], 0x5}}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r5, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x80000001, 0x4}}, @NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1ba9, 0x2}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x8881) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:10:16 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x8000, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r2, 0xc01064ac, &(0x7f0000000180)={0x2, 0x4d, &(0x7f00000000c0)=""/77}) 10:10:17 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f00000000c0)={0x2, 'veth0_vlan\x00', 0x3}, 0x18) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="3a258211f663a7724bdef6a53bfce1e775d7406272274814a3f23327edb11e2daf85534aa6f5083067b0248878f07a91df1acc99e6643d3baad0a9f349be3cc11cbf51b4f7bff473e9c200351ccaefebd642492cfc5ead68cf6a0506"], 0x5c) sendfile(r4, r4, &(0x7f0000000000), 0x8080fffffffe) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x38, r6, 0x501, 0x0, 0x0, {{}, {}, {0x1c, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'ip6_vti0\x00'}}}}}, 0x38}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, 0x0, 0x1, 0x301, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_LABELS={0x24, 0x16, 0x1, 0x0, [0x4, 0x5, 0x800, 0x3, 0xc9, 0x3, 0x3, 0x43]}, @CTA_ID={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x84}, 0x400c880) sendmsg$TIPC_CMD_SHOW_PORTS(r4, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r6, 0x0, 0x70bd2d, 0x25dfdbfc, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000c0}, 0x0) fchdir(r3) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000000)={0x0, 0x0, [0x0, 0x400]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 838.459026][T28062] tipc: Started in network mode [ 838.467453][T28062] tipc: Own node identity , cluster identity 4711 [ 838.484492][T28062] tipc: Failed to obtain node identity [ 838.502245][T28062] tipc: Enabling of bearer rejected, failed to enable media 10:10:17 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0x12) 10:10:17 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0xf00) 10:10:18 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000004) fchdir(r2) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)=""/237, 0x37, 0xed, 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x15, 0x10, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r3, 0x0, 0x1}, 0x40) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)=""/237, 0x37, 0xed, 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x15, 0x10, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r4, 0x0, 0x1}, 0x40) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)=""/237, 0x37, 0xed, 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x15, 0x10, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r5, 0x0, 0x1}, 0x40) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)=""/237, 0x37, 0xed, 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x15, 0x10, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r6, 0x0, 0x1}, 0x40) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e002553e7dc888cc5b2640165ebda6e94f8504e9ad2890fc350669824a3adc007e52440a45df1f2f84995b27d015847da5f653595973826a3ee9842531effd00e951567260b7f9508bccb73769129e168b7b5030a7a54319e3c9538c8c4452ffd9774f9950367986be848f7bbf1708af8a330fd7402d66ee3546fe24cc196080cf0bb77014e058bfb45902e26d165fd0962343d49bc7d16ab409b7058c0b60b2ff7ca456ad5ff636cdbc30f737f6ed21ec904bb9e5678ebd06892ade290cbe97c4506a348aa878b688cd4c80ea23c0200000000000000ff64f9ddd0367ac42a122d62e5ea70"], &(0x7f0000000280)=""/237, 0x37, 0xed, 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x15, 0x10, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r7, 0x0, 0x1}, 0x40) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYRESHEX=r3, @ANYRES64=r4, @ANYPTR=&(0x7f0000000540)=ANY=[@ANYRES16=r4, @ANYPTR64=&(0x7f0000000180)=ANY=[], @ANYRES16=r1, @ANYBLOB="da38fa8a", @ANYBLOB="fbdbcb828e7feeb245c45d00d376f07be75c3ef1ab84334d06954b5a33bbb3676d3beacc1fde8d47de59293c0ba4e6d1c1571c8793a5f9fd5f78fe", @ANYRES16=r5, @ANYRES64=r6, @ANYRESDEC=r6]], 0x3}, 0x1, 0x0, 0x0, 0x4}, 0xc080) [ 839.255915][T28062] tipc: Started in network mode [ 839.278695][T28062] tipc: Own node identity , cluster identity 4711 [ 839.285138][T28062] tipc: Failed to obtain node identity [ 839.342052][T28062] tipc: Enabling of bearer rejected, failed to enable media 10:10:18 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)=""/237, 0x37, 0xed, 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x15, 0x10, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r3, 0x0, 0x1}, 0x40) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x10010, r3, 0xd9720000) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000000)={0x0, 0x0, [0x0, 0x400]}) prctl$PR_SVE_GET_VL(0x33, 0x15fe0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:10:18 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000000)={0x0, 0x0, [0x0, 0x400]}) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r3) ioctl$DRM_IOCTL_GET_STATS(r3, 0x80f86406, &(0x7f00000000c0)=""/224) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:10:18 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0x13) 10:10:18 executing program 5: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r2, &(0x7f0000000100), 0x8) listen(r2, 0x0) accept4(r2, 0x0, 0x0, 0x300000000000000) timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, r1+30000000}}, 0x0) tkill(r0, 0x1000000000013) 10:10:18 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0xfb4) 10:10:19 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x20, 0x0, 0x1, 0x0, 0x0, {0x2}, [@ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}}, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000010", @ANYRES32=r2, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200080000001028e6c467144d2fa833"], 0x5}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'wg1\x00', r2}) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000010", @ANYRES32=r5, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200080000001028e6c467144d2fa833"], 0x5}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0xa8, 0x0, 0x4, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @ETHTOOL_A_LINKMODES_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r7, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000000)={0x0, 0x0, [0x0, 0x400]}) r8 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r8) ioctl$DRM_IOCTL_INFO_BUFS(r8, 0xc0106418, &(0x7f00000000c0)={0xff, 0x809, 0x400, 0x4000006, 0x2, 0x20080cc}) ioctl$KVM_RUN(r7, 0xae80, 0x0) 10:10:19 executing program 2: r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000280), 0x4) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000005c0)={r2, @in={{0x2, 0x0, @rand_addr=0x400}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x951, 0x0, 0x0, 0x5, 0x3, 0x4]}, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000100)={r2, @in={{0x2, 0x0, @remote}}}, &(0x7f0000000040)=0x90) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000140)={r2, 0x80}, 0x8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000180)={r2, 0xa4, "d6ce75631dd5b6676f4fc5d3d3fe30e62f904665426dc8d809c8d276b9b5df61b222349cb630957e0d3cea058dd86d6f0c22fd7934a36bbc67f8ac4e780935293e08ef1c6c01015f23ef654d85733d5b986c84e0c1cad442a771499240573c377f01a605457f35b005c4639b2e19a9c9d7a7368f6459adb9d01715a7d8d3503db7dbcfc3cc2b04f036e5562d5a23c4b882c95bf1543328bb5ada5b4527dc6405a3f7835e"}, &(0x7f0000000000)=0xac) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x4, 0x0, 0xf, '\x00\x00\x00\x00\x00\x00\b\x00'}) r4 = syz_open_pts(r3, 0x0) readv(r4, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) ioctl$KDSKBLED(r3, 0x4b65, 0x0) ioctl$TCSETSW(r4, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) 10:10:19 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r3, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], 0x5c) sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f0000001380)={0x3}) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000005c0)={r4, @in={{0x2, 0x0, @rand_addr=0x400}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x951, 0x0, 0x0, 0x5, 0x3, 0x4]}, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000100)={r4, @in={{0x2, 0x0, @remote}}}, &(0x7f0000000040)=0x90) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000140)={r4, 0x80}, 0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000001500)={r4, 0x7}, &(0x7f0000001540)=0x8) prctl$PR_GET_NO_NEW_PRIVS(0x27) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000000)={0x0, 0x0, [0x0, 0x400]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) ioctl$SIOCAX25GETINFOOLD(r5, 0x89e9, &(0x7f0000001340)) fchdir(r5) sendmsg$inet(r5, &(0x7f0000001300)={&(0x7f00000000c0)={0x2, 0x4e22, @broadcast}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000100)="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", 0x1000}, {&(0x7f0000001100)="5145e6f8229378e91e1e255c5d0ef4b03592032a9ccdc630a4db643806d15f0372cce3b981bd79e9ca7d02bac80abba768c10fe1781335439407b221a6d4d03a82845d0ca642b6784b76dd9c3aaa4680ce94cd63d1c3b9d886", 0x59}, {&(0x7f0000001180)="c97bdd91229ca42044b79ce3acde2189eb9ec27e27bb283d61c62e0e509fba7e57d83c6ee0468582a8c2228d4eecf45f9556ee3749dad87f2ffd96fa50ef6b29018b9f4898381ae1b7ede4f764a30a2a1a037a0a19fbdbd98950c737ee6614e090730bb95b8665e4f6477098e520d15b12e36981a017da5eb40956097acf5cc7924b5bd362aecf24271c3c331c52dd7e3377a6375047b52465b3d126ce0ca369c9f485c72776e79380ebf9099265dbaede70bee27f87c8141a69ec9601ebf698c5f5ab67d957c53805e6342b2fe3d422", 0xd0}], 0x3, &(0x7f00000012c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x46ff}}], 0x18}, 0x10) 10:10:19 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r1 = syz_open_pts(r0, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)=""/237, 0x37, 0xed, 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x15, 0x10, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0x0, 0x1}, 0x40) readv(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/146, 0x92}, {&(0x7f0000000540)=""/181, 0xb5}, {&(0x7f0000000640)=""/247, 0xf7}, {&(0x7f0000000000)=""/6, 0x6}], 0x4) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) 10:10:19 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0x14) 10:10:19 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0x1100) 10:10:20 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="3a258211f663a7724bdef6a53bfce1e775d7406272274814a3f23327edb11e2daf85534aa6f5083067b0248878f07a91df1acc99e6643d3baad0a9f349be3cc11cbf51b4f7bff473e9c200351ccaefebd642492cfc5ead68cf6a0506"], 0x5c) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) write$P9_RWSTAT(r2, &(0x7f00000000c0)={0x7, 0x7f, 0x2}, 0x7) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="3a258211f663a7724bdef6a53bfce1e775d7406272274814a3f23327edb11e2daf85534aa6f5083067b0248878f07a91df1acc99e6643d3baad0a9f349be3cc11cbf51b4f7bff473e9c200351ccaefebd642492cfc5ead68cf6a0506"], 0x5c) sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @dev}, r5}}, 0x48) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r3, &(0x7f0000000100)={0xb, 0x10, 0xfa00, {&(0x7f0000000340), r5, 0x101}}, 0x18) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x9, 0x0, '\x00\x00\x00@\x00'}) 10:10:20 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) ioctl$TIOCL_GETSHIFTSTATE(0xffffffffffffffff, 0x541c, &(0x7f0000000000)={0x6, 0x2}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f00000000c0)={0x3, 0xc, 0x4, 0x400, 0x4, {0x0, 0x2710}, {0x5, 0x1, 0xb0, 0x0, 0x3, 0x20, "18529e11"}, 0x0, 0x3, @offset=0x5, 0x4, 0x0, 0xffffffffffffffff}) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="3a258211f663a7724bdef6a53bfce1e775d7406272274814a3f23327edb11e2daf85534aa6f5083067b0248878f07a91df1acc99e6643d3baad0a9f349be3cc11cbf51b4f7bff473e9c200351ccaefebd642492cfc5ead68cf6a0506"], 0x5c) sendfile(r4, r4, &(0x7f0000000000), 0x8080fffffffe) ioctl$DRM_IOCTL_AGP_ALLOC(r4, 0xc0206434, &(0x7f0000000180)={0x7596b44, 0x0, 0x10001, 0x80000000}) ioctl$DRM_IOCTL_SG_FREE(r3, 0x40106439, &(0x7f00000001c0)={0x5, r5}) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) 10:10:20 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) memfd_create(&(0x7f00000000c0)='/dev/kvm\x00', 0x2) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000000)={0x0, 0x0, [0x0, 0x400]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:10:20 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0x30) 10:10:20 executing program 5: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r2, &(0x7f0000000100), 0x8) listen(r2, 0x0) accept4(r2, 0x0, 0x0, 0x400000000000000) timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, r1+30000000}}, 0x0) tkill(r0, 0x1000000000013) 10:10:20 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff6, 0x11, r2, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="3a258211f663a7724bdef6a53bfce1e775d7406272274814a3f23327edb1162daf85534aa6f5083067b0248878e17a91df1acc99e6643d3baad0a9f349be3cc11cbf51b4f7bff473e9c200351cca0506"], 0x5c) sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) write$UHID_DESTROY(r3, &(0x7f0000000100), 0x4) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000000)={0x40001, 0x0, [0x0, 0x4400, 0x0, 0x0, 0x800, 0x0, 0x0, 0x1]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f00000000c0)=0x2, 0x4) 10:10:20 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0x110a) 10:10:21 executing program 2: r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000100)={&(0x7f0000000000)="a6931b1a574b5b6b942c2e62bc5107e0c56e7c1ea7b927f0a9212a82ad7ce61f7c52f06b608f676884", &(0x7f00000000c0)=""/47, &(0x7f0000000180)="dfbdf072cb15791c97c28a975fafd5999e819fbb3182c6aebf6f1b86210a6642e81353179cfd25ef7f3321edcb4fe8da389809a8d78ffc1640a746fabfce829f729ad2c99aa950a0a4f1c4c31dde0d787ab0c52f9b3cba0b97714c78e5cfac1ac2cc63285ff0a3478de697771f5d5d61bea073aea91ea28223a2b626ca1cfd2b8a84be147a6c53b9d914bdaebe59f19b8416e27b0fdec6d3268fec5de8f1ea4497a307791c43326deb84dee6662825eb8b977b4cd13fa991dd04b1e265abd02e9aa75faf894086", &(0x7f0000000340)="d678478781de4163855b3718ac0f4f5f2d2633705547ab3afe0664f2034a2b3f1a197e5ba20af66a4668a83984675b6b069b562dd7d708de88b23858999ad020674831bb7b42fd7ba810f507d30db7fa575cf88118f295c40718e39c40c7fde2072d48b87639b50c43690d6d7eb74abc8d", 0x7, r0}, 0x38) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vcs\x00', 0x300, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x20, r4, 0x709, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r4, 0x65f58201d13573b9, 0x70bd2d, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x240000d5) r5 = syz_open_pts(r1, 0x0) readv(r5, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) ioctl$TCSETSW(r5, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) 10:10:21 executing program 1: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="3a258211f663a7724bdef6a53bfce1e775d7406272274814a3f23327edb11e2daf85534aa6f5083067b0248878f07a91df1acc99e6643d3baad0a9f349be3cc11cbf51b4f7bff473e9c200351ccaefebd642492cfc5ead68cf6a0506"], 0x5c) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) bind$tipc(r0, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r2 = syz_open_pts(r1, 0x0) readv(r2, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) 10:10:21 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r2, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r3}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r3}, 0xc) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) 10:10:21 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0x60) 10:10:21 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0x1200) 10:10:21 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x20010, r2, 0x3bd45000) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000000)={0x0, 0x0, [0x0, 0x400]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:10:22 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r3) getsockopt$inet_int(r3, 0x0, 0xb, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000000)={0x0, 0x0, [0x0, 0x400]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:10:22 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000000)={0x0, 0x0, [0x0, 0x400]}) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="3a258211f663a7724bdef6a53bfce1e775d7406272274814a3f23327edb11e2daf85534aa6f5083067b0248878f07a91df1acc99e6643d3baad0a9f349be3cc11cbf51b4f7bff473e9c200351ccaefebd642492cfc5ead68cf6a0506"], 0x5c) sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) r4 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r4) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@remote, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000200)={@mcast1, 0x2a, r5}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:10:22 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000c20a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r1 = syz_open_pts(r0, 0x0) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="3a258211f663a7724bdef6a53bfce1e775d7406272274814a3f23327edb11e2daf85534aa6f5083067b0248878f07a91df1acc99e6643d3baad0a9f349be3cc11cbf51b4f7bff473e9c200351ccaefebd642492cfc5ead68cf6a0506"], 0x5c) sendfile(r5, r5, &(0x7f0000000000), 0x8080fffffffe) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000180)={0x1, 0xa, 0x4, 0xe000, 0x0, {r3, r4/1000+10000}, {0x3, 0x8, 0x81, 0x6, 0x97, 0x7, "16a8daad"}, 0x401, 0x3, @planes=&(0x7f00000000c0)={0x33a, 0x1f, @fd=r5, 0x1}, 0x2, 0x0, 0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r6, 0x8982, &(0x7f0000000100)) readv(r1, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) 10:10:22 executing program 5: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r2, &(0x7f0000000100), 0x8) listen(r2, 0x0) accept4(r2, 0x0, 0x0, 0xe00000000000000) timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, r1+30000000}}, 0x0) tkill(r0, 0x1000000000013) 10:10:22 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TIOCGISO7816(r0, 0x80285442, &(0x7f00000000c0)) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) open$dir(&(0x7f0000000000)='./file0\x00', 0x428000, 0x26) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) 10:10:22 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0x2f0) 10:10:22 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0x1300) 10:10:23 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x2) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r3, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000000)={0x0, 0x0, [0x0, 0x400]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 10:10:23 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000000)={0x110002, 0x0, [0x0, 0x5, 0x0, 0x0, 0x0, 0x4]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 844.270167][ T27] audit: type=1804 audit(1586945423.261:116): pid=28252 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir398347309/syzkaller.T3xsA2/851/file0" dev="sda1" ino=17194 res=1 10:10:23 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000111a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r3) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r4, 0x29, 0x1, &(0x7f0000000280), 0x4) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000005c0)={r5, @in={{0x2, 0x0, @rand_addr=0x400}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x951, 0x0, 0x0, 0x5, 0x3, 0x4]}, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000100)={r5, @in={{0x2, 0x0, @remote}}}, &(0x7f0000000040)=0x90) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000140)={r5, 0x80}, 0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={r5, 0x8, 0x7, 0xc3, 0xffffd8eb, 0x5}, &(0x7f00000000c0)=0x14) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000340)={r6, @in6={{0xa, 0x4e20, 0x1, @mcast2, 0x3}}, 0x1, 0x6, 0x2, 0x2, 0x8, 0x9, 0xf8}, 0x9c) fchdir(r2) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) 10:10:23 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0x300) 10:10:23 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f00000000c0)={0x2, 0xd8, "0cf0e724b2487e882f5343ce28499b0c64d4ee24dd63936acc0196e0bfa9f4967e24794e908a2ae576441a19aaf6bbd05f83ef941ba8ecfbfad271d8318fa093b709e5c8345e21d6cc98ddd00be7acf9dca2305ab2d9fc605095679d2f88d1c807f32895ad66820bad8bdb138c215a7084a98e116508c9176b577ea3760c773cc2070612042fc978915b02aa0da8b037d71cd93e08455b692adff515701011e4ed6a8634da1e75c0687efbeb5c9c6e811e84bbd04deeb6e221b8be9b64536ad0a2e02252dac9d66f22bab3c05ed0abf98ea6c35f2d59a312"}) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000200)={0x980000, 0x20, 0x3c6, r0, 0x0, &(0x7f00000001c0)={0x990968, 0x1ff, [], @ptr=0x400}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="e8000000", @ANYRES16=r4, @ANYBLOB="af86000000000000000003000000400001000d0001007564703a73797a393f281eb5e8521ba2157311041a2332000000002c000400140001000200ffffe000000200000000000000001400020002952f00ac1414bb0000000000000000480007000c00040003000000000000000c000400e50400000000000008000200000000000c000300001000000000000008000200ffffffff080001000900000008000100000200003c000700080001000200000008000200ffffff7f08000200070000000800020006000000080001000004000008000100010000000800020001000000100004000900010073797a3100000000"], 0xe8}}, 0x0) sendmsg$TIPC_NL_NET_SET(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, r4, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r6, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000000)={0x0, 0x0, [0x0, 0x400]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 10:10:23 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="3a258211f663a7724bdef6a53bfce14ce775d7406272274814a3f23327edb11e2daf85534aa6f5083067b0248878f07a91df1acc99e6643d3baad0a9f349be3cc11cbf51b4f7bff473e9c200351ccaefebd642492cfc5ead68cf6a0506"], 0x5c) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000280), 0x4) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000005c0)={r3, @in={{0x2, 0x0, @rand_addr=0x400}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x951, 0x0, 0x0, 0x5, 0x3, 0x4]}, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000100)={r3, @in={{0x2, 0x0, @remote}}}, &(0x7f0000000040)=0x90) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000140)={r3, 0x7d}, 0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={r3, 0x80}, 0x8) syz_open_pts(r0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)=""/237, 0x37, 0xed, 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x15, 0x10, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r4, 0x0, 0x1}, 0x40) r5 = socket$caif_stream(0x25, 0x1, 0x2) readv(r5, &(0x7f0000001840)=[{&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f00000018c0)=""/142, 0x8e}, {&(0x7f00000000c0)=""/10, 0xa}, {&(0x7f0000001780)=""/170, 0xffffffffffffffb7}, {&(0x7f00000016c0)=""/104, 0x68}, {&(0x7f0000000200)=""/26, 0x1a}], 0x6) 10:10:23 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r2, 0x8983, &(0x7f0000000000)) [ 844.634838][T28275] netlink: 148 bytes leftover after parsing attributes in process `syz-executor.0'. [ 844.658583][T28275] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 844.668017][T28275] tipc: Enabling of bearer rejected, illegal name 10:10:23 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0x1400) [ 844.811310][T28282] netlink: 148 bytes leftover after parsing attributes in process `syz-executor.0'. [ 844.856418][T28282] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 844.900050][T28282] tipc: Enabling of bearer rejected, illegal name 10:10:24 executing program 5: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r2, &(0x7f0000000100), 0x8) listen(r2, 0x0) accept4(r2, 0x0, 0x0, 0x3f00000000000000) timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, r1+30000000}}, 0x0) tkill(r0, 0x1000000000013) 10:10:24 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000000)={0x0, 0x0, [0x0, 0x400]}) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r3 = openat$mice(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/input/mice\x00', 0x0) r4 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x24, &(0x7f0000000100)=0x1, 0x4) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, 0x0, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="10", @ANYRES32=r6, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200080000001028e6c467144d2fa833"], 0x5}}, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000001a00)={@rand_addr, 0x0}, &(0x7f0000001a40)=0x14) r8 = socket(0x10, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010", @ANYRES32, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYBLOB="c0957783f2deaa6b595a708d0bc24dda71050f54b43fb90637ba2ed38c0fc17165842b0e9d5977a6ecf733ab64f404e1427b995ce7b4c20fa4813c340c4bbe5681a4fa25c8ecb217d9b71a1b78e1a4241962b00a6c2ce61def60d4965c3e93040f0fa6e4566c6e2d5947e90bb24c90ce4bb4ca9b", @ANYBLOB="0000b200e28e00001028e6c467144d2fa833"], 0x5}}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, &(0x7f0000002300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000022c0)={&(0x7f0000000bc0)={0x860, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {}, [{{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x248, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x5c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x2c, 0x4, [{0xc1dd, 0x8, 0x40, 0xde9}, {0x0, 0x1, 0x0, 0x400}, {0x9, 0xf3, 0x8, 0x6}, {0x2, 0x1, 0x5, 0xfff}, {0x0, 0x4, 0x7, 0x100}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x800}}, {0x8}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0xfffffe00}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x80000001}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0x290, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x8001}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x54, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x24, 0x4, [{0x6f, 0xba, 0x81, 0xf0000000}, {0x2, 0x1d, 0xc8, 0x9}, {0x85, 0x7f, 0x4, 0x7}, {0x9001, 0x0, 0x4, 0x1000}]}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x400}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0xfe000000}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0xac, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x401}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x9}}}]}}, {{0x8, 0x1, r6}, {0x11c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x5c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x2c, 0x4, [{0x3ff, 0x1, 0x2}, {0x2, 0x7f, 0x0, 0x1}, {0x68c, 0xff, 0x7, 0x8}, {0x8001, 0x5, 0x0, 0x1f}, {0x80, 0x1, 0x6, 0xaee}]}}}]}}]}, 0x860}, 0x1, 0x0, 0x0, 0x20000010}, 0x40000014) 10:10:24 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000000)={0x2, 0x0, [0x0, 0x400, 0x0, 0x1]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x8000, 0x0) write$P9_RMKNOD(r3, &(0x7f0000000100)={0x14, 0x13, 0x2, {0x40, 0x3, 0x5}}, 0x14) 10:10:24 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0x3fc) 10:10:24 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x810, r2, 0x2e107000) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000000)={0xb0001, 0x0, [0x0, 0x2, 0x200, 0xff, 0x0, 0x361, 0x1, 0x4]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:10:24 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0x3000) 10:10:24 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000004b01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000040)={0x210, 0xfffffff8, 0x0, 0x3, 0x18}) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) iopl(0x5) fchdir(r2) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000280), 0x4) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000005c0)={r4, @in={{0x2, 0x0, @rand_addr=0x400}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x951, 0x0, 0x0, 0x5, 0x3, 0x4]}, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000100)={r4, @in={{0x2, 0x0, @remote}}}, &(0x7f0000000040)=0x90) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000140)={r4, 0x80}, 0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000000)={r4, 0x8}, 0x8) 10:10:24 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r1, 0xc06855c8, &(0x7f0000000180)={0x3, 0x55d, {0x54, 0x6e6a, 0x1, {0x200, 0x248}, {0x7, 0x1}, @period={0x58, 0xee75, 0x400, 0x8000, 0xffff, {0x3, 0x8, 0x100, 0x9}, 0x5, &(0x7f00000000c0)=[0x7ff, 0x8, 0x14e9, 0x3, 0x101]}}, {0x57, 0x600, 0x3, {0x9, 0x7}, {0x6, 0x7}, @cond=[{0x5, 0x1006, 0x4, 0xff, 0x7, 0x1}, {0x90d7, 0x7ff, 0x25b, 0x3ff, 0x0, 0x1f}]}}) r2 = syz_open_pts(r0, 0x0) readv(r2, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) 10:10:24 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r1 = syz_open_pts(r0, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="3a258211f663a7724bdef6a53bfce1e775d7406272274814a3f23327edb11e2daf85534aa6f5083067b0248878f07a91df1acc99e6643d3baad0a9f349be3cc11cbf51b4f7bff473e9c200351ccaefebd642492cfc5ead68cf6a0506"], 0x5c) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0xa4, r3, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x88b0}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7e}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffff787}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffffffff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x840) readv(r1, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) 10:10:24 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0xa300, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) mmap(&(0x7f0000169000/0x3000)=nil, 0x3000, 0x7fffff, 0x110, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000000)={0x0, 0x0, [0x0, 0x400]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:10:25 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000000)={0x0, 0x0, [0x0, 0x400]}) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="3a258211f663a7724bdef6a53bfce1e775d7406272274814a3f23327edb11e2daf85534aa6f5083067b0248878f07a91df1acc99e6643d3baad0a9f349be3cc11cbf51b4f7bff473e9c200351ccaefebd642492cfc5ead68cf6a0506"], 0x5c) sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) r4 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r4) ioctl$TIOCGSID(r4, 0x5429, &(0x7f00000000c0)=0x0) ioctl$sock_FIOSETOWN(r3, 0x8901, &(0x7f0000000100)=r5) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:10:25 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0x500) 10:10:25 executing program 5: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r2, &(0x7f0000000100), 0x8) listen(r2, 0x0) accept4(r2, 0x0, 0x0, 0x4000000000000000) timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, r1+30000000}}, 0x0) tkill(r0, 0x1000000000013) 10:10:25 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0x3f00) 10:10:25 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="3a258211f663a7724bdef6a53bfce1e775d7406272274814a3f23327edb11e2daf85534aa6f5083067b0248878f07a91df1acc99e6643d3baad0a9f349be3cc11cbf51b4f7bff473e9c200351ccaefebd642492cfc5ead68cf6a0506"], 0x5c) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) getsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, &(0x7f0000000000), &(0x7f00000000c0)=0x4) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r2 = syz_open_pts(r0, 0x0) readv(r2, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) 10:10:25 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="3a258211f663a7724bdef6a53bfce1e775d7406272274814a3f23327edb11e2daf85534aa6f5083067b0248878f07a91df1acc99e6643d3baad0a9f349be3cc11cbf51b4f7bff473e9c200351ccaefebd642492cfc5ead68cf6a0506"], 0x5c) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x80000, 0x0, 0x12}) r2 = syz_open_pts(r0, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x8000, 0x0) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffe7c, 0xd, 0x2, {{0x8, 0x3, 0x4}, 0x7fffffff}}, 0x18) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r3) ioctl$VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000200)={0xf7e4, 0x1, 0x4, 0x40000000, 0x9, {}, {0x3, 0x2, 0x3, 0x3, 0x6, 0x4, "4b6e98ae"}, 0xffffffc0, 0x1, @userptr, 0x2, 0x0, r1}) ioctl$PIO_SCRNMAP(r4, 0x4b41, &(0x7f0000000340)="c76cc2cab653121b35f52d1fc2b7382a57eed3d146ce7558325c5b070ed096ced6743832f640d62cbd7670aebf4f177b2d313f6ea430dbf103e282e74e297a85372501de65646119edeb217c9ac32f3f5ce1d8393aa6296318a9f221280875d2ce5581b3d95a530e1b8cd62540497959a64be6a2bf3cc261d117e049fe6753ad291e89d7ed87a5b39101e6add905682f7f9227d24441bc10e909511d2ced753a381e3f94fa5bf37a78558781b75245704c836ee587e6421e946f434fbf5ba9b44245e981d1328852c964ee0956b416c241922169cf4bf12e0080d09619b7d442e149410d9e44fc2ebe") readv(r2, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000100)={0x2, 0x1, 0x7f, 0x0, 0x6, "806fdd505b1bd737"}) 10:10:26 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="3a258211f663a7724bdef6a53bfce1e775d7406272274814a3f23327edb11e2daf85534aa6f5083067b0248878f07a91df1acc99e6643d3baad0a9f349be3cc11cbf51b4f7bff473e9c200351ccaefebd642492cfc5ead68cf6a0506"], 0x5c) sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) ioctl$TCSETXF(r3, 0x5434, &(0x7f00000000c0)={0x8b, 0x100, [0x2, 0x400, 0x0, 0x0, 0x4], 0x3ff}) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000000)={0x0, 0x0, [0x0, 0x400]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:10:26 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0x600) 10:10:26 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0x4000) 10:10:26 executing program 2: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="3a258211f663a7724bdef6a53bfce1e775d7406272274814a3f23327edb11e2daf85534aa6f5083067b0248878f07a91df1acc99e6643d3baad0a9f349be3cc11cbf51b4f7bff473e9c200351ccaefebd642492cfc5ead68cf6a0506"], 0x5c) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) ioctl$INOTIFY_IOC_SETNEXTWD(r0, 0x40044900, 0x1f) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xffffff78) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000140)={0xff, 0x0, 0xbb, 0x7, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r3 = syz_open_pts(r1, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x200040, 0x0) r5 = open(&(0x7f0000000100)='./file0\x00', 0x141042, 0x19e) write$P9_RREADLINK(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="3a258211f663a7724bdef6a53bfce1e775d7406272274814a3f23327edb11e2daf85534aa6f5083067f0248878f033b37d80cc99e6643d3baad0a9f349be3cc11cbf51b4f7bff473e9c221351ccaefebd642492cfc5ead68cf6a0506"], 0x5c) sendfile(r5, r5, &(0x7f0000000000), 0x8080fffffffe) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r1, &(0x7f00000000c0)) fchdir(r4) ioctl$TUNGETDEVNETNS(r4, 0x54e3, 0x0) readv(r3, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) ioctl$TCSETSW(r3, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) 10:10:26 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="3a258211f663a7724bdef6a53bfce1e775d7406272274814a3f23327edb11e2daf85534aa6f5083067b0248878f07a91df1acc99e6643d3baad0a9f349be3cc11cbf51b4f7bff473e9c200351ccaefebd642492cfc5ead68cf6a0506"], 0x5c) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000100)={0x9f0000, 0x1, 0xffffff00, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x9909cc, 0x7f, [], @p_u16=&(0x7f0000000000)=0x2}}) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0xfffffffe, 0x0, 0xb, 0x3, "005f8800"}) 10:10:27 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0x8cc) 10:10:27 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="e8000000", @ANYRES16=r5, @ANYBLOB="af86000000000000000003000000400001000d0001007564703a73797a393f281eb5e8521ba2157311041a2332000000002c000400140001000200ffffe000000200000000000000001400020002952f00ac1414bb0000000000000000480007000c00040003000000000000000c000400e50400000000000008000200000000000c000300001000000000000008000200ffffffff080001000900000008000100000200003c000700080001000200000008000200ffffff7f08000200070000000800020006000000080001000004000008000100010000000800020001000000100004000900010073797a3100000000"], 0xe8}}, 0x0) sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x190, r5, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x2c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc77}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffe}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xa7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_LINK={0xd4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfb6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1cb0}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x401}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x8800}, 0xa0) r6 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x127) fchdir(r6) ioctl$KVM_SET_GUEST_DEBUG(r6, 0x4048ae9b, &(0x7f0000000000)={0xe0000, 0x0, [0x0, 0x400, 0x0, 0xff, 0x5, 0x0, 0xfffffffffffffffc]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 848.500972][T28417] netlink: 148 bytes leftover after parsing attributes in process `syz-executor.0'. [ 848.515730][T28417] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 848.526201][T28417] tipc: Enabling of bearer rejected, illegal name [ 848.545296][T28420] netlink: 148 bytes leftover after parsing attributes in process `syz-executor.0'. [ 848.554821][T28420] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 848.564503][T28420] tipc: Enabling of bearer rejected, illegal name 10:10:27 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f00000000c0)=""/203, &(0x7f00000001c0)=0xcb) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r3, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000000)={0x0, 0x0, [0x0, 0x400]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 10:10:27 executing program 5: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r2, &(0x7f0000000100), 0x8) listen(r2, 0x0) accept4(r2, 0x0, 0x0, 0x4000080000000000) timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, r1+30000000}}, 0x0) tkill(r0, 0x1000000000013) 10:10:27 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0x5865) [ 848.936047][ T27] audit: type=1804 audit(1586945427.921:117): pid=28429 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir985079563/syzkaller.QZuW8z/764/file0" dev="sda1" ino=17272 res=1 [ 849.104521][ T27] audit: type=1804 audit(1586945427.941:118): pid=28429 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir985079563/syzkaller.QZuW8z/764/file0" dev="sda1" ino=17272 res=1 10:10:28 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = syz_open_pts(r1, 0x2) readv(r2, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) 10:10:28 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0x900) 10:10:28 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000201, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) socket$isdn_base(0x22, 0x3, 0x0) r1 = syz_open_pts(r0, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/btrfs-control\x00', 0x100, 0x0) readv(r1, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4800000010", @ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES16=r1, @ANYRESOCT, @ANYPTR, @ANYRES64, @ANYBLOB="d547405366a2f8683381960b72039f5859352e45a8e3e4e3ae6ee77efa110a608b4ee648b1286eb264247b0d5e6490f849f86107802baa16cf9e2d5e84c4a778fc8558c309fe9960726883963432f7b63872cf5b0e174063e3f6904574aa119f5e70596157cbe9fcaae8c91afea5bcb728fbf615714a23277d553fbfe1c515a1e536821316c237c03dda12f25db849ea92f97a86200a4ee0a74aed9d4ee9ffbcbce740f356810f0837d729a119be6de5a521cc048948a89209f4a30f44eeb2e8dba8752ab1269aaea14392d21e1141ebcb523bfbef45886198807adbb5fffeb55a8b0bc63c4b524985d4b2583ae6d54911fcc0fb34b49ac8369be1f66d3114f9c9ec587af0ccb2ab7c1e316d8bff5f10eb7b21518308dbdac93b59b04085dc2d327ea83f440f83a064529b4843eb689d598216449a1e8c76abb65f2c934ed6580cc1eef59d1c1d1122c34cb620d8f6db414864fc3562ee4eb41c2d278a8c5aec4e4df7881387df769a21418493eb734ea7f02ec3b023d52e528de87177d104c447c6c7832f03558022b13b791fcd1184d852dbae4bb8171751333e5e33b4943e144a976eacb6880dba6144952ba1136827a150b7b045a9378f25358936687bd7a5445d21e3f20b678a005d673d7a865e816252064a30f62b05fcce44c98620cd6a085118acae9f50b23af8bdcd6c59cf24903a5965ff1af0f24c66f59ed7ade41cb37ee36722405b72a8ee11db003426697c0e11738ba59cb441d80b16bdf50105d19106c833809ec7915a30c314e5cf66b5c455fe71441878216f68d49245fd589711dbae8dbb61db425ec8ddb3014f62ce809818feeb31fcffcba28b1da1cb23819bca9f2eca21d04b28a02b29e4b3227d929f6cf76b8de582a03b959e4bfe9c8e38dfec1ed53a53cd9b47d508c94dbca8cd48aeda19251e500fbf3dc6460d0a3015e4ace5198a80d5c973902a6bccb0e3a6a585ec196c034ba7b9403c4071d88002a78299425320583f342ff220a4d29b59cf6b061988bcc9bf3e2d521c6b95047568c982f1340618ef2bfd1271b3c7e48e7123fa8e469a9fd846a7cd2916b6658490da740851c81bed7fb30bbd5205e8b7072c0fb5495015b732ff8de80fcedfa7bf380e3947df4614f61c58a9c15340cc804b5194181f426c0f2fc1c9405a727b00a050bacaec2b79a94faadb57f91992458f4956f2fdbd38ccfaf2adcb3bbb487065caa9684f2e6d57a2eb2e8c4644d21ed37a08945d2afb692507561632cbbdd6afef97d0e080cbe327fd3ba581b2d2d3fd799581f0b3f92f95ab61d60faa9e6b64cbeb3ce86a062f9834a188566f2c4b469a34cea7adfc53ffea17ba19a76cb92d6463b48e45cf3aa4b38ae8610643b2cb57c894e109c9b70533b7676a9a1f89d2c1863b39f742de0c3ed6f4be70b2c121e0994367457622e0915085fe5f533a27ac0749a8df3503e8ba3550b7071c34d684ac9776fda523e72fe3639662099afa37773f49ad7df4ad86ec6a7221e6f2f02f393f43ae8add7d3d2513c9a559792feaa1465317ff3a7c8991eed194cce000bb41ad1653201781fc8ef80a78fcf967d0a4c89aebce14cc2e1916474accbcfc0b665daa2739841597ec335ed74a9b525319d025b75abe7d0bd6bdccf620bb47f3080ff14fe9a0766dfb943c928d8061b9db70c34e7bd7e397fbc3a48f43b76950fce73bb40d914d39ffc40af13acc7911bc0519cf4d277de39d3937ac47d8b099f248372e8065d9f0b227769ae52fd1a0911c627c509fbfcf80731038e2cd63ece6a58c49b780a4534ce125d4545fa73a6a191830b8064d4b5e0169a405d82741180b954f98763f292c0dd0baaf9ece19d7ccf0b631d41608d3b6fff03174a013bf330909ecaa46c9f2816fe88aaf74e263405732d987efeef1ecf857167d73be313ce62b5ea708a59f47535525a755080d09c803d2d4233f4f93e0c17f28091c19f4de511ecea1b53ee7f5ef0a05ca365346a3be1e56dcbe5840742b5896ece76c381292c68a80474c312f47f6c10b02bdf43b6af9394a52c4f5adcfd71dcab7abd82dfc1b75ca9062367fed00a98113b94c16a80caf7d7cc64609dd100d4681a51a2f1438732fd3fad004f483f6c74769d2c90312a863149533da496ee3a9662182cf5cace54b20a58f1eaea447994e28cf1092794fb446dba250521f9bfadb0811c61584b7f1640678a8d55e323d8af6a750658a3c2aca118d13146d7af697aeb8d5ba6d3608cd6f3e511e790336274ff92a4ce7f8e81dbdb0f222a9ab8f0d26ca85cd55b9194074ef4c4c923e297b07d91b1c2f46623df6564f708afc2b01a083066e27ba0307a2e5f6ea5c7a60805c63a25b46cb548e20b009dbe1fa34047596f42e9c9c9402d222e5cea487818e2dc04f12cd421311351dc5fc28f67c4cafd4485b827a35d94acf6daac93fed6e8046c4fc10e8a4e3a6aa804ca9fcb4e87063744f2c214669b0241e547862615f52cbd18ad3b67e0691c6c625afcbeacf575a21b2a388155ea9d2c567c9cf9d84d7e5d04b348f7d46e44a1f62650d98963663841d24c789b40be5948a1e98adb7e121e1143d019b8f9e3d25f0ad0ecb2fd32ed5d0ca632ddcf28828f9443e1b88b31135265a2c0589417f7733ecdcef1dcddb42e1cc8c4c35fee384468251e5fa273efb3dd4a2057841de945124b98042869d28b4926f6f8e4ac611fe0f591502cd903a38433ec3d7bda2d6285ffc8d1fb4656d8e068c9446108f98938a55dd9744ccc9ceb68b8a85efcb79fb4c1845b2ca14ecaeb9d5e8b2598973eba37dff895678d71b30a5ba846d2a91edd2d35c07635e97e2cab29de2cb9c998a517332072f132292a608df9fa9245076ea6549cd98645d981553feca37c10dbde6bbcda7c493c51aebeedada5456a19d859486495c04e1ecc1ff1fdf7d63371f0be72151e24d0c90cda14350fa14c2a497651a53d110361a876cd4955fa331a8e7755634019c31e8792d78c20fccd196ddeda43d0a836de10ca64cab185f2e1b7b852b18ecdd6dbb3181d327d74e35a4e27c2cee0bee537ff5c5070bf1eab3f283614376e9d602b3f1bc3a811c5edb7e7905f0c3bba34ba76f4b0b32150ec0502c9524dc18deb15487efaa52f702b1423e1a630362c99a1f88d0ccff753b170c3a75934d8ce6301bf41c12de09a8fafee7ce7e9f0d5ce6ffd534ad5d6a6314ed673254b86b05badeae1f40bd92d4787a858577a89e2342be2f3a0ab1c18ff3f4fe6cf3778de8772bdb286434e8fcbd36b463087c7b0cee479521c825aac2016adc7202078f2001f1d465e2c689feafe01cc0d091b5579c38b2140bf37418693b07f8c46d1ea39b09d00672655b26c8e173d145ae8f234fd5708f8c2194d5349a657a717b22dbcfa27089ed30f538c29429141b627b70fb9283ba35de0d6cd8533c8f340e0fed0291809054a54916db61014f9017a4bfa7cc161e982c09445820bc948ea4d5f1c9a5d375d44db28c42ac2d1bb2f1b85bc07ee1d324a8357b49339324148a425d076ec18d480edd098c3bc5bab719eab59ac38a64aa5da51ba70957fdd14c3047952a3d980b6bff418b73eaf552081ed893c16a4266514d2b6703cf631dbb7468f2f84ab9c0f97c3b8a3f0c431fbe8c79963100c3dbbdbd5be860b4b3ec5ef453271fed50a6354f3bb0d33d387a66662703cca47248ad63228901544fc7ffa5d7ea424191b3b418c58e54a050c65dd17c3cb05ccfd0a92769e3af9c40790a41543e3bc34b69e0783672b92fecc4ce8003c790a190686a932d58cd7c4a66feaf8801c833c60a2ff3d01070b857e2061e46078afd5526b4497abec2d6588492b3d6a720f98ee1a8f8dadb350d61d2982743d3d54b2020edade0a8be3158349fce2616f1ffb4fbfcf76b202bb0c012207896ddfc34c9993af891fc0f9d0930a1efec688c7fc5e6c6bb8199210f47c18def7bee047649cb2179bf91b7090ed26be6cf2d1ab014955d53ff6da61d336780850f877ac816b935359447c4b59f91aba4bc958b4d13a2e566b859cf2f3353f9bbdb53fd539aad11996429180691f1e56b2105b1ebe52fdb82db9c0f86ccf76623e796197d4c4375430bb98dc094c8534549a717d9c103b8a6e4a09812a5bdf517309cd35c8b7013a379a04f2c31f453ef82f59bf68456f268430e748d4cdb1b554cc1b3dc3fb97f485c0b17697dc401aaba4fd89070bb81da125c31931b0613b503ab18af85b0767d2c7541b07fddf473f7e5445e385016256f75d1d24dbbb00fcab899ac34930868d0be5dbbe4ce220d7b275e8d886ee250d3f2fe5f2e20d56096b87faa18f1ef0b13a156b69dec967fb921c2794b977daebc6cbed3bb008ac6a64d0eeed5bdcbd99c3200cb32bea9de8c7d49071124973fc1cf0d7f6cb97b613f7f1ff0f77048000dc1b1cc017f8341500591965f05ac5224d8130d59990fbdffe270f452367d06e9de6c72a4886ccf15e0e0d33d46c0b0ce4bc6d1df5254cddc7aa8dbb57fc1148e45544cff04b2493e4f892403c1c04f534dde88a6985a7bf24e990d3f31b914f24462c4554b81f33f8f024590f3d244d6b0ab682fdb967ee66aaca7611ae2ebbec1f9720c254868f33e6f64186628acf0e6a42e744d5ef83a8787d4c7a3e4437d3df11b394b6a381192ec60b66486d8784077b49eebec68140524b4b33db75d0f96c856e3c0d4ac07b7b20d8bc0e9cae649aeb7883614d9528f6de39938445e567b9d17075aceb0dd984dc3e9d1b536f9c8e3c0dd53363fbb88b212a14b1d283cd06d16b00ea968c9cbffe5d6be2cc99a2ed1f98d8e6fff30547bda62807f6ce4dce122dfc480dfeb1a93858aaf897c7390fca0da240d7b578fa8f68c727b54f8930066628bf7116267c7bc7d9ae5796e5e74879ff9bf8d9c3ca324d1145a25786b546f798b047b80a4397e3d1ab395b101cb2fbcbc6e6889580c4f890537ddfe64703f318220df26fd446eaa1ac0c78b56d49e2f023c7804c79afbd42c0aa24c3f12d622c83ce0eed67e0b2ab90c2851f2cb3df754a1b7f9c46f2b1a36ace3e390aaf4799f95a7b8ec9695703517c9ba4129e45cf675d757206638be023e164027fa2d957ca90bbf96eea634b05eb3d3284eebd3b86a986976448256f13a85f55683c88e0061b2671a163b81849cf11a3a2f9b37856e3f21497617d6c6c9406af0e46ee5240d2920f3cdc671df2f3cd8a3b09d226a8a272cf9086842558926af745b2f5e830399f9a197ba1b23b23c2405126d1fdeec36908257bf2cc69bf33a1f2a7507233a10932dd302297e667ffd8b78ad098949035df1988bb5ba219d741e7470b7298b8348692b499549b60629c4355092854ffd5aced9f9ed6b2f4f0ce0a2d3a3e14b7bc88deb9ebc957b5def2bc8b96f7c442f2e87e3be3de4cefe6db4b721887847e046fc09ff1fec7b83948ff9d9d0101d7b116494f7af5321d58bb3b3360aa45e6915c7847f9fe6ae2ffce5556f7bf375e493466ab54919f3dcf1c54387373ef07b2b55d7fbe6ddcab3c66c0b21b37b6976b78ccfc97839e1ab87e390135c0b3276f6d35602d8c090b08a18a76da4f9fd60b88ed667ffb63e85b776bab8f7f11a67bf7abdf13af88c83ee9234398395c3bf22abb43805384cee0d921cc27bc846b60290672e7d598f35220b18b80477226b650e083582a9eb4b5cdfae58728968341df076233b3e37952e70be4e95c5a4e312f160b8bc119eaf99292b97db8997b164218b5793d3e49dad816842cc626fe7b86bb1bdb217baf4c8", @ANYRESDEC=0x0, @ANYRES16, @ANYRESDEC=0x0, @ANYBLOB="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", @ANYPTR], @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b2001ebf78080000001028e6c467144d2fa833"], 0x5}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'vxcan1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000003c0)={@remote, @mcast1, @dev={0xfe, 0x80, [], 0x1a}, 0x7736769a, 0xff00, 0xa4b4, 0x500, 0x9, 0x80c00000, r3}) r4 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r4) r5 = syz_open_dev$vcsn(&(0x7f0000000240)='/dev/vcs#\x00', 0x9, 0x101400) ioctl$RNDCLEARPOOL(r5, 0x5206, &(0x7f0000000340)=0x7) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="3a258211f663a7724bdef6a53bfce1e775d7406272274814a3f23327edb11e2daf85534aa6f5bfe3962e92da9e517a91df1acc99e6643d3baad0a9f349be3cc11cbf51b4f7bff473e9c200351ccaefebd642492cfc5ead68cf6a0506"], 0x5c) sendfile(r6, r6, &(0x7f0000000000), 0x8080fffffffe) bind$unix(r6, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0x7) 10:10:28 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000040)={0xfffffffe, 0x0, 0x0, 0x4, 0xf, "00000046000000000000000100"}) 10:10:28 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0x6000) 10:10:29 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0xa00) 10:10:29 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0xf) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) syz_mount_image$nfs4(&(0x7f0000000100)='nfs4\x00', &(0x7f0000000180)='./file0\x00', 0x5, 0x7, &(0x7f00000017c0)=[{&(0x7f0000000340)="31edc601a56c14743b4272853935a803b29e35f618ffcc88b656e703bac43459047a24bf5c650efb483abcb5807bba80d0152821133a865bb225c54d7b96d9102738f4c13ab32a6322eabe20a15fa4b244868ca3fb56923b6d183d1fc61ea75199da54791807757b5d8434b854e5bb7a337e9cc4df9fe9c0db1c25f02740a6f68be76ae760529ab45165733f8844c014b68d83e3251b1ed1a5121e8a399421d9830d97ce92e7bd6063febbd0a0dbcc8f01ba3cba36afae1b3c84ded9a94c9ae3b2e59f43c46a933f5e1558287b5d7082fc3594ba6c8d26cdf7338e634b772e7dcdf6fd4e212c10bf786ad2e9dfd2bfe21547882adeec", 0xf6, 0x1}, {&(0x7f0000000440)="1f3742fc440e000392487dc35e3317373a87dfb6c99757a4d2e32384262f0ab216a1a859f14c93b42ab42eff54dbf0ea4f8d61a3b6b745ecdac44dad020961a1169e0c667e05d7164096806b06e24cd68eff1f37", 0x54, 0x4}, {&(0x7f00000004c0)="72c4143abb245a4b826d3ba413e066f01c1b48fcd04a479251ae368d2b4958a7959679f30ce74c68a77560777e2ec37f84cea80748a0b9c0e3b134245e5583710949a8dbcc03de3cb6d68e", 0x4b, 0x81}, {&(0x7f0000000640)="77f11a4dd0fd2c7046d4129c878d9541107f518d13e8a92700541c8533cc159a64309ab7320c7f36491674e21f4612cac167f0b42619cf41c96f296853982c40c96ca39b781e1e206b6ad19f1309cf34e19fd5e3542a9725a15571c6d757901cbd40dfc1c3ad78b5e15a2b655a2285f05c2640be2141aa744c3158a08b51f19521c846b99964f9c03d94407d878a59f68e1c905915c86627d9420327b0be2fd9b16fa0d7f4e61c47bda3d76c92b930999faa85300dfea30d7283915d8ee44a4d7064280deab86353a4df681c4603", 0xce}, {&(0x7f0000000540)="92f33a45a0e1524bfa6fc6681d7ecf9773b1058975a44a1b249d21b1e1f9d8726ed889b9a55cc769493b70b522c24279892bff06050587de13ec1e43b32824764577bb506f21bc46ea27ccf9850bafad89c6e914f8a158bd3cda0b26269f9cf4e088e3cbc54893869a0e817ca7", 0x6d, 0x9}, {&(0x7f0000000740)="cf7a722265d4eb4626a80fedb10829ca359dcfd97010ae2ed69d90e5cdd45070ad4ab6313968582391a663f03d20749a897ab24b014ecda83df3b6fb170272fe50", 0x41, 0xffffffff}, {&(0x7f00000007c0)="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", 0x1000, 0x9}], 0xa00004, &(0x7f00000001c0)='/dev/ptmx\x00') ioctl$SOUND_MIXER_READ_STEREODEVS(r2, 0x80044dfb, &(0x7f0000000000)) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) 10:10:29 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="3a258211f663a7724bdef6a53bfce1e775d7406272274814a3f23327edb11e2daf85534aa6f5083067b0248878f07a91df1acc99e6643d3baad0a9f349be3cc11cbf51b4f7bff473e9c200351ccaefebd642492cfc5ead68cf6a0506"], 0x5c) sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) ioctl$TCSETXF(r3, 0x5434, &(0x7f00000000c0)={0x8b, 0x100, [0x2, 0x400, 0x0, 0x0, 0x4], 0x3ff}) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000000)={0x0, 0x0, [0x0, 0x400]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 850.660340][T28478] nfs4: Unknown parameter '/dev/ptmx' 10:10:29 executing program 5: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r2, &(0x7f0000000100), 0x8) listen(r2, 0x0) accept4(r2, 0x0, 0x0, 0xfeffffff00000000) timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, r1+30000000}}, 0x0) tkill(r0, 0x1000000000013) 10:10:29 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0x6558) 10:10:30 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0xb00) [ 851.370311][T28481] nfs4: Unknown parameter '/dev/ptmx' 10:10:30 executing program 2: r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000100)={&(0x7f0000000000)="a6931b1a574b5b6b942c2e62bc5107e0c56e7c1ea7b927f0a9212a82ad7ce61f7c52f06b608f676884", &(0x7f00000000c0)=""/47, &(0x7f0000000180)="dfbdf072cb15791c97c28a975fafd5999e819fbb3182c6aebf6f1b86210a6642e81353179cfd25ef7f3321edcb4fe8da389809a8d78ffc1640a746fabfce829f729ad2c99aa950a0a4f1c4c31dde0d787ab0c52f9b3cba0b97714c78e5cfac1ac2cc63285ff0a3478de697771f5d5d61bea073aea91ea28223a2b626ca1cfd2b8a84be147a6c53b9d914bdaebe59f19b8416e27b0fdec6d3268fec5de8f1ea4497a307791c43326deb84dee6662825eb8b977b4cd13fa991dd04b1e265abd02e9aa75faf894086", &(0x7f0000000340)="d678478781de4163855b3718ac0f4f5f2d2633705547ab3afe0664f2034a2b3f1a197e5ba20af66a4668a83984675b6b069b562dd7d708de88b23858999ad020674831bb7b42fd7ba810f507d30db7fa575cf88118f295c40718e39c40c7fde2072d48b87639b50c43690d6d7eb74abc8d", 0x7, r0}, 0x38) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vcs\x00', 0x300, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x20, r4, 0x709, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r4, 0x65f58201d13573b9, 0x70bd2d, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x240000d5) r5 = syz_open_pts(r1, 0x0) readv(r5, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) ioctl$TCSETSW(r5, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) 10:10:30 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r1 = syz_open_pts(r0, 0x0) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="3a258211f663a7724bdef6a53bfce1e775d7406272274814a3f23327edb11e2daf85534aa6f5083067b0248878f07a91df1acc99e6643d3baad0a9f349be3cc11cbf51b4f7bff473e9c200351ccaefebd642492cfc5ead68cf6a0506"], 0x5c) sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0x5, &(0x7f0000000180)=0x6, 0x4) fchdir(r1) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000)=[@mss={0x2, 0x7}, @timestamp, @window={0x3, 0x1f, 0x1}, @timestamp, @mss={0x2, 0x1000}, @window={0x3, 0x7ff, 0x400}, @timestamp], 0x7) readv(r1, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) r4 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2c5, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000000)="1d", 0x1, 0xfffffffffffffffd) r6 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r6) ioctl$sock_inet_tcp_SIOCOUTQ(r6, 0x5411, &(0x7f0000000100)) keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r4, r4}, 0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={'tgr160\x00'}}) keyctl$instantiate(0xc, r4, &(0x7f00000000c0)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', '/dev/ptmx\x00', 0x20, 0x81}, 0x34, 0xfffffffffffffffb) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) 10:10:30 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0xf) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) syz_mount_image$nfs4(&(0x7f0000000100)='nfs4\x00', &(0x7f0000000180)='./file0\x00', 0x5, 0x7, &(0x7f00000017c0)=[{&(0x7f0000000340)="31edc601a56c14743b4272853935a803b29e35f618ffcc88b656e703bac43459047a24bf5c650efb483abcb5807bba80d0152821133a865bb225c54d7b96d9102738f4c13ab32a6322eabe20a15fa4b244868ca3fb56923b6d183d1fc61ea75199da54791807757b5d8434b854e5bb7a337e9cc4df9fe9c0db1c25f02740a6f68be76ae760529ab45165733f8844c014b68d83e3251b1ed1a5121e8a399421d9830d97ce92e7bd6063febbd0a0dbcc8f01ba3cba36afae1b3c84ded9a94c9ae3b2e59f43c46a933f5e1558287b5d7082fc3594ba6c8d26cdf7338e634b772e7dcdf6fd4e212c10bf786ad2e9dfd2bfe21547882adeec", 0xf6, 0x1}, {&(0x7f0000000440)="1f3742fc440e000392487dc35e3317373a87dfb6c99757a4d2e32384262f0ab216a1a859f14c93b42ab42eff54dbf0ea4f8d61a3b6b745ecdac44dad020961a1169e0c667e05d7164096806b06e24cd68eff1f37", 0x54, 0x4}, {&(0x7f00000004c0)="72c4143abb245a4b826d3ba413e066f01c1b48fcd04a479251ae368d2b4958a7959679f30ce74c68a77560777e2ec37f84cea80748a0b9c0e3b134245e5583710949a8dbcc03de3cb6d68e", 0x4b, 0x81}, {&(0x7f0000000640)="77f11a4dd0fd2c7046d4129c878d9541107f518d13e8a92700541c8533cc159a64309ab7320c7f36491674e21f4612cac167f0b42619cf41c96f296853982c40c96ca39b781e1e206b6ad19f1309cf34e19fd5e3542a9725a15571c6d757901cbd40dfc1c3ad78b5e15a2b655a2285f05c2640be2141aa744c3158a08b51f19521c846b99964f9c03d94407d878a59f68e1c905915c86627d9420327b0be2fd9b16fa0d7f4e61c47bda3d76c92b930999faa85300dfea30d7283915d8ee44a4d7064280deab86353a4df681c4603", 0xce}, {&(0x7f0000000540)="92f33a45a0e1524bfa6fc6681d7ecf9773b1058975a44a1b249d21b1e1f9d8726ed889b9a55cc769493b70b522c24279892bff06050587de13ec1e43b32824764577bb506f21bc46ea27ccf9850bafad89c6e914f8a158bd3cda0b26269f9cf4e088e3cbc54893869a0e817ca7", 0x6d, 0x9}, {&(0x7f0000000740)="cf7a722265d4eb4626a80fedb10829ca359dcfd97010ae2ed69d90e5cdd45070ad4ab6313968582391a663f03d20749a897ab24b014ecda83df3b6fb170272fe50", 0x41, 0xffffffff}, {&(0x7f00000007c0)="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", 0x1000, 0x9}], 0xa00004, &(0x7f00000001c0)='/dev/ptmx\x00') ioctl$SOUND_MIXER_READ_STEREODEVS(r2, 0x80044dfb, &(0x7f0000000000)) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) 10:10:30 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0x8100) 10:10:30 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0xc00) [ 851.919907][T28510] nfs4: Unknown parameter '/dev/ptmx' 10:10:31 executing program 5: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r2, &(0x7f0000000100), 0x8) listen(r2, 0x0) accept4(r2, 0x0, 0x0, 0xffffffff00000000) timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, r1+30000000}}, 0x0) tkill(r0, 0x1000000000013) 10:10:31 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="3a258211f663a7724bdef6a53bfce1e775d7406272274814a3f23327edb11e2daf85534aa6f5083067b0248878f07a91df1acc99e6643d3baad0a9f349be3cc11cbf51b4f7bff473e9c200351ccaefebd642492cfc5ead68cf6a0506"], 0x5c) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) write$P9_RWSTAT(r2, &(0x7f00000000c0)={0x7, 0x7f, 0x2}, 0x7) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="3a258211f663a7724bdef6a53bfce1e775d7406272274814a3f23327edb11e2daf85534aa6f5083067b0248878f07a91df1acc99e6643d3baad0a9f349be3cc11cbf51b4f7bff473e9c200351ccaefebd642492cfc5ead68cf6a0506"], 0x5c) sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @dev}, r5}}, 0x48) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r3, &(0x7f0000000100)={0xb, 0x10, 0xfa00, {&(0x7f0000000340), r5, 0x101}}, 0x18) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x9, 0x0, '\x00\x00\x00@\x00'}) 10:10:31 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0x7, 0x1, 0x5, 0x7f, 0xd, "69aba33cde1b4a84"}) 10:10:31 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0xb40f) 10:10:31 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0xe00) 10:10:32 executing program 5: gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) getpeername$packet(r8, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$BATADV_CMD_GET_GATEWAYS(r6, &(0x7f0000000140)={0x0, 0x5a, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="110700000000000000000800000008000300", @ANYRES32=r5, @ANYBLOB="08000600", @ANYRES32=r9, @ANYBLOB="6fcad61320b79c03b231a42169e78df223cbb7"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000006fee44bc0c354f48e5427e7aef6fff039ca418ced33ffffd6ddd8a4d25a2c74f31c2b22d7003699398b59223069ad793751aaeba9a80b32e5c2ef0825ba89039dc7b0b61d586427436cd5fe4f61f2bd443b46d00"/101, @ANYRES16=r3, @ANYBLOB="200026bd70000effffff0e00000008003c000900000005002d0001000000"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4) bind$bt_sco(r1, &(0x7f0000000100), 0x8) listen(r1, 0x0) accept4(r1, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, r0+30000000}}, 0x0) 10:10:32 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0xf002) 10:10:32 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r3, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], 0x5c) sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f0000001380)={0x3}) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000005c0)={r4, @in={{0x2, 0x0, @rand_addr=0x400}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x951, 0x0, 0x0, 0x5, 0x3, 0x4]}, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000100)={r4, @in={{0x2, 0x0, @remote}}}, &(0x7f0000000040)=0x90) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000140)={r4, 0x80}, 0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000001500)={r4, 0x7}, &(0x7f0000001540)=0x8) prctl$PR_GET_NO_NEW_PRIVS(0x27) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000000)={0x0, 0x0, [0x0, 0x400]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) ioctl$SIOCAX25GETINFOOLD(r5, 0x89e9, &(0x7f0000001340)) fchdir(r5) sendmsg$inet(r5, &(0x7f0000001300)={&(0x7f00000000c0)={0x2, 0x4e22, @broadcast}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000100)="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", 0x1000}, {&(0x7f0000001100)="5145e6f8229378e91e1e255c5d0ef4b03592032a9ccdc630a4db643806d15f0372cce3b981bd79e9ca7d02bac80abba768c10fe1781335439407b221a6d4d03a82845d0ca642b6784b76dd9c3aaa4680ce94cd63d1c3b9d886", 0x59}, {&(0x7f0000001180)="c97bdd91229ca42044b79ce3acde2189eb9ec27e27bb283d61c62e0e509fba7e57d83c6ee0468582a8c2228d4eecf45f9556ee3749dad87f2ffd96fa50ef6b29018b9f4898381ae1b7ede4f764a30a2a1a037a0a19fbdbd98950c737ee6614e090730bb95b8665e4f6477098e520d15b12e36981a017da5eb40956097acf5cc7924b5bd362aecf24271c3c331c52dd7e3377a6375047b52465b3d126ce0ca369c9f485c72776e79380ebf9099265dbaede70bee27f87c8141a69ec9601ebf698c5f5ab67d957c53805e6342b2fe3d422", 0xd0}], 0x3, &(0x7f00000012c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x46ff}}], 0x18}, 0x10) 10:10:32 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0xf00) 10:10:32 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)=""/237, 0x37, 0xed, 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x15, 0x10, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r1, 0x0, 0x1}, 0x40) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)=""/237, 0x37, 0xed, 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x15, 0x10, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0x0, 0x1}, 0x40) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e002553e7dc888cc5b2640165ebda6e94f8504e9ad2890fc350669824a3adc007e52440a45df1f2f84995b27d015847da5f653595973826a3ee9842531effd00e951567260b7f9508bccb73769129e168b7b5030a7a54319e3c9538c8c4452ffd9774f9950367986be848f7bbf1708af8a330fd7402d66ee3546fe24cc196080cf0bb77014e058bfb45902e26d165fd0962343d49bc7d16ab409b7058c0b60b2ff7ca456ad5ff636cdbc30f737f6ed21ec904bb9e5678ebd06892ade290cbe97c4506a348aa878b688cd4c80ea23c0200000000000000ff64f9ddd0367ac42a122d62e5ea70"], &(0x7f0000000280)=""/237, 0x37, 0xed, 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x15, 0x10, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r3, 0x0, 0x1}, 0x40) write$binfmt_aout(r0, &(0x7f00000005c0)=ANY=[@ANYRES64=r1, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR=&(0x7f0000000540)=ANY=[@ANYPTR, @ANYRESDEC=r2, @ANYRESHEX=r0], @ANYRES16=r3]], 0x10) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r4 = syz_open_pts(r0, 0x0) readv(r4, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) ioctl$TCSETSW(r4, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) r5 = open(&(0x7f0000000000)='./file0\x00', 0x40100, 0x46) ioctl$SIOCGETLINKNAME(r5, 0x89e0, &(0x7f00000000c0)={0x0, 0x2}) r6 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r6) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ioctl$VIDIOC_QBUF(r6, 0xc058560f, &(0x7f0000000200)={0x7, 0x9, 0x4, 0x10000, 0xbda, {r7, r8/1000+10000}, {0x1, 0x1, 0x9, 0x0, 0x1, 0x9, "55bfa334"}, 0x4, 0x1, @planes=&(0x7f00000001c0)={0x10001, 0x7, @mem_offset=0x1, 0xfffffff7}, 0x6c, 0x0, 0xffffffffffffffff}) ioctl$VFIO_IOMMU_GET_INFO(r9, 0x3b70, &(0x7f0000000340)={0x18, 0x0, 0x0, 0x8000}) 10:10:33 executing program 5: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r2, &(0x7f0000000100), 0x8) listen(r2, 0x0) accept4(r2, 0x0, 0x0, 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r3) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)=""/237, 0x37, 0xed, 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x15, 0x10, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r4, 0x0, 0x1}, 0x40) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000000)={0x40000000}) timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, r1+30000000}}, 0x0) tkill(r0, 0x1000000000013) 10:10:33 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000440)=[{&(0x7f0000000340)=""/158, 0x99}, {&(0x7f00000000c0)=""/104}, {&(0x7f0000000240)=""/23}, {&(0x7f0000000280)=""/160}], 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="3a258211f663a7724bdef6a53bfce1e775d7406272274814a3f23327edb11e2daf85534aa6f5083067b0248878f07a91df1acc99e6643d3baad0a9f349be3cc11cbf51b4f7bff473e9c200351ccaefebd642492cfc5ead68cf6a0506"], 0x5c) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f0000000180)={0x0, @bt={0x3, 0x6, 0x1, 0x1, 0x1, 0x6, 0x10001, 0x200, 0x0, 0x40, 0x6, 0x5, 0x40, 0x0, 0x5, 0x10, {0x7, 0x2}, 0x0, 0x4}}) 10:10:33 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0xfc03) 10:10:33 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0xfb4) 10:10:33 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)=""/237, 0x37, 0xed, 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x15, 0x10, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r1, 0x0, 0x1}, 0x40) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e002553e7dc888cc5b2640165ebda6e94f8504e9ad2890fc350669824a3adc007e52440a45df1f2f84995b27d015847da5f653595973826a3ee9842531effd00e951567260b7f9508bccb73769129e168b7b5030a7a54319e3c9538c8c4452ffd9774f9950367986be848f7bbf1708af8a330fd7402d66ee3546fe24cc196080cf0bb77014e058bfb45902e26d165fd0962343d49bc7d16ab409b7058c0b60b2ff7ca456ad5ff636cdbc30f737f6ed21ec904bb9e5678ebd06892ade290cbe97c4506a348aa878b688cd4c80ea23c0200000000000000ff64f9ddd0367ac42a122d62e5ea70"], &(0x7f0000000280)=""/237, 0x37, 0xed, 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x15, 0x10, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0x0, 0x1}, 0x40) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)=""/237, 0x37, 0xed, 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x15, 0x10, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r3, 0x0, 0x1}, 0x40) write$binfmt_aout(r0, &(0x7f00000005c0)=ANY=[@ANYRES64=r1, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR=&(0x7f0000000540)=ANY=[@ANYPTR, @ANYRESDEC=r2, @ANYRESHEX=r0], @ANYRES16=r3]], 0x10) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r4 = syz_open_pts(r0, 0x0) readv(r4, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) ioctl$TCSETSW(r4, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) r5 = open(&(0x7f0000000000)='./file0\x00', 0x40100, 0x46) ioctl$SIOCGETLINKNAME(r5, 0x89e0, &(0x7f00000000c0)={0x0, 0x2}) r6 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r6) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ioctl$VIDIOC_QBUF(r6, 0xc058560f, &(0x7f0000000200)={0x7, 0x9, 0x4, 0x10000, 0xbda, {r7, r8/1000+10000}, {0x1, 0x1, 0x9, 0x0, 0x1, 0x9, "55bfa334"}, 0x4, 0x1, @planes=&(0x7f00000001c0)={0x10001, 0x7, @mem_offset=0x1, 0xfffffff7}, 0x6c, 0x0, 0xffffffffffffffff}) ioctl$VFIO_IOMMU_GET_INFO(r9, 0x3b70, &(0x7f0000000340)={0x18, 0x0, 0x0, 0x8000}) 10:10:34 executing program 5: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r2, &(0x7f0000000100), 0x8) listen(r2, 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="38a900009e1f9fb0e3459466c28b6994993630b6538a5197e71d29cb01000000000000006437b808cf885ac3e50d93623ffbe82873d2b8360f7bd234e789096de7daae330cfd0455689d2ac45baefe8160287af2c1e0efe9176bfc12173966b50d3f66ed7b7fa905e9ed91198e8745174cbbd976c8691ff06d75fb7ff1e8f7cf1a7420e24804664bfff11226871cf698a85cbcc814dbb53a52abbb5384f2e065f5adb8feaac06457f0", @ANYRES16=r5, @ANYBLOB="01050000000000000000010000000000000001410000001c001700000000000000006574683a6970365f7674693000000000"], 0x38}}, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r5, 0x400, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x1c}}, 0x18004) accept4(r2, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, r1+30000000}}, 0x0) tkill(r0, 0x1000000000013) 10:10:34 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0x7, 0x1, 0x5, 0x7f, 0xd, "69aba33cde1b4a84"}) 10:10:34 executing program 1: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x800, 0x0) connect$rxrpc(r0, &(0x7f00000000c0)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e24, 0x59d, @local}}, 0x24) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r2 = syz_open_pts(r1, 0x0) readv(r2, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) 10:10:34 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f0000000180)=""/253, 0xfd}], 0x1) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) 10:10:34 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0x34000) 10:10:34 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0x1100) 10:10:35 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000440)=[{&(0x7f0000000340)=""/158, 0x99}, {&(0x7f00000000c0)=""/104}, {&(0x7f0000000240)=""/23}, {&(0x7f0000000280)=""/160}], 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="3a258211f663a7724bdef6a53bfce1e775d7406272274814a3f23327edb11e2daf85534aa6f5083067b0248878f07a91df1acc99e6643d3baad0a9f349be3cc11cbf51b4f7bff473e9c200351ccaefebd642492cfc5ead68cf6a0506"], 0x5c) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f0000000180)={0x0, @bt={0x3, 0x6, 0x1, 0x1, 0x1, 0x6, 0x10001, 0x200, 0x0, 0x40, 0x6, 0x5, 0x40, 0x0, 0x5, 0x10, {0x7, 0x2}, 0x0, 0x4}}) 10:10:35 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000600)=[{&(0x7f0000000280)=""/138, 0x8a}], 0x1) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) 10:10:35 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0x40000) 10:10:35 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0x1200) 10:10:36 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r2, &(0x7f0000000100), 0x8) listen(r2, 0x0) accept4(r2, 0x0, 0x0, 0x100000000000000) timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, r1+30000000}}, 0x0) tkill(r0, 0x1000000000013) 10:10:36 executing program 1: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r2, &(0x7f0000000100), 0x8) listen(r2, 0x0) accept4(r2, 0x0, 0x0, 0x100000000000000) timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, r1+30000000}}, 0x0) tkill(r0, 0x1000000000013) 10:10:37 executing program 1: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r2, &(0x7f0000000100), 0x8) listen(r2, 0x0) accept4(r2, 0x0, 0x0, 0x40000000) timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, r1+30000000}}, 0x0) tkill(r0, 0x1000000000013) 10:10:37 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0x300000) 10:10:37 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0x1300) 10:10:37 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r2, &(0x7f0000000100), 0x8) listen(r2, 0x0) accept4(r2, 0x0, 0x0, 0xfffffffe) timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, r1+30000000}}, 0x0) tkill(r0, 0x1000000000013) 10:10:37 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)=""/237, 0x37, 0xed, 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x15, 0x10, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0x0, 0x1}, 0x40) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r3) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)=""/237, 0x37, 0xed, 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x15, 0x10, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r4, 0x0, 0x1}, 0x40) r5 = open$dir(&(0x7f0000001940)='./file0\x00', 0x900001, 0x0) r6 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r6) io_submit(0x0, 0x8, &(0x7f0000001a80)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x3, 0x8, r0, &(0x7f0000000180)="2853199ade1edb434015d0026c8930b0054c3c948cc0c3b01358c53428c9cac702641c21838ce97378278e6d9b95d981059e8556ec519cddd87deac736e516148629e7375e55f2a62e240b5d991943277723dc0a73f8e95608bfb9127f297bd25aab2183fee59485fca13fb9eb1d43e55526abb7e14df9d21f616b42c3ba", 0x7e, 0x4, 0x0, 0x3}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x7, 0x401, 0xffffffffffffffff, &(0x7f0000000340)="9ade43ebff05f980cbe5612c2f79065cdf94e8bdcc1223daf788e8df116e6cee8598df6735a7543d5350e0ef86553e07724a48b65d297de1567e715e30954b67e67fd88422e766573580d86b1982a3dee26892f93f95203610437f0415ee181c16d247f589e9dd983613619b219a0ef074b552372aae7e9518461ee7db5f50be7c5ea3bfd9ca9f54c1615a0603e2e622fdc61239d1f514cb9e6b14aff638cf5e53aab6b63d52078277734bef33dbb9e1832cbed8", 0xb4, 0x9c}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x3, 0x5, 0xffffffffffffffff, &(0x7f0000000640)="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", 0x1000, 0x1, 0x0, 0x2}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x3a58, 0xffffffffffffffff, &(0x7f0000000480)="2a0bcf678744a6b9b7306c3978560e7d1857569873318dce5633a4b91c3ca9bce82f09427a2cddc1b17020fe8a4917da7464a2b16e139b771d165dda08ba52d49b8326096de7e9e8b51c4ebb5aa542cfda45b81beceffa5f6af7d2f1caf79cc6b28a5a706358c0bc19677e6d13d9b1f7fab87806a7261d8aeafb843f326484b25aa44c794051ebecc8b90e1fca7373c4d2120cb4379afb1b69a14b9ae703b7db5a1070df2750f2efb29232fd4e6900104e72fc3001acd262b478c62f0673bdba88d990", 0xc3, 0x9, 0x0, 0x2}, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x3, 0x766, 0xffffffffffffffff, &(0x7f0000001640)="a0a40f9b753a9afcb62bfd2dba72d9c54c45a61c263031909727f994d847c61106f3484017edca1a3cc9c6028364d8c9842b5e2303e7457ba6e43593b4e05673b9833ecc30ff01eb29408e67cfff2a55263908c23378b2c9fb877b0c2ce383262c499d90e9e95a3ab79b3363b3a8231c047a44ec1f18ac054ca8d37b321f74524f2ef47fe6aeaa237addb7b019b5724521796a33e36e859833ba4eeb3140dfbac510b125c2991ca5f6dac4837e1f5ce952115d35a95973a08cf5cd6a66a846273465e033e71780eb2254f1ba60a1e61edd88a580ef7e210cc5fca1bb20f4", 0xde, 0x3, 0x0, 0x2, r1}, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x5, 0x1, r2, &(0x7f0000001780)="2d865ae57cabd8d068650af21963c90c8ec1c69b0f49781f9b4333e28e640166e94d38a0a1d3ee378bb5c8017bf1c8da45e452a8e1b54c16ddafdded1170033b25ed743475fa7a00130d75405934e21c5948e39f5a7aed2021575a488db531496f2c3219e306da46f310516198ee8012be6c89cfe01cff0ed605727876f61adef4d65e10ffdd73970167c6c642807c931a0b13601e1442b9b096be8e4954c3f511878f111f8261f8c018fb33d5d76a", 0xaf, 0x5, 0x0, 0x2, r3}, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x6, 0x8, r4, &(0x7f0000001880)="476f894d8753874b6620b0a7c674bda30c36d3046b0d2469acd119149b38e3cf031ba5d4c77a1e24579e5aa3f44f418d8f51e2", 0x33, 0x400, 0x0, 0x2}, &(0x7f0000001a40)={0x0, 0x0, 0x0, 0x5, 0x4f3, r5, &(0x7f0000001980)="4c17759b52f2841a4fa22ed041f4692b2017be7c2f799c21a6b84666457bdb8beac12b94d2813bd057242ee205a58296aa65aa19276295a97a354206d5e29e0bf333d0aee96d15523472f565dd7b70f04402d1fa8c7e943f91d719ba6cacb832a73b00f7c1d9f389b1153ccd4a44bee540d510d38d57f90c77907b4f3a2f09cda456177c4107cff5fcee28352e4b5a5e168aaa67f0fc09fe23a2955c", 0x9c, 0x80000000, 0x0, 0x3, r6}]) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r7 = syz_open_pts(r0, 0x0) readv(r7, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) r8 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x22201, 0x0) setsockopt$inet_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f00000000c0)='tls\x00', 0x4) ioctl$TCSETSW(r7, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) 10:10:37 executing program 1: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e002553e7dc888cc5b2640165ebda6e94f8504e9ad2890fc350669824a3adc007e52440a45df1f2f84995b27d015847da5f653595973826a3ee9842531effd00e951567260b7f9508bccb73769129e168b7b5030a7a54319e3c9538c8c4452ffd9774f9950367986be848f7bbf1708af8a330fd7402d66ee3546fe24cc196080cf0bb77014e058bfb45902e26d165fd0962343d49bc7d16ab409b7058c0b60b2ff7ca456ad5ff636cdbc30f737f6ed21ec904bb9e5678ebd06892ade290cbe97c4506a348aa878b688cd4c80ea23c0200000000000000ff64f9ddd0367ac42a122d62e5ea70"], &(0x7f0000000280)=""/237, 0x37, 0xed, 0x1}, 0x20) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="3a258211f663a7724bdef6a53bfce1e775d7406272274814a3f23327edb11e2daf85534aa6f5083067b0248878f07a91df1acc99e6643d3baad0a9f349be3cc11cbf51b4f7bff473e9c200351ccaefebd642492cfc5ead68cf6a0506"], 0x5c) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x19, 0x9, 0x4, 0x0, 0x400, r2, 0x3, [], 0x0, r0, 0x0, 0x1}, 0x40) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)=""/237, 0x37, 0xed, 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x15, 0x10, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r3, 0x0, 0x1}, 0x40) r4 = fcntl$dupfd(r0, 0x406, r3) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x30, r4, 0x10000000) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r5, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r6 = syz_open_pts(r5, 0x0) readv(r6, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) ioctl$TCSETSW(r6, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) 10:10:38 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0x400300) 10:10:38 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0x1400) 10:10:38 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)=""/237, 0x37, 0xed, 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x15, 0x10, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r1, 0x0, 0x1}, 0x40) fsync(r1) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) r2 = syz_open_pts(r0, 0x0) r3 = open(&(0x7f0000000180)='./bus/file0/file0\x00', 0x5518c0, 0x11) accept4$tipc(0xffffffffffffffff, &(0x7f0000000100)=@name, &(0x7f00000001c0)=0x10, 0x800) write$P9_RREADLINK(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="3a258211f663a7724bdef6a53bfce1f875d7406272274814a3f23327edb11e2daf85534aa6f50830672ba917baf07a91df1acc99e6643d3baad0a9f3eced54c11cbf51b4f7bff473e9c200351ccaef01d642492cfc5ead68cf6a0506"], 0x5c) sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000540)={{{@in=@private, @in=@private}}, {{@in6=@private1}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xfffffffffffffe51) readv(r2, &(0x7f0000000600), 0x0) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) 10:10:38 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000000)={0x0, 0x0, [0x0, 0x400]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r3) r4 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r4) ioctl$DRM_IOCTL_AGP_ALLOC(r4, 0xc0206434, &(0x7f0000000080)={0xc0, 0x0, 0x10001, 0x2}) ioctl$DRM_IOCTL_AGP_UNBIND(r3, 0x40106437, &(0x7f0000000100)={r5, 0x6f8}) 10:10:38 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r1 = syz_open_pts(r0, 0x0) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) ioctl$TCGETX(r2, 0x5432, &(0x7f0000000000)) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)=""/237, 0x37, 0xed, 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x15, 0x10, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r3, 0x0, 0x1}, 0x40) dup(r3) readv(r1, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) faccessat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x8, 0x1200) 10:10:38 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="3a258211f663a7724bdef6a53bfce1e775d7406272274814a3f23327edb11e2daf85534aa6f5083067b0248878f07a91df1acc99e6643d3baad0a9f349be3cc11cbf51b4f7bff473e9c200351ccaefebd642492cfc5ead68cf6a0506"], 0x5c) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) sendto$l2tp6(r2, &(0x7f00000000c0)="0bb891a5be2b222fcabb6c42b97ebd856862a19b302b9b7a84aeaa7557cbad74de3b4072f26947b3844424705e82c8fb31b339d01b880fd6ea7fd2fbae86a3712b6d785af1423bf1360c60cce79841d8a9c38061a91b32fa5bc0774ebd53809b8bd071cc0d8296059ab26723182efc3bfd446f37376628102290f1c726169edfeec14e3385ef80489c6914d7374dc6b7d147b7b3f59d5f1c81d57a243e3ad7619483bb58906af54c93f49c6fc8a341f1be4d313c0307fd8a2ab37ac925719ffcc9ec69ec31c751f262d942cddf6c4944d4e7e53e77e692aaeafb5b", 0xdb, 0x4000050, &(0x7f00000001c0)={0xa, 0x0, 0xce, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xc9e, 0x1}, 0x20) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r3, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000000)={0x0, 0x0, [0x0, 0x400]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 10:10:38 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @dev}, r5}}, 0x48) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000180)={0xf, 0x8, 0xfa00, {r5, 0x5}}, 0x10) write$P9_RREADLINK(r3, &(0x7f0000000040)=ANY=[], 0x0) sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000018c0)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="c0070000", @ANYRES16=0x0, @ANYBLOB="000227bd7000fcdbdf250000000008000100", @ANYRES32=0x0, @ANYBLOB="bc00028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b000000080004000800000008000700000000003c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000000c0004007f000809060000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="4400028040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b00000008000400ce07000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="f800028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000300000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400020000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000700000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="e401028040000100000001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000000030003000000000004000600000040000100000001006c625f74785f6d6574686f640000000000000000000000000000000000000000000003000500000000000400686173685f746f5f706f72745f6d617070696e670000000038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400050000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000200030003000000080004000600000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000300000008000600", @ANYRES32=0x0, @ANYBLOB="3c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000005000300050000000900040068617368000000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="400002803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600779c8592322cea8a6d43bfa5f3a1ec4d3cce21747d452c788ff7baf1509e9747125442a1575b8a0ea0e71252255b5d736f9648be2b43dd29045f0172ae8208955049d579", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="ac00028038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004008408000038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400ff01000038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400fb00000008000100", @ANYRES32=0x0, @ANYBLOB="7c00028040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000100010008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000100000008000100", @ANYRES32=0x0, @ANYBLOB="0400028008000100", @ANYRES32=0x0, @ANYBLOB="1c02028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400a6000000080007000000000044000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000001400040026be010805000000ff0f4002050000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400080000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB], 0x7c0}, 0x1, 0x0, 0x0, 0x4000}, 0xc0) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000000)={0x0, 0x0, [0x0, 0x400]}) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="3a7c7011f663a7724bdef6a53bfce1e7948b28c472274814a3f23327edb11e2daf85534aa6f5083067b0248878f07a910400cc99e6643d3baad0a9f349be3cc11cbf51b4f7bff4492cfc5ead68006a050600"/92], 0x5c) sendfile(r6, r6, &(0x7f0000000000), 0x8080fffffffe) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0], 0x2}) ioctl$DRM_IOCTL_MODE_SETPLANE(r6, 0xc03064b7, &(0x7f0000000140)={r7, 0x1, 0x889f, 0x9, 0x0, 0x40, 0x1e4cfc89, 0xe35, 0x91b, 0x6, 0x2, 0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:10:39 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0x1000000) 10:10:39 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0x3000) 10:10:39 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="3a258211f663a7724bdef6a53bfce1e775d7406272274814a3f23327edb11e2daf85534aa6f5083067b0248878f07a91df1acc99e6643d3baad0a9f349be3cc11cbf51b4f7bff473e9c200351ccaefebd642492cfc5ead68cf6a0506"], 0x5c) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) ioctl$SIOCX25GSUBSCRIP(r1, 0x89e0, &(0x7f0000000180)={'macvlan1\x00', 0x3, 0x7fffffff}) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x256000, 0x0) ioctl$VT_WAITACTIVE(r2, 0x5607) r3 = syz_open_pts(r0, 0x0) readv(r3, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) ioctl$TCSETSW(r3, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) 10:10:39 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0xfffffffffffffffc) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r3) ioctl$SNDCTL_DSP_RESET(r3, 0x5000, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000000)={0x0, 0x0, [0x0, 0x400]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:10:40 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000000100)={0x9a0000, 0x9, 0x0, r0, 0x0, &(0x7f00000000c0)={0x990afc, 0x80, [], @value=0x6}}) syz_open_pts(r2, 0x242000) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r3) ioctl$TIOCSERGETLSR(r3, 0x5459, &(0x7f0000000000)) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="3a258211f663a7724bdef6a53bfce1e775d7406272274814a3f23327edb11e2daf85534aa6f5083067b0248878f07a91df1acc99e6643d3baad0a9f349be3cc11cbf51b4f7bff473e9c200351ccaefebd642492cfc5ead68cf6a0506"], 0x5c) sendfile(r4, r4, &(0x7f0000000000), 0x8080fffffffe) ioctl$KVM_SMI(r4, 0xaeb7) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "0000005cd6000800"}) r5 = syz_open_pts(r0, 0x0) readv(r5, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) ioctl$TCSETSW(r5, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/slabinfo\x00', 0x0, 0x0) ioctl$KVM_GET_ONE_REG(r6, 0x4010aeab, &(0x7f0000000240)={0x2}) 10:10:40 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0x2000000) 10:10:40 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0x3f00) 10:10:40 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="3a258211f663a7724bdef6a53bfce1e775d7406272274814a3f23327edb11e2daf85534aa6f5083067b0248878f07a91df1acc99e6643d3baad0a9f349be3cc11cbf51b4f7bff473e9c200351ccaefebd642492cfc5ead68cf6a0506"], 0x5c) sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) ioctl$BLKRAGET(r3, 0x1263, &(0x7f00000000c0)) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000000)={0x20000, 0x0, [0x7, 0x400]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:10:41 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0x3000000) 10:10:41 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = syz_open_pts(r1, 0x600082) readv(r2, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="3a258211f663a7724bdef6a53bfce1e775d7406272274814a3f23327edb11e2daf85534aa6f5083067b0248878f07a91df1acc99e6643d3baad0a9f349be3cc11cbf51b4f7bff473e9c200351ccaefebd642492cfc5ead68cf6a0506"], 0x5c) sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="3a258211f663a7724bdef6a53bfce1e775d7406272274814a3f23327edb11e2daf85534aa6f5083067b0248878f07a91df1acc99e6643d3baad0a9f349be3cc11cbf51b4f7bff473e9c200351ccaefebd642492cfc5ead68cf6a0506"], 0x5c) sendfile(r4, r4, &(0x7f0000000000), 0x8080fffffffe) r5 = accept$alg(r4, 0x0, 0x0) ioctl$FICLONE(r5, 0x40049409, 0xffffffffffffffff) setsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f0000000100)={0xc0, 0x40}, 0x2) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f00000000c0)={0x5, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$NBD_DO_IT(r4, 0xab03) 10:10:41 executing program 2 (fault-call:5 fault-nth:0): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:10:41 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0x4000) 10:10:41 executing program 0: r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz0\x00', {0xb7, 0x835, 0x8, 0x5786}, 0x2a, [0x3f, 0x81, 0x7, 0x0, 0x6, 0x2eef, 0xda, 0x400, 0x5, 0x8001, 0x0, 0x5, 0x7, 0x7ff, 0x400, 0xff, 0x0, 0x6, 0x6, 0x0, 0x0, 0x0, 0x400, 0x80000001, 0x3, 0x8, 0x1, 0x5c, 0x7, 0x5, 0x2, 0x1f, 0x8000, 0x80000000, 0xfffffffb, 0x3, 0x8, 0x5, 0x7, 0x40, 0x6, 0x1, 0x8, 0x1, 0x81, 0x7, 0xffff, 0x2, 0xff, 0x3, 0xfff, 0x0, 0x8, 0x8, 0x6, 0x2, 0x6, 0xffff, 0x3, 0x1, 0x5, 0x7ff, 0x0, 0x5], [0x1, 0xfffffffb, 0x9, 0x400, 0xed80, 0x40, 0x4, 0xd6f1, 0x0, 0x10001, 0x1, 0x100, 0xe99, 0x1ff, 0x80, 0x8000, 0x3, 0x80, 0x3, 0x5, 0x5, 0x7f, 0x81, 0x8, 0x401, 0x1, 0x400, 0x3, 0x48064449, 0xfff, 0xffffffff, 0x66ef1531, 0x7, 0x530, 0x800, 0x4, 0x3, 0x1000, 0x9, 0x8, 0x0, 0x28, 0x3ff, 0x0, 0x81, 0x0, 0x3, 0x0, 0x100, 0x4b, 0x1, 0x1, 0x595, 0x0, 0x5, 0x5, 0xaba7, 0x9, 0x5c9, 0x4, 0xf3, 0xffffffff, 0x20, 0x6e15], [0x9, 0xbe, 0x8, 0x7f, 0xfde2de0, 0x7ff, 0x5, 0x7f, 0x9, 0xd8, 0x2, 0x80000000, 0x8, 0x9, 0xc, 0x0, 0x7, 0x200, 0xf7a8, 0x7, 0x9, 0x2, 0x4, 0xffffffd8, 0x3, 0x45ce, 0x8, 0x1, 0x8, 0x87, 0x6, 0x200, 0x2, 0x20000000, 0x7, 0xde, 0x0, 0x7fffffff, 0x3, 0x9, 0x81, 0x80, 0x8, 0xffff, 0x8001, 0x1f, 0x6, 0x6, 0x100, 0xff, 0x81, 0x6, 0xa9b, 0x1b, 0x7, 0x66, 0x5, 0xf67d, 0x100, 0xfff, 0xffff, 0x7, 0x1, 0xfbbba87a], [0x7, 0x4, 0x1d9, 0x50a4, 0x4, 0x6, 0x3, 0x5, 0xffffff81, 0x4, 0x1, 0x1, 0x8, 0x1, 0x7df, 0x9, 0xfffffffb, 0x9, 0x9a3, 0xffffffbb, 0x37ea, 0x5, 0x100, 0xb6a, 0x7, 0x1cf, 0xf5, 0x2, 0x401, 0x4, 0x3, 0x1f, 0x8, 0xfffffffc, 0x80000001, 0x8, 0x3, 0xdff, 0x1, 0xfffffffc, 0x3, 0x400000, 0x0, 0x9, 0xe21, 0x100, 0x7fff, 0x9, 0xb3e2, 0x9, 0x7fffffff, 0x8, 0x24d, 0x49f, 0x6, 0x6, 0x80000001, 0x1, 0xcb, 0x0, 0x3848, 0x1, 0xffffffff, 0x26]}, 0x104) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x50, r3, 0x0) epoll_create1(0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000000)={0x0, 0x0, [0x0, 0x400]}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f00000005c0)=0xffffffff) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$IMGETCOUNT(r0, 0x80044943, &(0x7f0000000540)) [ 862.414557][T28754] FAULT_INJECTION: forcing a failure. [ 862.414557][T28754] name failslab, interval 1, probability 0, space 0, times 0 [ 862.471938][T28754] CPU: 0 PID: 28754 Comm: syz-executor.2 Not tainted 5.6.0-rc1-syzkaller #0 [ 862.480680][T28754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 862.490737][T28754] Call Trace: [ 862.494123][T28754] dump_stack+0x11d/0x187 [ 862.498470][T28754] should_fail.cold+0x5/0xf [ 862.502994][T28754] __should_failslab+0x82/0xb0 [ 862.507788][T28754] should_failslab+0x5/0xf [ 862.512217][T28754] __kmalloc+0x54/0x640 [ 862.516391][T28754] ? tomoyo_realpath_from_path+0x85/0x3d0 [ 862.522129][T28754] tomoyo_realpath_from_path+0x85/0x3d0 [ 862.527704][T28754] tomoyo_path_number_perm+0xff/0x360 [ 862.533116][T28754] ? _parse_integer+0x12f/0x150 [ 862.538048][T28754] ? __fget_files+0xa2/0x1c0 [ 862.542670][T28754] tomoyo_file_ioctl+0x28/0x40 [ 862.547539][T28754] security_file_ioctl+0x69/0xa0 [ 862.552495][T28754] ksys_ioctl+0x5a/0x150 [ 862.556776][T28754] __x64_sys_ioctl+0x47/0x60 [ 862.561403][T28754] do_syscall_64+0xc7/0x390 [ 862.565993][T28754] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 862.571897][T28754] RIP: 0033:0x45c889 [ 862.575822][T28754] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 862.595521][T28754] RSP: 002b:00007f9d3b36bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 862.603950][T28754] RAX: ffffffffffffffda RBX: 00007f9d3b36c6d4 RCX: 000000000045c889 [ 862.611932][T28754] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 862.620516][T28754] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 862.628492][T28754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 862.636472][T28754] R13: 00000000000003c0 R14: 00000000004c64e6 R15: 0000000000000000 [ 862.661248][T28754] ERROR: Out of memory at tomoyo_realpath_from_path. 10:10:41 executing program 2 (fault-call:5 fault-nth:1): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:10:41 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0xba3c0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000000)={0x0, 0x0, [0x0, 0x400]}) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r3) r4 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r4) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 10:10:42 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0x4000000) 10:10:42 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:10:42 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f00000000c0)={0x24, 0x7f, 0x5, 0x0, 0x5, 0x37, 0x2, 0xe1, 0x2, 0xff, 0x5, 0x32, 0x0, 0x1, 0x5, 0x5, 0x3f, 0x20, 0x1, [], 0x3, 0x4}) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x82) fchdir(r3) ioctl$MON_IOCQ_URB_LEN(r3, 0x9201) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000000)={0x0, 0x0, [0x0, 0x400]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:10:42 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0x5865) 10:10:42 executing program 1 (fault-call:7 fault-nth:0): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "000600"}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) read(r1, &(0x7f0000000100)=""/19, 0xfffffd81) 10:10:42 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4]}) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)=""/237, 0x37, 0xed, 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x15, 0x10, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r3, 0x0, 0x1}, 0x40) ioctl$EXT4_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000000)=0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:10:42 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000000)={0x0, 0x0, [0x0, 0x400]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r4 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r4) ioctl$PPPIOCSMAXCID(r4, 0x40047451, &(0x7f0000000540)=0x4) write$P9_RREADLINK(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="3a258211f663a7724bdef6a53bfce1e775d7406272274814a3f23327edb11e2daf85534aa6f5083067b0248878f07a91df1acc99e6643d3baad0a9f349be3cc11cbf51b4f7bff473e9c200351ccaefebd642492cfc5ead68cf6a0506"], 0x5c) sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) execveat(r3, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000380)=[&(0x7f0000000100)='{\x00', &(0x7f0000000140)='/dev/kvm\x00', &(0x7f0000000180)='/dev/kvm\x00', &(0x7f00000001c0)='securitytrustedself^+loself^\x00', &(0x7f0000000200)='/dev/kvm\x00', &(0x7f0000000240)='/dev/kvm\x00', &(0x7f0000000280)='\x00', &(0x7f00000002c0)='/dev/kvm\x00', &(0x7f0000000300)='/dev/kvm\x00', &(0x7f0000000340)='\'{ppp1,wlan1\x00'], &(0x7f0000000500)=[&(0x7f0000000400)='/dev/kvm\x00', &(0x7f0000000440)='/dev/kvm\x00', &(0x7f0000000480)='/dev/kvm\x00', &(0x7f00000004c0)=')\x00'], 0x100) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000001700), 0x10) 10:10:42 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "000600"}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) read(r1, &(0x7f0000000100)=""/19, 0xfffffd81) 10:10:42 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "000600"}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) read(r1, &(0x7f0000000100)=""/19, 0x11ffffe81) 10:10:43 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0x5000000) 10:10:43 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0x6000) 10:10:43 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "000600"}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x20, r4, 0x709, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) sendmsg$NL80211_CMD_STOP_AP(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000340)={0x110, r4, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x7f}, @NL80211_ATTR_TX_RATES={0xe4, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xe0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x3, 0x100, 0x5, 0x9, 0x0, 0x8001, 0xa6a]}}, @NL80211_TXRATE_HT={0x4d, 0x2, "8d8cacc7d0bad5f7f97ea6c8199d88e0d7dcf3a6ec0944410a57250958e6b79cf123cb1bcdb12b8ffc4ab7ea07ff28e6a60e0a151acf33ea033c8626b7610308265fd8c22a2515a2d3"}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, "ea40b259b15995f2c7e2802caa74c4a9d7cfcbb9800119"}, @NL80211_TXRATE_LEGACY={0x24, 0x1, "d74db9c2c7da87d9e66d2cb607736c56d19cfa2ab79134e4f2ebddf8006e58ad"}, @NL80211_TXRATE_HT={0x2e, 0x2, "34947b84780179e9aaf63e894f43c0ce4a78fb7282a669cc46ba3e0cc2e3e9174294822f5302154b7d94"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_ATTR_AUTH_TYPE={0x8}]}, 0x110}, 0x1, 0x0, 0x0, 0x10}, 0x200000e0) read(r1, &(0x7f0000000100)=""/19, 0xfffffd81) 10:10:43 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "000600"}) sendmsg$AUDIT_USER(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x512, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xb, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) getsockopt$IP_SET_OP_GET_BYINDEX(r1, 0x1, 0x53, &(0x7f00000000c0)={0x7, 0x7, 0x3}, &(0x7f0000000240)=0x28) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r2 = syz_open_pts(r0, 0x0) readv(r2, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r3) connect(r3, &(0x7f00000001c0)=@in={0x2, 0x4e24, @empty}, 0x80) read(r2, &(0x7f0000000100)=""/19, 0xfffffd81) 10:10:44 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0x6000000) 10:10:44 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0x6558) 10:10:44 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x301c82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x4, 0x100) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="4800000010", @ANYRES32, @ANYRES64=0x0, @ANYRESHEX, @ANYBLOB="0000b200080000001028e6c46714d2515270f53873fc00dd4bc786a57f4b4d"], 0x5}}, 0x8010) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r3) r4 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f00000020c0)={{{@in=@dev, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6}}, &(0x7f00000021c0)=0xe8) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xffffffffffffffdb) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="4800000010", @ANYRES32=r6, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="b50a2b03ff26096ae72600b6a6775e8b15d68a8f6e84742e38f85a2f6a1e1ffe09bdb765d93f53fc6635edd81541e43c67f50a2dd3a9ec123ff1caae37cf3233d0885a81edbaccad5a4c638e24b82948283ffefd3916b54d92296b865e39b0fdd8bed9af8753a3de7c83065d82fa46dad7d3293a9551e612df9d08be7a8847b4bc9764df4cc84b7ac8524c2e0be51990f78b71424cddb54fddc0c8205a65270ec8dd6f1f74159a6f0a016e433c20b93c9b26e4f115ca71488fbbdfc8f83f1cf5eb74ec4ddeab1468a57224955a62b7510448d2cf530d264f6c4568f05b86"], 0x5}}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000002800)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x82600000}, 0xc, &(0x7f00000027c0)={&(0x7f0000000d40)=ANY=[@ANYBLOB="8c050000", @ANYRES16=0x0, @ANYBLOB="00002cbd7000fddbdf250300000008000100", @ANYRES32=0x0, @ANYBLOB="240202803c08010024000100757365725f6c696e6b7546000000000000000000000000000000000005ffffe504000400080006000000ffeb0000000095d99343e0e5fc293e2155fb8943f6a9b60d2409cf2dfb533b153561d981d26f90bda4455263c830321390dbe90e949c0126844602eed37f4c582f3ef04225ca2ac446f56886ed6ed014e9002463b05b74dd966cd85e3485b2581111f688b6871927feb67ab5aa746614713e9711b5b4d7f02569ebe3bf4019651a3d6584d4e26a431425affe88d501bcbf5b763c50956cdc3b08a6363cad6136d4c6396304", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000080000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004006086000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400ff0300003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="4c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e67000000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="400002803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r6, @ANYBLOB], 0x58c}, 0x1, 0x0, 0x0, 0x24000040}, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000000)={0x0, 0x0, [0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x100000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="a8000000", @ANYRES16=r8, @ANYRES32=r4], 0x3}}, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000700)={0x208, r8, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK={0x8c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x20}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x800}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xb9}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xbed}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1000}, @TIPC_NLA_CON_NODE={0x8}]}]}, @TIPC_NLA_LINK={0xd0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffff01}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x868}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0xffffffffffffff63, 0x3, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1f}]}]}, @TIPC_NLA_MEDIA={0x88, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2fc0}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfe40}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc73}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x524c705b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xea}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf3}]}]}]}, 0x208}, 0x1, 0x0, 0x0, 0x48004}, 0x20040000) 10:10:44 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x200080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="3a258211f663a7724bdef6a53bfce1e775d7406272274814a3f23327edb11e2daf85534aa6f5083067b0248878f07a91df1acc99e6643d3baad0a9f349be3cc11cbf51b4f7bff473e9c200351ccaefebd642492cfc5ead68cf6a0506"], 0x5c) sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) ioctl$EVIOCSABS3F(r3, 0x401845ff, &(0x7f00000000c0)={0x33, 0xfffff801, 0x0, 0xf4, 0x10001, 0x80}) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000000)={0x20003, 0x0, [0x0, 0x3fe]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0x9, 0x400) syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000598000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000140)="0fc7330f005aa5b896008ec866b9ab09000066b80f00000066ba008000000f3066b9800000c00f326635004000000f300f20c06635100000000f22c066b9a001000066b80400000066ba000000000f30f3650f01ba008066b9800000c00f326635002000000f300f07", 0x69}], 0x1, 0x10, &(0x7f0000000240), 0x0) 10:10:44 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "000600"}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) ioctl$UI_SET_KEYBIT(r1, 0x40045565, 0x4b) r2 = syz_open_pts(r0, 0x0) readv(r2, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0xffffffff) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) read(r2, &(0x7f0000000100)=""/19, 0xfffffd81) 10:10:44 executing program 5: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x4, 0x248101) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000080)={0x1, 0x8, 0x800, 0x40000, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f00000000c0)={r4}) bind$bt_sco(r2, &(0x7f0000000100), 0x8) listen(r2, 0x0) accept4(r2, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, r1+30000000}}, 0x0) clock_gettime(0x7, &(0x7f0000000000)) tkill(r0, 0x1000000000013) 10:10:44 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "000600"}) write$binfmt_aout(r0, &(0x7f0000000340)=ANY=[@ANYRES64=r0, @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYRES32=r0, @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYBLOB="d1524ab4ecc6ae07122d211e6776541331f5ca3761bd451ad23a00db26d07f6a7c110f34feca0607042bfaa5a760b9d68cfc8cbcd0d24ff9b71fa0b42d", @ANYRES16=r0], @ANYBLOB="ba7042f3f0977d9c0300b01df8c5aeff97ce12eee4678eda777cb021319e9c0ce0b45bbe44a58a5ee86761956161856f51e9a62c5aad532333a73dfe3fd74f8847c6715c351f411176142afdcf8a8f7138dbe122bd4e", @ANYRES32, @ANYRES16]], 0x10) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r1 = syz_open_pts(r0, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)={0x4, 0x5, 0xff, 0xff, 0xc, 0x6}, 0xc) readv(r1, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) read(r1, &(0x7f0000000100)=""/19, 0xfffffd81) 10:10:44 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0x8000000) 10:10:45 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0x8100) 10:10:45 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r3) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000000c0)="66baa100ecb9b6080000b80a000000ba000000000f3066baf80cb85abfde87ef66bafc0cec0fc77ee53e660f3adff92f0fc7a9000000000f78ef66baa100b000ee26660f38821a0f78fb", 0x4a}], 0x1, 0x20, &(0x7f0000000180)=[@cstype0={0x4, 0x2}], 0x1) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r5) ioctl$KVM_RUN(r5, 0xae80, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r4, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000000)={0x0, 0x0, [0x0, 0x400]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 10:10:45 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="3a258211f663a7724bdef6a53bfce1e775d7406272274814a3f23327edb11e2daf85534aa6f5083067b0248878f07a91df1acc99e6643d3baad0a9f349be3cc11cbf51b4f7bff473e9c200351ccaefebd642492cfc5ead68cf6a0506"], 0x5c) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) ioctl$KVM_GET_EMULATED_CPUID(r2, 0xc008ae09, &(0x7f00000000c0)=""/72) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r3, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000000)={0x0, 0x0, [0x0, 0x400]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 10:10:45 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "000600"}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r1 = syz_open_pts(r0, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="3a258211f663a7724bdef6a53bfce1e775d7406272274814a3f23327edb11e2daf85534aa6f5083067b0248878f07a91df1acc99e6643d3baad0a9f349be3cc11cbf51b4f7bff473e9c200351ccaefebd642492cfc5ead68cf6a0506"], 0x5c) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) getpeername$unix(r2, &(0x7f00000001c0), &(0x7f0000000000)=0x6e) readv(r1, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) read(r1, &(0x7f0000000100)=""/19, 0xfffffd81) 10:10:45 executing program 5: r0 = gettid() fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, 0x0}) getpgid(r1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r3, &(0x7f0000000100), 0x8) listen(r3, 0x0) accept4(r3, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, r2+30000000}}, 0x0) tkill(r0, 0x1000000000013) 10:10:45 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0x9000000) 10:10:46 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0xb40f) 10:10:46 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x4000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000000)={0x0, 0x0, [0x0, 0x400]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="3a258211f663a7724bdef6a53bfce1e775d7406272274814a3f23327edb11e2daf85534aa6f5083067b0248878f07a91df1acc99e6643d3baad0a9f349be3cc11cbf51b4f7bff473e9c200351ccaefebd642492cfc5ead68cf6a0506a71be72828efea00267ffaecd45a1924ae204849bc53fae89f0c715d1c201c5e0cf0fcf65924c9a039e2d0afba1553881597f8a637f66101a8daeefd32341120e6be47cf"], 0x5c) sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f00000001c0)) write$cgroup_pid(r3, &(0x7f0000000200)=r4, 0x12) write$P9_RMKNOD(r3, &(0x7f00000000c0)={0x14, 0x13, 0x2, {0x10, 0x0, 0x6}}, 0x14) 10:10:46 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "000600"}) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f00000001c0)) sendmsg$AUDIT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x34, 0x3e9, 0x400, 0x70bd25, 0x25dfdbfe, {0x20, 0x0, 0x1, r2, 0x9, 0xffffffff, 0x4, 0x0, 0x2}}, 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) write$binfmt_aout(r0, &(0x7f0000000640)={{0x108, 0x9, 0x9, 0x37e, 0x30, 0x9, 0x3e3}, "2edf656fb6c63feb2fd054c21d5251d3391f976f3025b6742b9be45b98b234be357b315a27bcff0e4da051e9ef0236263fa02d434eca4451a5dbb8b446352650fd22975346cdc62ae86e2679710565adcde30ee618c2a0702cd90f13ffa45a077e9cef6319882c119130a1bb63951eacfc315c81925bd0e2bac6dfaedbe8f416f98658e539b19117ef3ddbe160c031b93b71caa1f1ab0bde25bad1e27f653011d9e5fa9b5617482d0bd791e92fbab00e8f969f931ffee523753a9e8fe91f64e7f3a76114534b76d2ce271d5798d44d2b7e8488b471068e58a9192a8b0a305b1fa259564c7fc07efd7c0c95f3eab91b", [[], [], [], [], [], []]}, 0x70f) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r3 = syz_open_pts(r0, 0x0) readv(r3, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) r4 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r4) ioctl$TCSETSW(r4, 0x5403, &(0x7f0000000040)={0x0, 0x4, 0x0, 0xb, 0xfe, "0003d100"}) read(r3, &(0x7f0000000100)=""/19, 0xfffffd81) 10:10:46 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0xa000000) 10:10:46 executing program 1: r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "000600"}) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xffffff78) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="3a258211f663a7724bdef6a53bfce1e775d7406272274814a3f23327edb11e2daf85534aa6f5083067b0248878f07a91df1acc99e6643d3baad0a9f349be3cc11cbf51b4f7bff473e9c200351ccaefebd642492cfc5ead68cf6a0506"], 0x5c) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x100) renameat(r2, &(0x7f0000000000)='./file0\x00', r3, &(0x7f00000001c0)='./file0\x00') r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)=""/237, 0x37, 0xed, 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x15, 0x10, 0x200004, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r4, 0x0, 0x1, 0x80000005}, 0x40) fcntl$setpipe(r4, 0x407, 0xfffffffffffffff7) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) ioctl$TIOCCONS(r1, 0x541d) r5 = syz_open_pts(r1, 0x0) readv(r5, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) ioctl$TCSETSW(r5, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) read(r5, &(0x7f0000000100)=""/19, 0xfffffd81) 10:10:46 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0xcc08) 10:10:47 executing program 5: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsu\x00', 0x80, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="3a258211f663a7724bdef6a53bfce1e775d740620627487f00f23327edb11e2daf85534aa6f5d57fefd624883baad0846249be3cc12abf878582d13c0c0b6300351ccaefebd642492cfc5ead68cf6a050600"/92], 0x5c) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000040)={0x3, 'caif0\x00', {0x4}, 0x8000}) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="3a258211f663a7724bdef6a53bfce1e775d7406272274814a3f23327edb11e2daf85534aa6f5083067b0248878f07a91df1acc99e6643d3baad0a9f349be3cc11cbf51b4f7bff473e9c200351ccaefebd642492cfc5ead68cf6a0506"], 0x5c) sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) ioctl$EVIOCGBITSND(r3, 0x80404532, &(0x7f0000000200)=""/222) openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x402000) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r5, &(0x7f0000000100), 0x8) listen(r5, 0x0) accept4(r5, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, r4+30000000}}, 0x0) tkill(r0, 0x1000000000013) 10:10:47 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x511c40, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xfc, r2, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x100}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x4}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x11}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x29}]}, @IPVS_CMD_ATTR_SERVICE={0x74, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x57}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@private=0xa010100}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @remote}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1ff}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x87}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10000}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x55e}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7ff}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0xfc}}, 0xd1) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x10004, 0x1, 0x100000, 0x1000, &(0x7f000040f000/0x1000)=nil}) mmap(&(0x7f000040f000/0x1000)=nil, 0x1000, 0x7ffff7, 0x50, r4, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 10:10:47 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000000)={0x0, 0x0, [0x0, 0x400]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x48140, 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r3) getpeername$l2tp6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000140)=0x20) 10:10:47 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0xb000000) 10:10:47 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0xf002) [ 868.991275][ T27] audit: type=1804 audit(1586945447.981:119): pid=28937 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir471544090/syzkaller.sMt66f/722/file0" dev="sda1" ino=16690 res=1 10:10:48 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x307841, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) ioctl$TIOCGISO7816(r0, 0x80285442, &(0x7f00000000c0)) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="3a258211f663a7724bdef6a53bfce1e775d7406272274814a3f2338878f07a91df1acc99e6643d3baad0a9f349be3cc11cbf51b4f7bff473e9c200351ccaefebd642492cfc5ead68cf6a050600000000000000000000000000000000d4bec8d3e9b8b7fe8451394c2741ea20774698f16e0df41a2bf3"], 0x5c) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="3a258211f663a7724bdef6a53bfce1e775d7406272274814a3f23327edb11e2daf85534aa6f59a3067b0248878f07a91df1acc99e6643d3b3fd0a9f349be3cc11cbf51b4f7bff473e9c200351ccaefebd642492cfc5ead68cf6a0506"], 0x5c) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) r3 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000000)={0x0, 0x0, [0x0, 0x400]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 10:10:48 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "000600"}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e002553e7dc888cc5b2640165ebda6e94f8504e9ad2890fc350669824a3adc007e52440a45df1f2f84995b27d015847da5f653595973826a3ee9842531effd00e951567260b7f9508bccb73769129e168b7b5030a7a54319e3c9538c8c4452ffd9774f9950367986be848f7bbf1708af8a330fd74e9d66ee3546fe24cc196080cf0bb77014e058bfb45902e26d165fd0962343d49bc7d16ab409b7058c0b60b2ff7ca456ad5ff636cdbc30f737f6ed21ec904bb9e5678ebd06892ade290cbe97c4506a348aa878b688cd4c80ea23c0200000000000000ff64f9ddd0367ac42a122d62e5ea70570e23b195ca29680f4fe35c8b0f841b8ae511e9839f550d96869861aa619706c35352e01d4ae03347e3319897993e5b9f6bbbd7c5174788c69a5af4830c87988e6193e6d9ff9daf4b03a8220361779c29eadfe8759ed8ac75d418"], &(0x7f0000000280)=""/237, 0x37, 0xed, 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x15, 0x10, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0x0, 0x1}, 0x40) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r3) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={'veth1_macvtap\x00', {0x2, 0x4e22, @remote}}) r4 = fcntl$dupfd(r2, 0xa3b1c4731ac423a6, r0) ioctl$TCSETSW(r4, 0x5403, &(0x7f0000000040)={0x30, 0x0, 0x0, 0xb, 0x4, "000900940a00003bb36ae01de3b0db000100"}) read(r1, &(0x7f0000000100)=""/19, 0xfffffd81) 10:10:48 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) ioctl$KVM_SET_FPU(r1, 0x41a0ae8d, &(0x7f0000000640)={[], 0x3f, 0xb1, 0x7, 0x0, 0xc83, 0x5000, 0x6000, [], 0xb342}) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "000600"}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)=""/237, 0x37, 0xed, 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x15, 0x10, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0x0, 0x1}, 0x40) finit_module(r2, &(0x7f0000000000)='/dev/ptmx\x00', 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\b\x00'}) r3 = syz_open_pts(r0, 0x0) readv(r3, &(0x7f0000000600)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1) ioctl$TCSETSW(r3, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0x0, '\x00\x00\x00@\x00'}) read(r3, &(0x7f0000000100)=""/19, 0xfffffd81) 10:10:48 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0xc000000) [ 869.677701][T28969] ================================================================== [ 869.686035][T28969] BUG: KCSAN: data-race in ext4_sync_file / inode_sync_complete [ 869.693660][T28969] [ 869.695996][T28969] write to 0xffff888128c618b8 of 8 bytes by task 28976 on cpu 1: [ 869.703730][T28969] inode_sync_complete+0x34/0x70 [ 869.708682][T28969] writeback_single_inode+0x27a/0x2f0 [ 869.714059][T28969] sync_inode_metadata+0x75/0xa0 [ 869.719008][T28969] ext4_sync_file+0x47a/0x8b0 [ 869.723689][T28969] vfs_fsync_range+0x7c/0x150 [ 869.728373][T28969] ext4_buffered_write_iter+0x211/0x280 [ 869.733942][T28969] ext4_file_write_iter+0xf4/0xd30 [ 869.739059][T28969] do_iter_readv_writev+0x4a7/0x5d0 [ 869.744269][T28969] do_iter_write+0x137/0x3a0 [ 869.749087][T28969] vfs_iter_write+0x56/0x80 [ 869.753600][T28969] iter_file_splice_write+0x530/0x830 [ 869.758979][T28969] direct_splice_actor+0x97/0xb0 [ 869.763936][T28969] splice_direct_to_actor+0x22f/0x540 [ 869.769516][T28969] do_splice_direct+0x152/0x1d0 [ 869.774380][T28969] do_sendfile+0x396/0x810 [ 869.778808][T28969] __x64_sys_sendfile64+0xb8/0x140 [ 869.783931][T28969] do_syscall_64+0xc7/0x390 [ 869.788471][T28969] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 869.794356][T28969] [ 869.796691][T28969] read to 0xffff888128c618b8 of 8 bytes by task 28969 on cpu 0: [ 869.804326][T28969] ext4_sync_file+0x410/0x8b0 [ 869.809973][T28969] vfs_fsync_range+0x7c/0x150 [ 869.814659][T28969] ext4_buffered_write_iter+0x211/0x280 [ 869.820216][T28969] ext4_file_write_iter+0xf4/0xd30 [ 869.825359][T28969] do_iter_readv_writev+0x4a7/0x5d0 [ 869.830565][T28969] do_iter_write+0x137/0x3a0 [ 869.835170][T28969] vfs_iter_write+0x56/0x80 [ 869.839781][T28969] iter_file_splice_write+0x530/0x830 [ 869.845171][T28969] direct_splice_actor+0x97/0xb0 [ 869.850285][T28969] splice_direct_to_actor+0x22f/0x540 [ 869.855667][T28969] do_splice_direct+0x152/0x1d0 [ 869.860528][T28969] do_sendfile+0x396/0x810 [ 869.864955][T28969] __x64_sys_sendfile64+0xb8/0x140 [ 869.870080][T28969] do_syscall_64+0xc7/0x390 [ 869.874596][T28969] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 869.880481][T28969] [ 869.882804][T28969] Reported by Kernel Concurrency Sanitizer on: [ 869.888967][T28969] CPU: 0 PID: 28969 Comm: syz-executor.0 Not tainted 5.6.0-rc1-syzkaller #0 [ 869.897634][T28969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 869.907691][T28969] ================================================================== [ 869.915760][T28969] Kernel panic - not syncing: panic_on_warn set ... [ 869.922355][T28969] CPU: 0 PID: 28969 Comm: syz-executor.0 Not tainted 5.6.0-rc1-syzkaller #0 [ 869.931050][T28969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 869.941111][T28969] Call Trace: [ 869.944527][T28969] dump_stack+0x11d/0x187 [ 869.948877][T28969] panic+0x210/0x640 [ 869.952796][T28969] ? vprintk_func+0x89/0x13a [ 869.957408][T28969] kcsan_report.cold+0xc/0xf [ 869.962022][T28969] kcsan_setup_watchpoint+0x3fb/0x440 [ 869.968369][T28969] ext4_sync_file+0x410/0x8b0 [ 869.973063][T28969] ? generic_perform_write+0x26a/0x320 [ 869.978548][T28969] ? __read_once_size.constprop.0+0x20/0x20 [ 869.984461][T28969] vfs_fsync_range+0x7c/0x150 [ 869.989164][T28969] ext4_buffered_write_iter+0x211/0x280 [ 869.994733][T28969] ext4_file_write_iter+0xf4/0xd30 [ 869.999960][T28969] ? common_file_perm+0x1d1/0x490 [ 870.004994][T28969] ? find_get_entry+0x21d/0x340 [ 870.010012][T28969] do_iter_readv_writev+0x4a7/0x5d0 [ 870.015232][T28969] do_iter_write+0x137/0x3a0 [ 870.019843][T28969] ? __kmalloc+0x21c/0x640 [ 870.024283][T28969] vfs_iter_write+0x56/0x80 10:10:49 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0xfc03) [ 870.029071][T28969] iter_file_splice_write+0x530/0x830 [ 870.034525][T28969] ? page_cache_pipe_buf_release+0xf0/0xf0 [ 870.040358][T28969] direct_splice_actor+0x97/0xb0 [ 870.045484][T28969] splice_direct_to_actor+0x22f/0x540 [ 870.050903][T28969] ? generic_pipe_buf_nosteal+0x20/0x20 [ 870.056462][T28969] do_splice_direct+0x152/0x1d0 [ 870.061431][T28969] do_sendfile+0x396/0x810 [ 870.065882][T28969] __x64_sys_sendfile64+0xb8/0x140 [ 870.071017][T28969] do_syscall_64+0xc7/0x390 [ 870.075539][T28969] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 870.081599][T28969] RIP: 0033:0x45c889 [ 870.085508][T28969] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 870.105117][T28969] RSP: 002b:00007fea954c0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 870.113979][T28969] RAX: ffffffffffffffda RBX: 00007fea954c16d4 RCX: 000000000045c889 [ 870.121959][T28969] RDX: 0000000020000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 870.129935][T28969] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 870.137914][T28969] R10: 00008080fffffffe R11: 0000000000000246 R12: 00000000ffffffff [ 870.145906][T28969] R13: 00000000000008d6 R14: 00000000004cb7ee R15: 000000000076bf0c [ 870.156300][T28969] Kernel Offset: disabled [ 870.160628][T28969] Rebooting in 86400 seconds..